Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa
File:                     0a39a1ed-5680-3419-807a-f8b2fd922efb.roa (raw, json)
Hash identifier:          uYOOcj3nHL3JJfH0qVXzpR2wVIlfOiTVFGJlqmhPwoo=
Subject key identifier:   43:3C:9A:33:4B:89:45:46:35:2C:FD:DC:D9:00:44:F1:93:54:25:36
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584E4559EFDDCFDDC7077F9F1880
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     399244
IP address blocks:        66.59.209.0/24 maxlen: 24
                          66.59.210.0/24 maxlen: 24
                          66.59.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ef:dd:cf:dd:c7:07:7f:9f:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=5e543318-308e-4bc5-8e86-fa5a5051facc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:f5:5d:aa:56:10:b0:c8:81:d9:52:51:19:
                    fc:95:5a:45:11:3a:5b:96:b3:57:0a:c9:11:fe:dc:
                    d9:fa:32:bb:1f:76:db:38:24:e1:27:5b:1e:3d:19:
                    6e:04:1b:78:9e:67:54:8b:70:d7:19:91:c6:14:86:
                    52:11:61:0d:c7:ec:d4:bf:9e:3c:93:7c:36:65:22:
                    59:be:a2:05:2e:ef:97:32:1d:50:ce:95:d8:ed:00:
                    ab:74:06:38:4a:91:22:90:3d:db:3b:18:0f:79:ca:
                    18:a2:36:6c:18:f2:a7:a6:e4:1f:5b:19:c3:52:f7:
                    aa:94:f5:db:7b:06:ab:12:08:2b:4c:34:79:4f:c4:
                    2c:0c:9d:c1:dc:e1:45:c6:d3:13:7c:2e:53:36:f5:
                    25:58:83:25:89:b7:e8:6c:01:fe:bc:a2:f9:3f:a1:
                    6b:9c:e4:cc:ad:2a:3d:2c:4a:4c:a0:3d:bb:11:6f:
                    d6:82:e1:04:8f:7f:da:45:90:b6:87:b4:a5:a2:35:
                    3e:5b:fb:de:50:56:9d:0f:b3:d8:76:ca:10:15:fa:
                    cf:b4:2a:e1:cb:91:c0:ee:fc:f1:25:d5:83:ec:ec:
                    c4:47:d6:37:4a:b7:2c:c1:e2:52:17:a9:af:c8:6f:
                    ca:47:90:ef:67:3f:26:37:80:56:b6:96:70:ae:c7:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3C:9A:33:4B:89:45:46:35:2C:FD:DC:D9:00:44:F1:93:54:25:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0a39a1ed-5680-3419-807a-f8b2fd922efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.209.0-66.59.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:dc:ec:d4:0b:1c:7d:3f:98:f3:80:b9:3c:47:8f:7a:91:86:
         f3:81:b4:c5:86:1f:77:17:56:72:fd:b6:22:b6:9f:38:4f:2e:
         af:2b:f7:26:59:f5:5f:b7:54:8d:db:c9:63:f2:1f:fc:8d:52:
         ad:f4:15:48:2e:f8:70:f5:60:4c:26:15:91:95:27:28:76:65:
         b5:8d:63:0f:be:8b:0b:05:09:fe:f3:5d:a1:b8:1b:8a:60:69:
         b1:9c:70:01:28:79:74:54:6e:fb:36:ee:c6:9f:80:09:7d:04:
         50:8b:ee:58:8c:57:a1:c1:7a:4e:2b:f2:58:71:d0:73:82:52:
         98:56:ab:3c:56:ef:1c:7d:c7:c2:d4:f4:f4:66:4b:b4:ab:77:
         07:a9:f4:11:30:95:83:8a:18:50:d5:1e:97:ef:9d:35:a9:93:
         ad:8a:bd:00:82:9b:88:1e:1b:9d:80:7e:8d:d4:1d:38:70:af:
         15:27:c8:56:07:67:5b:5c:16:dd:ed:2e:1b:34:bd:da:08:fd:
         8e:e2:a8:ea:3c:dc:c1:66:c8:44:e7:03:c3:3c:84:73:1b:51:
         5f:f7:2d:28:12:b2:5a:22:66:8f:ef:25:a3:72:8e:02:f1:c6:
         a2:3c:0b:2e:9e:d9:a5:76:b2:26:05:4a:a4:77:9f:05:8e:fd:
         0a:e3:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:43:39 2026 by rpki-client