Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/230bf9fc-8e97-37cd-845e-fbc8c74192a4.roa
File:                     230bf9fc-8e97-37cd-845e-fbc8c74192a4.roa (raw, json)
Hash identifier:          EIA78thH7pwP6Nj+W4Pj3wpyaNXL4mSklIEOXRVYZoM=
Subject key identifier:   3E:77:98:63:63:E8:44:C9:AA:E9:44:DC:36:FA:D8:86:93:0A:7A:0A
Certificate issuer:       /CN=f488b7b9-ef6e-4097-9207-940bc62289f1
Certificate serial:       010D0C9F4328584EA17A5D3A180C91BD0B1F2480
Authority key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/230bf9fc-8e97-37cd-845e-fbc8c74192a4.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     59117
IP address blocks:        66.235.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:5d:3a:18:0c:91:bd:0b:1f:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f488b7b9-ef6e-4097-9207-940bc62289f1
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=fdce037d-bed9-4369-8138-3c4beb9581c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2c:96:3e:34:e9:ad:01:05:7a:6e:46:96:63:
                    8f:7f:1b:3d:4e:ef:ea:e6:5b:f6:34:bd:ca:a3:19:
                    a1:80:9f:05:be:ca:b8:3e:e5:37:9f:eb:80:96:df:
                    fa:9f:12:75:ae:6e:84:c3:8e:d9:48:6a:13:e4:37:
                    f2:e7:ce:29:5d:c5:86:42:f3:1d:4d:0b:6e:bb:97:
                    9a:00:33:46:0e:c3:36:8c:74:89:51:1a:80:e6:f0:
                    13:d6:50:90:83:1b:1e:6e:62:06:9c:dc:85:02:0f:
                    b4:90:f9:18:27:05:fe:7c:39:99:95:d3:4d:e8:ed:
                    e2:9c:e0:63:49:9a:ca:3a:21:11:7c:ef:a4:74:4f:
                    c7:1c:ce:49:fb:98:02:a3:5a:f8:d0:58:5c:12:b4:
                    6e:7b:4c:58:bc:fe:53:e8:84:d1:c2:34:92:e3:8b:
                    73:81:82:49:9d:58:bd:37:31:1c:93:7e:65:8d:82:
                    50:99:f6:ed:fc:94:14:df:de:50:ff:68:b6:18:70:
                    5d:4e:fa:1e:54:cd:fa:61:f1:d4:f8:27:72:69:20:
                    88:c2:44:e9:2f:6a:85:2c:b1:15:e5:ab:03:b9:da:
                    3f:8d:86:ba:80:1f:18:21:75:ae:97:f5:e1:06:1d:
                    6e:21:01:78:e0:ba:fe:7c:72:90:fe:5f:5e:1e:6b:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:98:63:63:E8:44:C9:AA:E9:44:DC:36:FA:D8:86:93:0A:7A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/230bf9fc-8e97-37cd-845e-fbc8c74192a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:d5:ba:92:77:e0:f0:c8:db:ae:ba:37:03:2d:45:fa:87:
         46:15:fd:6d:40:9c:c5:89:a9:c0:a7:6c:5b:24:46:6f:6a:cd:
         b3:87:c4:1d:eb:ff:c4:2c:99:ea:dd:f4:62:c0:a0:3f:73:4b:
         b9:c3:c7:ba:50:1c:c2:3a:01:66:2e:c6:9f:8c:be:6f:6e:ca:
         1e:dc:21:ac:08:af:e4:52:82:a5:35:d0:aa:da:f1:ec:8d:39:
         9b:77:1b:fc:9e:7b:00:70:96:51:30:8f:d8:e7:99:26:9e:56:
         6d:ae:08:28:1b:b5:6e:e2:ec:b4:0b:79:d8:dd:f9:d6:01:17:
         95:b4:25:27:d1:63:ae:8e:e1:1a:fc:7a:73:61:09:1d:b4:85:
         ee:f1:c6:d6:a5:2f:07:15:52:84:81:3d:0f:37:94:ec:63:1c:
         9c:16:69:1e:25:1d:29:c2:41:25:19:04:6c:58:2d:24:68:85:
         69:f0:c4:3b:81:4f:46:7b:cc:33:e6:aa:b1:46:80:ee:d4:2c:
         f7:d3:e9:c2:10:15:92:72:16:d9:83:7e:51:eb:fe:14:3b:e1:
         26:e7:9c:71:ce:9b:da:95:27:89:c8:fa:10:be:09:5a:12:0e:
         5d:90:56:e5:92:7d:56:ac:78:9e:7e:bf:34:20:6f:2e:d6:f7:
         e2:04:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:38 2026 by rpki-client