Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa
File:                     4bc9954b-ac5d-3aa0-baf5-640c55692392.roa (raw, json)
Hash identifier:          LkBSjFqaaRCKUg6OTueDdiMgOJB/lbvLs6S+FF4KD1g=
Subject key identifier:   F2:B1:2F:2F:F8:DA:0D:D2:DF:74:44:7B:CE:2F:58:19:FE:33:A0:A6
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E428F1F18D9A2C67A7799DAA0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        66.253.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:1f:18:d9:a2:c6:7a:77:99:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=8180c062-31e0-4cc1-a8e6-9897eb9110d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:dc:f6:8e:f7:55:e3:76:fb:f9:43:22:bc:
                    4f:2c:fd:d5:8e:a4:26:42:90:9c:c5:23:74:99:30:
                    7b:aa:11:ea:99:7d:04:70:a0:c8:04:d8:1b:4a:31:
                    b3:27:82:6b:83:85:d0:fb:d0:05:24:5f:c1:a3:3c:
                    66:f6:e6:e9:c5:69:35:c1:bc:5c:c9:0e:df:58:fa:
                    18:9b:ef:37:05:9f:a1:9a:24:3c:d0:4b:c6:ee:48:
                    48:0e:c6:e6:8f:d7:a2:f6:8d:a0:6f:b2:db:39:3e:
                    b3:ff:d7:61:3c:1c:a9:17:86:cd:19:cf:a7:6b:3f:
                    a9:3a:6f:77:f7:99:d9:3b:63:23:e5:5c:b1:31:c3:
                    6c:cc:d7:fc:e4:bc:f2:2a:82:49:c5:d5:58:e2:54:
                    e1:41:d6:6e:09:18:e3:88:5f:28:81:5f:04:29:e8:
                    ba:4f:6d:35:c2:43:c0:c7:51:08:89:c7:79:3d:2a:
                    14:f7:ce:0e:4c:02:8d:0c:9a:42:62:a4:5d:ee:ec:
                    df:41:5f:e5:00:2a:23:e2:8e:91:d0:98:57:40:09:
                    c7:a1:fb:77:7b:05:92:a4:bb:3e:c3:58:fa:87:cd:
                    01:c7:3e:bc:10:d3:83:ae:09:6e:a2:fd:a6:f2:17:
                    2d:9c:90:22:57:31:54:c9:fd:9c:7c:ea:a6:52:e6:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B1:2F:2F:F8:DA:0D:D2:DF:74:44:7B:CE:2F:58:19:FE:33:A0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4bc9954b-ac5d-3aa0-baf5-640c55692392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:36:34:7a:5b:3c:25:2d:9b:7f:89:82:0a:05:e7:da:95:
         4f:ea:d1:8f:a5:5f:38:59:00:cb:93:3b:a1:ee:2e:bb:99:56:
         41:90:e9:46:29:92:c2:44:99:0c:b5:04:d8:b4:90:59:23:c2:
         8c:6b:8f:75:1a:d6:48:da:8c:51:84:88:d8:b8:37:b2:50:a0:
         59:06:f6:90:3d:1a:67:07:74:c9:42:7c:4c:43:38:f3:9c:2f:
         dd:63:93:cd:76:b0:7a:72:60:88:70:fa:8c:91:c6:de:41:76:
         3e:cf:ff:d0:00:7f:08:cc:9e:a2:bb:0b:a2:f0:89:2d:7e:da:
         4c:67:d1:14:b9:f5:28:7d:f7:41:ef:01:34:81:4c:83:5b:39:
         d5:35:80:5f:0c:e4:4b:d7:1d:c2:d6:86:92:63:48:45:b6:09:
         7a:ca:1a:02:96:62:72:f3:7b:46:c9:29:bd:e0:8c:e2:d5:3b:
         60:c9:01:71:c3:40:79:3e:3a:ad:62:a0:19:cb:4a:5f:51:34:
         9e:97:29:6b:24:fc:a5:59:09:81:01:7b:16:01:92:0e:0a:fe:
         4d:74:b9:b6:ad:69:56:97:26:82:4c:65:b6:9d:2e:4c:13:98:
         f5:aa:18:ef:0a:5a:04:77:16:04:c9:34:c6:e7:8f:89:da:96:
         7d:7c:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:35:52 2026 by rpki-client