Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/234b57f7-d6ba-3b20-a095-156005a05a93.roa
File:                     234b57f7-d6ba-3b20-a095-156005a05a93.roa (raw, json)
Hash identifier:          C93DY3DC/VqYWEW0e3H3h2jLuc8Sm9YgiEylV5zMSNc=
Subject key identifier:   78:33:90:38:BD:E5:35:47:21:76:69:17:63:73:3D:67:49:87:07:50
Certificate issuer:       /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial:       010D0C9F4328584DE15080A05EBABA06DD8C0300
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/234b57f7-d6ba-3b20-a095-156005a05a93.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     32688
IP address blocks:        66.6.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:80:a0:5e:ba:ba:06:dd:8c:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=9606489c-2f3a-4aed-9098-6ad0873c3e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:3e:0d:33:92:34:e3:bc:e4:bb:27:58:0e:
                    98:6d:b3:5f:ae:2d:f2:b9:ed:14:d1:56:f6:4d:70:
                    14:ec:19:4a:87:41:f8:a9:be:25:aa:c6:78:2a:14:
                    6a:72:35:13:8f:77:0e:ac:30:6a:aa:28:c6:48:1a:
                    57:e4:6f:ff:eb:e4:de:15:4b:44:44:00:d5:6c:d3:
                    57:b3:52:20:8f:59:fb:ef:56:de:82:58:a2:84:e9:
                    49:4c:6a:13:a6:18:86:d5:55:67:86:4d:5b:1e:b3:
                    9b:1e:69:98:4c:bb:0f:99:63:a9:4e:d4:75:36:e7:
                    6f:57:2c:36:1a:2e:f1:63:b2:33:0b:ac:a9:b9:4a:
                    8c:e6:91:5e:9f:e0:5d:f8:43:0d:9a:9a:0c:dd:28:
                    a2:09:ee:ff:a8:33:cc:70:de:46:11:a4:85:bb:9f:
                    27:cb:2d:5b:86:74:8c:f0:a6:4b:56:c7:8c:c5:ac:
                    89:15:7e:1b:b3:6e:50:5e:da:e2:7a:76:38:1e:4e:
                    9a:4d:a1:58:a7:63:af:7b:77:7a:4d:1d:05:15:31:
                    a1:27:f3:7f:3c:cb:13:8c:13:52:9f:fc:ef:f1:28:
                    9e:48:0c:c6:03:ce:ef:b8:86:8f:5f:7b:d6:3e:f2:
                    85:d3:08:6a:e9:28:b6:da:f2:16:d7:6d:e3:3a:80:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:33:90:38:BD:E5:35:47:21:76:69:17:63:73:3D:67:49:87:07:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/234b57f7-d6ba-3b20-a095-156005a05a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:42:4c:e9:a1:f2:68:86:a5:0e:e0:98:ce:b6:c5:5d:b6:
         d0:57:25:33:43:2a:d9:88:3c:a9:93:d9:41:c9:fd:f2:4c:97:
         e6:23:5a:5f:d0:9b:eb:05:62:8a:ec:13:b3:61:89:76:2d:47:
         0e:10:73:66:3b:4c:4d:80:6f:95:19:82:01:be:7b:e3:fc:f7:
         58:5d:e5:6f:d6:73:9a:fb:24:95:7b:9e:b6:03:f9:0c:71:1b:
         11:31:e4:05:8b:8d:1b:ad:fd:14:8b:61:2f:85:1b:40:ed:88:
         d4:03:e2:c9:51:dc:26:34:fe:31:b8:cf:bd:2a:07:11:85:97:
         40:73:01:39:89:44:3f:e2:10:9b:95:94:6f:28:65:94:a1:be:
         37:ec:fb:34:77:28:f0:2f:ae:05:c4:bb:4e:9e:67:02:20:39:
         63:9a:b2:f3:d1:db:fc:fd:10:e1:5e:d0:37:6c:63:46:67:c6:
         97:bf:d9:84:ab:90:22:2d:d3:7b:8c:ce:11:c6:d7:8f:1e:b9:
         fc:6b:1b:1a:3d:95:64:a4:fc:7a:21:74:44:5a:6d:2d:86:75:
         e8:a1:ab:0f:af:91:f4:26:b7:94:84:e1:42:28:34:0a:fc:f1:
         32:a9:d8:20:99:b5:89:ed:32:3d:4d:38:76:3e:af:06:f1:eb:
         79:09:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 07:52:59 2026 by rpki-client