Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/95888658-dce4-34ba-a182-4fce0ec8c474.roa
File:                     95888658-dce4-34ba-a182-4fce0ec8c474.roa (raw, json)
Hash identifier:          Gv9f6O0giFNcY/bJD82cjjqv6g4lap1/ZNUeQz2yhME=
Subject key identifier:   44:71:D1:E4:0E:ED:DB:FE:54:6E:A8:60:19:37:AB:7F:FD:10:7E:92
Certificate issuer:       /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial:       010D0C9F4328584DE2B5E43AC8B86AED7DB81A00
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/95888658-dce4-34ba-a182-4fce0ec8c474.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     14618
IP address blocks:        66.118.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e4:3a:c8:b8:6a:ed:7d:b8:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=4e6a88ba-96f7-4831-b370-f2a8282f839d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:79:79:b9:f4:80:a3:c7:d3:4d:45:f8:19:
                    92:03:00:18:9a:03:e4:5d:00:68:06:52:7d:b2:56:
                    af:5f:7e:92:53:3b:2f:26:f1:f4:fe:58:5b:9c:19:
                    ee:ad:72:e1:de:9b:6b:88:42:e8:40:ad:9c:c9:6a:
                    ba:ca:ef:77:a3:59:bc:8d:ee:9a:b2:16:03:5e:24:
                    b7:83:f6:99:5a:59:0a:ff:31:d4:91:dc:20:cd:17:
                    0f:d1:cc:dd:4e:f0:cd:b7:f4:62:80:21:41:bc:ac:
                    b1:f4:6b:b8:fb:f6:12:0e:b5:07:21:f3:f5:d7:0a:
                    9a:a3:ef:f7:5f:3f:1c:21:24:bf:51:b7:e0:98:bc:
                    a5:a6:5f:7c:c6:50:c9:75:9b:45:28:35:ed:8a:ea:
                    cd:12:66:be:82:f3:1b:35:44:f3:9b:ad:38:c1:cf:
                    8f:d7:98:15:ef:b6:a9:14:fa:36:e0:d7:0e:30:fc:
                    e0:e8:21:5a:ef:03:a7:76:c8:b3:94:da:35:40:6b:
                    40:5b:c6:1d:08:2b:7c:be:a6:2a:15:b7:e3:5d:1d:
                    2b:3f:9b:ed:66:c4:f7:fd:c0:e5:54:03:c0:1a:9a:
                    30:30:6f:0b:a2:01:fc:2b:c4:8b:0d:84:35:12:b1:
                    25:7f:1d:83:d4:47:80:44:d3:f9:d6:97:ac:f0:b3:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:D1:E4:0E:ED:DB:FE:54:6E:A8:60:19:37:AB:7F:FD:10:7E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/95888658-dce4-34ba-a182-4fce0ec8c474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl

            X509v3 Authority Key Identifier:
                keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:02:b4:e8:e6:8a:9c:3e:de:98:3b:02:7f:78:b9:ad:d1:42:
         ba:cc:c0:d5:13:2b:3a:05:fd:5e:bc:62:72:e5:47:14:f5:17:
         1c:1b:42:8a:fe:a2:10:2d:bd:83:4d:68:21:a2:b3:8d:d9:df:
         9d:e7:35:be:ed:db:15:a1:1b:b3:b6:75:97:ff:a5:95:af:46:
         6d:85:73:5a:0e:e8:03:c8:56:f8:0d:15:5b:32:c8:d7:df:e3:
         c7:d1:eb:c1:f8:79:89:73:61:cc:68:00:ac:80:c2:0b:13:c1:
         74:ed:98:a4:f2:e5:21:9a:c9:cc:2c:01:ab:ca:76:21:37:7a:
         9b:2f:08:fe:15:b4:8a:cb:89:77:d3:ee:98:6c:f0:2f:4e:fa:
         17:9c:af:86:b9:0d:e2:95:d5:e8:50:79:49:27:6b:84:b5:d9:
         10:97:e1:a5:27:63:ed:2e:28:18:b8:9e:63:b4:1a:71:21:7f:
         a9:99:a6:f4:99:a5:62:9c:69:11:75:7f:3b:57:61:19:ef:7c:
         e8:83:10:7a:66:23:f6:89:05:4b:8b:a8:6e:d3:d6:fe:e2:98:
         4a:e5:69:cb:42:78:1f:79:ea:93:0b:2a:57:06:52:f4:e5:bb:
         22:d7:85:4f:b3:24:57:96:eb:31:03:55:c1:be:5a:7b:fc:dc:
         93:f1:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:21:55 2026 by rpki-client