Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa
File:                     65022e59-779c-30b5-b75e-3f62e70eb609.roa (raw, json)
Hash identifier:          E6dlWdkg02OmQBXBJdCHqk60fshv0G6SeC7yTGnQ59o=
Subject key identifier:   44:CC:80:7F:40:60:C2:EE:B7:8A:2C:32:BD:01:69:1B:5D:00:6B:9A
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584D91C0122C0E3540E1DB0B8080
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     394457
IP address blocks:        66.45.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:12:2c:0e:35:40:e1:db:0b:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=7e077ff3-b5f9-4737-8513-8a2b2f373227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:16:ba:4e:3d:f8:cb:5b:8e:9b:e8:f0:01:
                    dc:d3:36:3e:8e:39:5f:0e:ea:18:b0:13:88:03:86:
                    d2:d1:f5:f1:6c:e9:e3:4d:76:c1:76:ee:c1:f9:be:
                    1e:a0:18:dc:04:d2:1c:f8:24:cb:57:f9:aa:90:7b:
                    f2:18:11:3f:58:ad:41:44:1d:de:2e:81:7a:19:3b:
                    94:6d:e7:92:c5:b3:47:af:1e:71:3e:b9:01:43:61:
                    3c:25:98:fd:e5:c1:73:73:95:92:2c:b6:61:38:e0:
                    80:5c:91:41:55:7b:0b:d5:af:0d:c3:ac:02:a0:57:
                    28:e8:2a:35:31:be:52:69:a7:de:0e:a4:cd:82:60:
                    99:d4:37:3e:16:9c:42:2f:60:94:1b:24:b5:5b:3c:
                    08:75:84:6f:d5:9e:4c:70:0e:0d:13:cb:10:8e:4e:
                    6e:cb:dc:4d:88:a1:1d:df:b7:e2:69:87:bc:ae:d7:
                    2c:74:20:7d:c1:08:80:ac:4b:1c:41:3f:77:dd:05:
                    33:e2:96:57:4e:d5:07:22:d9:c9:63:16:1c:18:86:
                    d9:4e:f4:83:db:07:9a:31:83:20:c5:44:2a:f8:5d:
                    1c:37:dc:a9:aa:24:cc:14:6f:3e:e8:3b:37:5c:b5:
                    18:a2:0e:bf:f5:90:3d:2e:29:54:33:4d:21:8b:d0:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CC:80:7F:40:60:C2:EE:B7:8A:2C:32:BD:01:69:1B:5D:00:6B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/65022e59-779c-30b5-b75e-3f62e70eb609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:a1:2a:1e:3b:0a:dc:01:e2:ea:b7:f0:7d:ca:7b:b9:a1:
         68:84:8a:cc:6a:18:64:86:9c:3f:bf:5e:97:df:7c:3d:aa:a9:
         9f:bf:a8:88:b5:9b:2f:87:4c:10:dd:cb:45:d1:a2:e1:e1:f3:
         b3:40:9e:af:30:36:03:75:63:ed:e5:5a:e0:80:52:85:ca:fe:
         36:87:9f:c9:8e:52:a2:7f:3f:95:ab:cf:9a:9e:04:0f:c1:4c:
         8e:06:ed:10:7d:24:db:e3:dd:2e:a8:0b:76:af:c4:2d:5d:3a:
         77:58:d1:78:be:81:a8:d0:78:cf:17:70:d3:d3:c7:c7:01:27:
         09:5c:69:e3:2b:0f:50:f7:c2:f8:f0:20:47:2c:b0:79:af:24:
         f4:ce:5e:0a:c1:02:19:39:1c:02:3b:00:17:40:f6:df:60:11:
         1e:cd:6a:55:e6:f1:1a:75:af:d3:f3:c6:41:e4:cf:3e:99:2c:
         0a:8e:d3:49:62:b0:29:76:21:15:f2:0d:0d:79:16:65:fb:6a:
         fd:7e:60:a6:1b:ec:20:25:9c:cd:84:67:9a:d5:52:7f:a3:dd:
         3f:29:e7:3b:b3:56:cb:e6:b2:e9:ea:81:9a:85:cf:eb:17:f8:
         2a:7a:a7:76:12:f1:32:15:10:e2:e8:1e:e0:6f:56:e9:9d:f5:
         fe:3e:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:33:30 2026 by rpki-client