Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa
File:                     ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa (raw, json)
Hash identifier:          009MI7Y8E+ACIcQZ0ojnDeS6SZXAP+mppzWBkCR7XEY=
Subject key identifier:   CD:4D:1D:F2:76:DD:10:44:49:A4:36:45:36:C1:A4:DC:19:EE:9D:84
Certificate issuer:       /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial:       010D0C9F4328584DE150A3C6BD7B24F754359980
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     32688
IP address blocks:        66.6.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a3:c6:bd:7b:24:f7:54:35:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=550d6d54-b3f6-49be-8156-1374b7e2305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:19:24:57:07:13:5e:ab:37:19:ec:e6:7b:a2:
                    47:af:49:f1:ab:44:2e:05:de:97:c8:b5:25:11:f6:
                    5d:f3:5a:da:01:6c:4f:17:19:91:59:7b:82:67:5f:
                    70:ff:64:41:31:1b:c5:27:3a:95:0a:49:d6:29:82:
                    12:cf:2c:49:b7:d2:7d:c6:bf:34:3a:dd:4f:50:b7:
                    04:3a:9a:0a:14:64:82:5e:e0:7d:5d:87:db:25:49:
                    29:a6:6f:34:86:f2:a1:b3:96:ef:c3:be:1e:66:be:
                    03:87:36:5f:0f:fd:30:b3:b6:dc:86:91:a2:d9:d8:
                    a8:9a:66:ec:03:c0:e8:7b:b1:5a:6b:9d:f1:00:80:
                    61:9b:8f:29:a1:b5:8f:ff:44:65:b9:d5:32:fe:2d:
                    5f:b4:10:0f:4a:5b:1c:7b:28:a7:3c:ec:19:ec:ad:
                    a0:40:a3:3e:2a:da:23:8f:ef:1d:20:d4:40:5a:df:
                    cb:ff:67:e4:77:48:2f:bb:72:dd:9b:dd:ad:88:e5:
                    84:75:5d:4e:48:d6:ab:bf:0b:44:b7:b8:f8:a1:94:
                    cb:79:16:85:a4:cd:31:aa:d5:cf:46:9d:96:4c:1b:
                    4c:ac:00:76:1a:6a:d3:e7:ad:63:e9:2e:e8:25:d9:
                    33:70:91:75:bb:cf:ba:5f:ad:16:29:b8:80:c7:15:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4D:1D:F2:76:DD:10:44:49:A4:36:45:36:C1:A4:DC:19:EE:9D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ce448faf-eaf5-33d5-83aa-d7b4b794f492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:f0:42:e3:74:c5:0b:d9:18:91:c0:b2:f8:78:2d:ed:62:
         fa:d8:12:88:e4:f6:1f:f4:68:8c:52:e6:35:26:48:49:c0:bd:
         9b:bd:3e:ad:c0:e1:ba:7c:60:20:a2:0e:0f:c8:32:b3:53:fe:
         43:b4:c5:72:ec:95:ae:14:e7:ae:fb:1e:34:de:e8:51:aa:6f:
         db:70:a2:99:d8:70:2d:8c:f7:30:51:d8:85:8b:fd:10:4e:6c:
         14:17:e2:4f:10:29:af:64:96:13:a3:4e:19:33:b3:32:78:cb:
         25:8f:24:68:0c:86:a4:8c:a6:cc:17:66:df:d1:87:2b:bc:ca:
         94:81:24:46:bf:5d:7b:f2:c0:f8:20:b7:fc:ec:30:7d:4a:b1:
         78:5f:da:d9:f5:fa:f7:05:c8:7f:60:39:9a:0c:c5:0a:41:3e:
         7b:3d:30:42:ba:3b:d5:2a:d8:e8:72:9b:b6:60:73:11:31:6d:
         a9:54:a6:e4:bd:da:ca:82:39:30:3c:93:4f:63:e5:7b:5c:2b:
         82:ab:01:b3:29:8d:68:f4:0e:0f:92:d7:e8:9c:9a:bf:e8:4a:
         6e:23:54:96:78:b5:da:4d:7f:5a:30:df:dd:48:b6:b0:74:48:
         24:fc:3c:cb:97:7f:b7:99:63:02:26:35:8e:32:36:7f:93:b2:
         81:f5:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 07:51:58 2026 by rpki-client