Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/17ec64a0-d667-3c61-94a8-e5788222ed49.roa
File:                     17ec64a0-d667-3c61-94a8-e5788222ed49.roa (raw, json)
Hash identifier:          V2WVZIEV+PDEalRxKHNS2cgmZikS8XS9CQnjxd3O5SU=
Subject key identifier:   FE:F9:F8:82:D7:28:25:6E:28:0C:20:16:60:D3:EC:9C:BD:3C:59:12
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584E779A35E8AC7CB0C2CD227240
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/17ec64a0-d667-3c61-94a8-e5788222ed49.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     13536
IP address blocks:        216.114.157.0/24 maxlen: 24
                          216.114.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:35:e8:ac:7c:b0:c2:cd:22:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=d40d0f73-5870-49fa-a299-70967754460e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:f9:a1:e8:e9:ab:85:8a:84:1e:64:05:57:
                    f2:13:81:2d:ad:2f:27:31:6a:1d:1c:82:f2:32:a4:
                    62:7c:a5:49:f0:a8:34:ae:76:ae:a8:9e:31:77:fb:
                    14:e6:5b:ba:93:fd:f8:96:10:a4:93:d7:69:90:b2:
                    ea:08:6a:01:76:2d:73:20:8b:fb:91:4a:a7:37:c2:
                    be:be:1a:96:88:15:8a:50:2e:d3:1b:0a:71:59:69:
                    ad:6c:4a:be:9c:a2:46:ad:2e:72:3b:9a:7f:d7:2a:
                    73:29:85:ea:42:4c:56:47:41:d5:2a:c5:35:42:af:
                    28:7c:e6:94:18:ed:d2:d6:da:7e:df:45:83:4f:90:
                    92:86:b8:33:ad:19:8b:58:19:6d:3b:3f:ce:be:5d:
                    cb:0d:08:79:2d:ff:c7:bf:3c:9a:eb:80:c9:09:d0:
                    a0:d5:ce:7b:03:12:0c:7c:41:4b:34:69:28:c1:1b:
                    61:7e:7b:8a:9f:c4:8d:8e:fc:24:1e:78:be:1d:cc:
                    6b:b9:7b:0e:d8:66:6f:46:b4:c0:72:41:e1:2d:46:
                    2e:fc:1d:47:de:24:2e:27:b5:83:3f:51:48:64:cc:
                    07:19:31:f9:3a:a0:1b:5c:56:36:53:44:bd:60:78:
                    25:56:86:f8:fe:73:eb:bd:20:32:db:f2:85:0b:e0:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:F8:82:D7:28:25:6E:28:0C:20:16:60:D3:EC:9C:BD:3C:59:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/17ec64a0-d667-3c61-94a8-e5788222ed49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.114.157.0-216.114.158.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:5b:3e:d8:7b:92:d3:24:00:82:cf:41:0b:6f:2f:7b:f0:43:
         ee:65:92:68:bf:7a:e8:9c:e3:04:40:2e:2e:6f:78:c0:d2:72:
         8e:5a:e2:4c:34:a6:e8:de:8d:0f:1f:bb:b2:6c:62:ec:61:d9:
         fd:8c:88:49:d0:28:79:41:a4:82:4f:ab:59:42:1a:4e:55:87:
         56:c4:ab:53:1f:57:12:36:8e:ba:9c:82:dc:70:d0:69:04:ba:
         b5:e2:8c:18:11:c6:ae:81:b8:14:b6:7a:16:87:89:03:6c:68:
         b7:78:0f:13:5c:a1:8f:29:3f:71:de:25:a2:03:0b:55:9d:53:
         3e:36:d0:4f:90:b2:3c:a6:f9:bd:5a:5b:4d:32:4d:78:fc:28:
         f6:90:49:1e:e6:4f:9a:85:af:ae:a5:4c:f4:e2:50:e0:81:47:
         28:83:7a:ee:1e:6a:c9:30:d6:de:b4:a0:e0:94:92:5a:52:44:
         a2:b7:ed:14:8e:ac:88:ea:b0:0f:41:a5:99:ac:fe:e9:82:97:
         b6:2b:e3:c3:fb:6b:f2:b4:2f:23:86:f4:ce:b4:a3:e0:a5:50:
         d9:10:8c:d8:6a:4b:d8:58:0c:fb:d9:69:31:38:31:00:e6:5c:
         d8:34:04:22:de:71:a7:e0:51:5c:1d:f5:a7:3e:fd:dd:65:24:
         0d:3b:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:55:25 2026 by rpki-client