Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
File:                     cca54213-030a-3b3d-90f9-2b547482f0e0.roa (raw, json)
Hash identifier:          dA2tTKOUp3yCjoHM8PCldbmCDpqA3OX+qgJNVDlNn00=
Subject key identifier:   87:2F:1D:73:C6:B1:74:34:F3:4D:B7:A5:1B:8B:9F:FC:41:8F:7E:0A
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328584CCE71F58C689613563C8CCF80
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        66.43.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:f5:8c:68:96:13:56:3c:8c:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=98c658ad-1ceb-416c-b613-13bad60c31b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:00:a5:10:79:76:10:f3:46:3a:1f:18:80:
                    63:08:d9:eb:1a:99:47:f9:63:58:ef:db:4b:16:b1:
                    54:7b:81:f8:59:3f:ef:80:67:23:59:54:3c:a3:25:
                    56:8b:5b:a7:78:ab:b1:49:31:b8:bf:a9:47:1e:85:
                    ad:e9:6c:87:de:79:dd:8b:cf:75:5e:7c:36:7e:06:
                    a4:7d:53:e5:8e:32:01:ea:55:e1:ec:dd:b3:62:87:
                    66:09:78:f6:83:53:05:6e:79:7c:51:65:38:cf:34:
                    d2:90:ba:64:c9:e4:9b:10:56:4f:df:6f:36:44:53:
                    dd:3b:47:f9:73:7d:16:6f:22:44:b0:01:5f:6e:8c:
                    dc:4c:86:2b:62:d0:88:88:df:15:b9:52:63:51:65:
                    4a:94:5a:bd:f0:54:f3:c7:15:45:c2:22:37:c0:17:
                    ae:21:39:ed:44:75:c7:c8:b5:ab:f1:6d:26:06:36:
                    b2:0d:59:1f:e2:4f:ce:2d:75:41:57:66:39:3c:65:
                    a8:a2:25:de:a3:8e:c4:86:a9:83:4c:db:c7:22:78:
                    31:42:91:bf:a2:f2:2f:90:f1:65:e6:ed:60:41:5a:
                    2d:de:ff:4d:7d:99:57:f6:ba:d0:c9:d3:76:04:ae:
                    0c:99:68:ad:ce:ea:0d:d5:cc:fe:86:b5:12:b8:75:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:1D:73:C6:B1:74:34:F3:4D:B7:A5:1B:8B:9F:FC:41:8F:7E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/cca54213-030a-3b3d-90f9-2b547482f0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:27:4a:d7:1d:e2:74:34:5e:cc:81:5d:0c:f3:ce:52:32:
         9f:ee:bd:e8:b6:76:b3:d0:af:07:bb:a1:85:ff:f7:4c:53:9c:
         04:53:bf:3f:50:42:d8:dd:1d:02:ed:03:af:9d:9a:0c:a9:92:
         3b:fd:94:29:94:56:67:c6:d8:49:aa:a7:78:23:30:71:71:4f:
         0a:b5:ab:9e:bc:3f:79:32:5a:44:13:fc:c0:18:39:75:e3:81:
         e0:bf:3e:4e:2e:5b:ff:c3:99:80:fa:09:2a:23:1c:ab:75:4a:
         9c:07:20:2f:a3:39:7e:d3:19:01:5f:f8:53:4c:62:ad:e4:3d:
         e3:a0:73:09:f0:b7:5e:76:6d:2f:06:d2:37:e7:4b:31:1b:04:
         4a:9c:c8:e9:26:36:35:c7:21:5a:93:78:92:1c:ce:d9:5a:5a:
         cf:b8:08:0e:bc:0b:4a:04:79:39:e5:9f:fd:8d:29:0c:d4:ac:
         9a:e1:94:3b:3e:33:65:b3:ee:e8:24:11:92:38:18:fc:ca:04:
         4d:ad:c7:05:91:15:e2:1d:fa:1a:8a:b6:22:12:48:09:ea:b6:
         72:2d:3d:6c:17:f9:c1:7f:6a:56:97:54:21:f8:6e:60:5c:f2:
         b5:59:f4:cd:c6:eb:58:0e:57:2b:a0:97:4c:2f:16:71:8b:ad:
         56:ef:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:40 2026 by rpki-client