Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/d740b0f2-708e-30a2-84cd-e9fc0519318d.roa
File:                     d740b0f2-708e-30a2-84cd-e9fc0519318d.roa (raw, json)
Hash identifier:          Lw1FafnsEQEvESQYeNBygjmwqkYA+F33QYBJZQ+czQ0=
Subject key identifier:   59:A9:F6:C0:72:72:62:6B:6E:71:DE:6B:0E:F1:A6:5E:E2:F5:6F:AD
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584DE5EEA389002FF3AE44506200
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/d740b0f2-708e-30a2-84cd-e9fc0519318d.roa
Signing time:             Wed 20 May 2026 16:42:31 +0000
ROA not before:           Wed 20 May 2026 16:42:31 +0000
ROA not after:            Tue 18 Aug 2026 16:42:31 +0000
asID:                     62667
IP address blocks:        66.241.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:ee:a3:89:00:2f:f3:ae:44:50:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: May 20 16:42:31 2026 GMT
            Not After : Aug 18 16:42:31 2026 GMT
        Subject: CN=57f351af-4284-4dbc-b89e-e7632f3dad77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:f8:49:f0:99:b8:14:58:01:f9:f6:bb:85:
                    1f:b9:c9:11:63:24:ad:86:42:c2:80:cb:ca:ec:09:
                    20:c6:6c:11:7e:72:4d:1d:9b:f7:79:04:51:b1:3b:
                    0b:3b:38:46:bb:36:72:76:ce:1b:64:9a:a9:cf:5e:
                    17:0e:97:04:e0:42:4e:30:c7:2d:a8:42:47:37:f4:
                    68:81:75:d3:c5:eb:b7:3c:44:19:b5:ed:b0:b2:03:
                    b7:4f:04:35:7c:a9:cc:ac:a5:1d:af:db:d7:3f:f0:
                    c9:2b:05:a8:7d:b1:1e:ab:3e:c7:a6:1b:0b:e6:c8:
                    eb:83:0a:23:a9:e7:e2:e0:f4:fc:13:7a:fa:b1:33:
                    64:12:0a:32:4a:e1:bd:8f:41:ac:93:07:6f:1a:d3:
                    57:6f:df:64:1a:9f:4d:9b:3b:b0:74:d0:30:df:9f:
                    3c:60:c4:95:74:a4:86:58:e4:c7:18:d0:c3:de:9d:
                    ab:e8:61:1b:dd:06:99:e3:6d:82:6e:44:ff:c8:54:
                    b5:5f:b9:00:4d:c9:6b:08:01:71:06:a4:2a:23:30:
                    06:81:d8:63:c5:df:c1:96:fd:70:8d:8e:2d:73:13:
                    00:63:95:4b:a9:3e:cb:2a:ca:48:2a:56:95:f5:21:
                    06:e5:55:3f:ee:d5:d1:5b:a7:f4:cf:3c:5b:95:9f:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:F6:C0:72:72:62:6B:6E:71:DE:6B:0E:F1:A6:5E:E2:F5:6F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/d740b0f2-708e-30a2-84cd-e9fc0519318d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.241.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:37:4d:0b:26:68:4e:eb:3c:3f:7c:88:4c:4a:20:a5:ff:da:
         b3:8e:21:28:d7:bc:5e:ff:c5:64:d4:23:f1:bb:72:13:44:76:
         53:96:02:e5:56:c7:b0:11:7e:a6:ea:f7:ec:cf:e6:3f:75:d4:
         d1:36:f3:98:26:df:96:2f:6e:5e:9d:62:33:82:99:cf:64:63:
         23:fd:20:26:1d:2a:e5:96:a0:9b:68:db:1a:67:50:1d:af:ca:
         b1:96:65:08:ba:5e:e7:c7:2f:cb:70:da:42:a5:0a:d8:ab:ed:
         92:f3:64:ad:70:e7:71:5e:7a:f0:ca:0d:3a:05:48:0b:22:6d:
         67:1a:ae:8f:45:7b:99:35:a2:2e:68:eb:60:0b:77:1d:9e:bb:
         e1:99:1c:5b:ef:4b:3b:40:83:4f:c1:4d:5f:2b:df:95:85:41:
         18:7e:48:06:28:a1:39:3b:05:cd:25:75:5f:7f:db:ba:bf:3d:
         63:53:35:62:77:96:2b:05:b6:65:5e:61:c4:6c:dc:5c:c1:de:
         25:d7:dd:c8:a3:fe:93:a1:c3:d5:92:50:f9:81:dc:ba:4a:5a:
         fa:43:63:41:13:4f:67:fe:a1:60:ed:c6:3c:f3:e6:64:1b:41:
         39:f5:12:09:c0:38:21:ec:90:9e:44:fd:97:f7:0f:24:2c:d9:
         82:6a:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:24:34 2026 by rpki-client