Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/201d1bee-d88f-3881-954c-a6bff94da4b2.roa
File:                     201d1bee-d88f-3881-954c-a6bff94da4b2.roa (raw, json)
Hash identifier:          gKMq/bVWej/ARXkiUGIg9f/9hkjNdTvnzo/y4FfJYeA=
Subject key identifier:   01:B6:C9:10:3E:41:0D:7C:58:19:20:55:43:BA:3C:22:31:FE:57:8E
Certificate issuer:       /CN=6396ecb5-3b91-4d1e-b787-089230813a23
Certificate serial:       010D0C9F4328584ECB08B49C7B02BA4D7B956700
Authority key identifier: EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/201d1bee-d88f-3881-954c-a6bff94da4b2.roa
Signing time:             Mon 10 Aug 2026 18:15:09 +0000
ROA not before:           Mon 10 Aug 2026 18:15:09 +0000
ROA not after:            Sun 08 Nov 2026 19:15:09 +0000
asID:                     396362
IP address blocks:        66.59.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:08:b4:9c:7b:02:ba:4d:7b:95:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6396ecb5-3b91-4d1e-b787-089230813a23
        Validity
            Not Before: Aug 10 18:15:09 2026 GMT
            Not After : Nov  8 19:15:09 2026 GMT
        Subject: CN=27630ca2-a662-4ee1-8caf-b34ae0661703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:7d:0b:af:02:70:57:5e:44:7a:78:5b:0a:
                    7e:da:39:36:8b:e0:88:a4:b5:d6:72:25:e4:2a:d2:
                    7b:63:23:5a:1f:35:85:75:c7:8f:be:5b:95:5c:ed:
                    85:cd:da:e5:63:79:b2:53:0d:05:7d:c6:9c:12:db:
                    14:87:dd:88:3c:78:ef:ae:b3:86:9a:ca:6f:7e:fe:
                    8b:95:9a:73:68:30:bc:77:5f:3f:d3:b8:40:0a:d4:
                    50:7f:75:d3:bc:78:c1:3a:c9:c0:8e:91:ea:23:d4:
                    2f:5a:62:a6:23:8e:4f:e0:e6:41:2b:03:9d:3c:de:
                    5d:81:97:cd:4e:75:f9:f3:99:b9:3f:44:c0:f0:05:
                    22:db:1a:03:65:42:a6:7a:23:0f:0d:70:1e:59:73:
                    7d:23:4f:bd:a4:da:49:be:16:f5:07:91:85:2f:fb:
                    3e:6b:88:d4:2c:56:5e:f9:62:a1:9f:3e:5e:46:75:
                    9b:47:d7:96:63:01:30:a7:83:d1:0b:d3:ea:c1:e0:
                    60:c9:cd:5e:89:0d:47:08:24:5c:26:1d:7c:e0:10:
                    48:05:fd:5d:ab:7c:7c:12:35:b1:93:5f:cd:2b:ac:
                    32:c3:92:1f:a2:67:68:c6:49:8d:e4:78:78:ba:02:
                    c4:10:5e:66:b3:21:d1:d5:e2:cd:d2:c3:bc:d5:5c:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B6:C9:10:3E:41:0D:7C:58:19:20:55:43:BA:3C:22:31:FE:57:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/201d1bee-d88f-3881-954c-a6bff94da4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:10:8e:4a:26:31:75:91:cb:79:55:be:6e:7b:d3:90:a1:8e:
         49:7a:a2:ec:76:09:79:dc:9d:45:67:e1:b7:f4:3f:06:4e:e5:
         d4:3f:06:c1:9e:df:86:c2:8a:1d:01:da:9c:b3:9d:2f:01:f4:
         90:d9:4c:02:28:b7:aa:03:3c:41:84:5d:4a:4b:d1:1b:9b:ac:
         58:02:0c:92:22:49:26:a7:f0:ed:af:5e:f6:9b:7c:b5:3a:7e:
         cc:7e:77:36:07:63:5a:61:41:44:4d:8f:bc:59:8e:97:8b:36:
         92:00:e4:62:9c:28:63:ae:9c:ff:6d:0d:31:82:c7:ac:0e:e5:
         37:00:70:9e:53:6f:b4:b5:84:57:9e:71:c7:af:24:f4:83:62:
         81:6a:63:48:9e:d5:1a:b7:92:d7:87:93:85:67:d3:4b:a4:81:
         42:93:c0:af:f5:13:9e:cf:e2:45:e6:da:c7:6d:00:58:37:24:
         97:64:c5:03:cd:8c:1f:a0:92:2d:77:f1:9c:f0:f3:85:28:17:
         69:bf:a8:3e:08:63:93:56:f1:ce:ac:41:17:4b:0d:8c:ba:a1:
         11:2c:4d:0c:b4:39:79:79:9f:64:86:25:4b:88:7f:a0:c4:24:
         2c:2e:ff:8d:fb:5f:c1:e7:bf:ca:b7:19:40:f0:84:26:ab:70:
         dc:d7:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:16:01 2026 by rpki-client