Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/6258ec0f-b3c1-3061-8a29-a6fbef96082c.roa
File:                     6258ec0f-b3c1-3061-8a29-a6fbef96082c.roa (raw, json)
Hash identifier:          NL5Y2SI5JkAWftLBjpaLbcwi1lPWntsHmszz/MXrcZQ=
Subject key identifier:   FC:B4:F7:93:C3:07:57:1C:CF:DA:28:E2:2A:12:65:D8:01:4C:D0:9A
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584DE84B2BD254C738321DF65BC0
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/6258ec0f-b3c1-3061-8a29-a6fbef96082c.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     393994
IP address blocks:        66.207.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:2b:d2:54:c7:38:32:1d:f6:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=eb4b0919-c2a9-474b-9e74-e101af983394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:db:02:81:40:a5:26:b1:15:b5:de:cf:7a:
                    c1:1c:12:f6:ea:b7:51:7b:8e:4b:05:e1:09:05:da:
                    dd:3b:5d:56:50:e9:81:ed:94:b3:b1:57:76:a2:fa:
                    93:73:ca:56:6e:31:04:48:d5:fb:67:e1:46:2f:23:
                    f6:26:ae:77:60:79:09:a7:02:de:23:3d:48:df:ce:
                    be:2b:c3:55:30:80:60:2e:b9:89:84:d6:df:3e:1a:
                    60:88:6e:2e:3f:48:34:3f:f3:85:7b:25:56:5b:4a:
                    fd:cc:21:97:45:88:92:6b:ab:8c:15:8b:cb:72:22:
                    57:2e:36:cb:57:0b:4e:8b:66:99:8b:6f:b3:4b:6c:
                    7f:d0:fd:66:9b:b4:49:ff:b9:ff:ba:85:ec:a9:82:
                    55:76:b9:7a:83:ca:dc:9e:12:02:e6:f1:8f:41:09:
                    fa:3e:1f:84:21:71:2b:0f:5a:4d:e1:a2:4b:ae:7b:
                    a6:13:a1:62:39:74:2e:43:f7:80:32:45:73:dc:08:
                    4f:fd:3b:9d:9a:ed:2a:bb:c1:02:11:6c:41:02:e7:
                    31:4d:ff:55:67:ef:a0:d6:08:16:a1:73:57:dc:3c:
                    75:7b:1f:bb:08:a5:53:6e:61:56:13:29:e1:6b:a0:
                    0b:9a:48:f6:84:e8:c0:e7:ca:23:e2:2b:3e:02:ac:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B4:F7:93:C3:07:57:1C:CF:DA:28:E2:2A:12:65:D8:01:4C:D0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/6258ec0f-b3c1-3061-8a29-a6fbef96082c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:35:a8:83:e8:07:5f:2a:f5:5c:dd:b1:c0:0b:57:25:96:
         57:b4:aa:19:83:b0:dd:c2:68:15:4c:c6:0a:43:67:bf:15:27:
         e6:c9:cc:e5:2a:3e:48:b8:f8:cc:de:90:9e:48:b4:af:6c:5d:
         06:07:10:75:f6:bc:cd:34:e3:b6:70:95:93:25:79:b9:6d:39:
         62:9c:e3:9d:36:80:9e:72:09:f5:8f:cc:38:47:9c:a1:24:90:
         44:ef:93:47:07:80:57:cd:a2:24:9e:30:51:97:ef:e4:7d:29:
         70:1a:2c:2f:71:7a:a1:47:8e:fc:bb:6f:86:01:47:7a:7e:12:
         57:39:78:ed:c2:18:9b:98:b7:15:82:69:75:67:2c:eb:c9:6e:
         63:70:b5:46:2b:63:1e:7d:e5:a3:67:19:3d:74:00:82:bb:13:
         82:81:da:44:ea:4f:1f:e1:91:c0:03:64:67:5e:77:c2:b0:aa:
         64:d3:9f:62:90:89:a6:13:35:2d:b9:70:4c:47:8a:ea:7f:82:
         2a:31:5d:8c:d1:fa:be:35:7e:46:a4:7d:9d:55:c7:4c:97:65:
         b6:5d:eb:93:ad:70:e2:13:40:d8:ae:3c:b7:c3:4e:8c:d9:c9:
         99:ae:f1:77:b0:a9:f9:c0:c9:99:b8:b1:2f:31:ce:c4:b7:07:
         72:1f:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:13:24 2026 by rpki-client