Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa
File:                     0f12323c-5fd1-37a6-acce-132960ca17c7.roa (raw, json)
Hash identifier:          lxqP7HJRQaIcVHVM5PrDBO+xaqyc1xb2sCLQyEk5mKo=
Subject key identifier:   32:77:D0:1F:B4:23:7B:63:80:F2:50:EB:AB:6E:E9:DD:8D:C5:EF:D4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AA8A5018527DAAAC9973C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        66.249.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:8a:50:18:52:7d:aa:ac:99:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=bdbeff9e-927c-4411-81e6-4ecd612280f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:97:ff:f2:fd:57:5a:bb:52:d3:fa:4f:5c:
                    31:61:16:ff:47:8f:0e:f0:d8:39:fd:2e:b5:c8:49:
                    87:94:6e:29:bf:20:2e:5b:a9:4a:04:47:cc:ac:02:
                    a1:ba:2d:ce:01:ce:a9:a8:19:eb:1e:69:d5:52:97:
                    b0:ef:dc:5a:ae:71:4b:99:a9:2f:fb:c2:c1:d5:d6:
                    17:87:0f:7d:a0:28:db:ee:33:98:db:35:c2:95:06:
                    ca:bc:3e:fc:d2:06:6e:b4:ea:4f:07:59:8e:9f:6c:
                    bd:16:4b:b2:1b:16:02:5a:17:b9:df:3a:d8:cd:3b:
                    cd:c5:30:f5:3e:46:62:b8:dd:00:25:69:74:83:68:
                    ef:a3:79:41:c5:eb:bf:e6:7f:85:3a:fc:6d:7d:64:
                    0f:b4:26:f7:fd:be:fd:cc:5c:48:93:f2:d4:3f:05:
                    32:e9:7b:66:21:5e:30:5e:d7:f6:df:cf:98:8b:f0:
                    61:ac:c7:f8:fc:68:75:ef:3c:c4:56:fe:9e:0e:26:
                    74:5d:53:1e:1a:38:43:f3:c5:65:3f:40:aa:eb:3d:
                    94:64:78:3c:7f:d2:26:a0:66:ff:1e:4e:67:22:ec:
                    78:29:fb:80:f9:cf:e6:f3:15:33:dd:86:fe:aa:9c:
                    56:fd:e0:10:cc:ae:84:b0:e5:8e:c0:a8:4b:fa:3d:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:77:D0:1F:B4:23:7B:63:80:F2:50:EB:AB:6E:E9:DD:8D:C5:EF:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f12323c-5fd1-37a6-acce-132960ca17c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:a2:28:e8:c2:75:92:41:e2:ee:c0:86:7f:6d:23:4f:d6:
         fe:9d:0e:90:a1:10:a8:a7:d1:57:ef:8d:e8:41:33:50:bb:20:
         5e:bc:a7:05:8e:89:93:f6:86:fb:f1:39:5f:33:41:20:52:c1:
         67:37:eb:14:90:1f:81:e7:cf:cc:22:76:c8:cb:8e:47:bf:b1:
         95:e2:c7:47:e1:7f:85:ae:df:27:ea:13:9e:26:16:1b:09:e4:
         d7:66:a0:9d:a3:39:98:1a:29:24:52:9a:b8:6a:08:69:4a:aa:
         83:87:18:d4:f7:7e:c5:a9:a6:d9:03:fc:ce:8e:a0:10:a1:8a:
         ae:d7:7f:bf:a7:fc:3d:eb:0b:45:37:ac:6d:53:86:03:39:da:
         bf:82:e6:a2:37:39:27:68:9b:0b:03:64:43:52:b7:1f:34:08:
         67:0e:58:d7:cf:d7:73:c7:10:b4:b3:e1:9d:eb:04:23:04:75:
         ae:f7:61:ee:d6:19:ce:14:04:15:e6:20:f8:ca:57:66:71:c9:
         15:be:6e:88:d7:01:d6:c3:c7:97:18:8f:00:7e:07:b8:7c:ce:
         ce:a5:ae:ff:57:49:ef:e9:ff:a6:a2:4c:66:36:78:54:a6:67:
         26:88:a5:35:ef:19:c5:9d:a1:57:73:81:14:91:cf:3d:f9:88:
         79:9c:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:53 2026 by rpki-client