Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/1639d8d4-cfd6-377d-bdd6-763711296f64.roa
File:                     1639d8d4-cfd6-377d-bdd6-763711296f64.roa (raw, json)
Hash identifier:          iJlgi0KEILWYUrG06S9BJP1EBhkbq+Id+TMKIVJNJI4=
Subject key identifier:   51:35:47:53:90:6C:95:17:DD:FB:E2:E9:A0:FC:5B:C3:EA:9A:19:66
Certificate issuer:       /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Certificate serial:       010D0C9F4328584DEF460444FEA554A61601BB00
Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/1639d8d4-cfd6-377d-bdd6-763711296f64.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     396168
IP address blocks:        66.33.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:04:44:fe:a5:54:a6:16:01:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=3d1fbbb6-02c8-4e9f-9279-a2637d750eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:c0:2f:d9:13:9d:3d:3b:de:81:b3:05:1b:
                    44:85:59:1e:f2:96:9d:88:97:dc:97:78:e2:a2:a0:
                    40:83:04:ef:d9:5e:88:f8:15:50:4a:92:17:ed:39:
                    e9:bd:ee:e2:1e:cb:94:6c:86:c2:e9:97:91:16:bf:
                    13:60:28:48:51:5e:01:12:25:d1:04:2b:e1:9c:9a:
                    c9:59:ca:df:d2:aa:df:60:b9:1b:64:4c:d2:84:f4:
                    d2:dd:b5:ce:69:75:29:44:0f:6c:86:95:eb:e8:5e:
                    c6:95:31:7e:2d:ea:20:df:5b:ac:b8:ae:f6:5d:70:
                    f3:29:aa:c2:29:39:2e:f4:42:d9:73:4c:bc:97:d0:
                    13:b9:94:f1:83:b6:f0:90:30:fd:7f:08:33:25:f6:
                    0d:7b:77:ea:29:f7:0c:8a:f7:b2:93:f0:4d:2b:b7:
                    66:96:8e:bb:99:39:29:8f:bb:f0:e4:ed:09:45:80:
                    ba:c3:f3:40:ef:d2:b1:25:a2:c3:b0:92:fe:7c:83:
                    4e:74:a1:8d:09:39:77:f8:a7:32:eb:43:01:c4:0b:
                    7a:f5:e4:ce:70:a3:67:ab:26:0d:7b:ee:72:f7:60:
                    0d:09:03:aa:93:2e:bf:0e:b2:c1:53:a1:9b:3d:55:
                    35:91:f5:e8:18:77:9f:be:3f:68:d2:a5:c9:9f:8f:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:47:53:90:6C:95:17:DD:FB:E2:E9:A0:FC:5B:C3:EA:9A:19:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/1639d8d4-cfd6-377d-bdd6-763711296f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:69:0d:94:bb:8d:41:a1:ea:93:78:36:83:7b:47:b9:78:3b:
         15:5c:4f:92:89:5c:50:9b:b0:b7:34:2c:1f:59:b8:4b:ce:b5:
         80:ba:45:39:20:f0:92:2a:1e:7a:9e:2a:89:13:48:56:a0:b5:
         ed:3d:9d:69:c6:04:ed:46:1c:26:c7:17:81:c6:78:05:4a:ff:
         be:25:3d:c6:b2:0d:d5:dc:e5:58:de:5d:cc:06:e8:3b:5d:4e:
         bd:ce:bb:ce:4e:66:86:d3:57:9e:8f:f6:df:c2:63:06:de:a9:
         fb:fb:d4:79:53:19:d4:50:03:80:7b:ea:71:55:2a:59:9a:7d:
         0e:5f:1c:dd:2b:64:ca:ad:c5:c2:57:eb:0b:af:d1:7b:82:69:
         83:be:d7:1a:b2:c3:03:d2:3f:87:2b:b8:ab:a4:e9:1f:ea:bc:
         8d:bc:27:2f:b2:be:a1:82:2b:24:b7:d0:50:5d:12:e9:8b:16:
         3c:8c:81:5f:73:c8:f3:5a:1f:5f:e3:6b:62:83:b9:af:fe:04:
         cd:79:88:66:af:5e:1f:04:68:e2:43:60:7c:4d:93:15:4b:a3:
         78:b2:f3:bd:7d:74:71:90:a3:45:76:20:14:8e:54:6f:d0:1c:
         0a:03:39:36:81:fd:83:0d:81:76:a2:39:93:73:f7:5a:e5:41:
         06:7f:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 07:57:31 2026 by rpki-client