Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b7002fd1-afe1-3d01-ac55-89a82eefca3e.roa
File:                     b7002fd1-afe1-3d01-ac55-89a82eefca3e.roa (raw, json)
Hash identifier:          qhbE7eDxNCitaZkoeFOVa3nS6rOAeTCvMQ2i+h2gUAY=
Subject key identifier:   0E:BA:BE:87:C6:F6:B0:C3:DC:5A:BA:04:F7:02:78:7D:DD:77:61:AA
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584E174985076C87171B5B3A7CC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b7002fd1-afe1-3d01-ac55-89a82eefca3e.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     16740
IP address blocks:        66.39.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:85:07:6c:87:17:1b:5b:3a:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=cf2a08ca-8345-4e9b-a125-fe89f1d2a79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:09:fa:b4:df:28:f2:12:c2:0a:1a:0c:de:
                    b9:0b:90:c6:9d:ec:2b:63:78:0c:72:fd:6d:71:9a:
                    8f:6e:c7:f3:3c:b8:a7:af:c4:2c:3a:08:0f:16:9e:
                    3f:e2:28:db:7e:a7:b2:0d:72:ee:9b:48:de:fc:83:
                    39:fc:f1:8a:43:79:e9:34:72:b5:67:2c:43:0b:b7:
                    a2:49:0d:ac:b6:2d:e2:fd:69:63:ed:b7:b0:04:f6:
                    85:b6:24:be:8c:51:54:c0:c4:96:9e:d1:31:e9:5e:
                    1d:f6:d2:b2:e1:74:a7:42:be:29:aa:47:c9:fc:46:
                    29:5b:63:fa:d0:55:63:b8:76:29:ba:ad:35:3b:6d:
                    9a:b5:6a:c7:99:ac:95:8e:ac:4d:09:2a:8c:7a:c2:
                    06:3b:f8:3f:2a:a0:52:b6:d6:99:2b:8f:ad:38:1a:
                    55:dd:41:d1:69:3e:13:4b:48:d9:52:a1:f5:0c:5f:
                    84:4c:65:d4:fc:cb:9f:5f:96:9d:28:4a:c2:e1:f0:
                    12:5f:80:f8:8e:73:8f:08:8a:5c:03:ce:26:80:8f:
                    62:4a:33:8d:a9:3d:50:ad:67:7e:fd:79:b0:90:cd:
                    0f:2d:01:3d:7a:25:1d:92:43:ae:e2:4e:c7:ed:37:
                    d4:eb:55:2b:48:53:ad:f9:40:4d:5e:83:4e:e3:17:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:BE:87:C6:F6:B0:C3:DC:5A:BA:04:F7:02:78:7D:DD:77:61:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b7002fd1-afe1-3d01-ac55-89a82eefca3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:be:f8:54:24:e9:02:e3:73:4c:2b:43:8e:44:40:5c:9c:59:
         7e:cf:c8:59:42:c9:ad:2c:c8:e6:fe:00:d8:90:8b:58:05:9a:
         aa:fd:17:f8:e7:12:c8:10:59:f5:2c:5a:2f:6e:28:c3:74:e6:
         21:1f:a7:56:36:14:c6:31:16:26:d1:72:60:89:fa:3e:cc:34:
         3b:c2:d7:80:66:be:a9:65:4e:db:68:e4:b5:f2:cd:d4:a4:44:
         bc:a4:10:be:7a:0c:cc:e6:e1:51:d5:9a:30:25:56:df:29:cb:
         b6:20:35:7c:8d:06:c0:42:98:59:be:6d:ed:c5:8d:69:ad:78:
         1e:c5:81:0e:ec:97:e1:1a:68:1d:63:2f:d3:7e:92:66:6e:fa:
         1e:a7:a2:4e:29:98:68:6f:ec:ae:00:3b:04:81:f0:7b:de:c8:
         4e:b1:97:04:78:c9:c4:7e:7e:b3:8f:30:43:af:42:e9:b0:9e:
         3d:db:be:03:ad:12:4c:23:09:09:2a:40:1a:9e:95:54:65:6a:
         4f:e7:68:b2:7d:81:ea:7f:04:df:a4:f0:3d:bb:74:03:79:1d:
         08:d4:fe:15:20:8b:0b:52:ff:ba:0b:46:f9:c9:2d:79:0d:99:
         24:b8:db:de:cb:18:f7:eb:e9:3a:cb:af:26:1b:17:52:cb:d0:
         b8:22:39:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:50 2026 by rpki-client