Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1ad47068-d192-3747-bf69-e4678412dfb6.roa
File:                     1ad47068-d192-3747-bf69-e4678412dfb6.roa (raw, json)
Hash identifier:          QRYEmO2tLrNgwskQXjCFNVO+rZ1AxBvio6L/hOLJzgw=
Subject key identifier:   4F:DA:4D:D2:F2:44:4D:A9:C7:5B:66:FF:4C:17:0F:43:F3:49:1E:93
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584DFBD5EFC6BBAFFE2BB8DD7BE8
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1ad47068-d192-3747-bf69-e4678412dfb6.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     394437
IP address blocks:        66.249.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ef:c6:bb:af:fe:2b:b8:dd:7b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=eddfe379-f637-4c38-947f-8d8546f05902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:d8:1c:78:bf:fa:c4:c1:f8:ea:90:af:50:
                    65:29:66:d6:38:a6:c7:82:07:53:e4:9f:da:83:19:
                    4f:01:29:35:2d:8e:2f:6f:5f:91:e0:59:bd:fe:30:
                    6b:00:47:2a:e1:83:a4:4c:be:35:5a:39:b1:79:36:
                    e3:c7:72:1f:57:20:ee:52:be:8f:17:d0:87:d0:2b:
                    16:f3:7f:d0:f9:83:10:8c:36:44:ad:df:fa:ea:1a:
                    9f:55:76:1e:20:1c:96:c0:3b:ee:2a:89:f2:d8:d3:
                    a2:0c:b9:ea:19:09:3f:e6:9a:f8:8c:0e:60:7e:10:
                    e2:5b:b1:d8:d2:ad:ba:73:c3:a5:17:4b:a2:aa:5e:
                    69:01:3b:7d:42:c0:1d:7d:27:d1:82:59:7d:c3:6f:
                    4e:0c:7e:51:be:ec:b1:51:fa:eb:d8:3c:d5:01:05:
                    d1:7f:70:70:47:fe:d8:ec:11:6a:df:05:53:f4:ad:
                    0d:13:44:73:ee:3e:98:97:ff:d8:ae:b9:83:15:a8:
                    b9:c8:b8:35:46:21:52:c2:c5:3f:7b:6a:e5:10:07:
                    af:07:21:38:71:8c:fe:8f:b1:25:1a:82:04:07:94:
                    84:8f:32:a4:0d:12:9f:f4:4c:9b:bf:d2:ec:8d:74:
                    bf:ef:6d:99:87:17:22:ac:b8:c4:10:1f:2d:2d:ed:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:4D:D2:F2:44:4D:A9:C7:5B:66:FF:4C:17:0F:43:F3:49:1E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1ad47068-d192-3747-bf69-e4678412dfb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:85:59:62:e0:e8:8c:76:c9:43:98:22:b8:7b:3d:6b:bd:
         c6:bd:5c:10:46:ff:39:98:ff:d2:b7:a3:4a:51:e1:96:83:cf:
         d8:09:6b:cf:f7:07:a9:63:8b:46:d0:1f:33:78:77:03:61:f1:
         20:a9:eb:d6:fa:9b:d4:19:d9:7e:6c:0e:ca:9a:49:de:03:89:
         4b:47:3a:64:82:d1:6f:1d:2f:ad:83:b3:28:af:50:e5:96:be:
         58:51:f4:37:62:91:e8:e0:76:1c:53:bc:65:3e:79:fa:c8:30:
         03:66:82:57:c7:0b:75:7c:28:08:a8:56:8a:bc:66:93:6d:c0:
         3f:30:be:55:fd:00:47:4f:f8:e0:32:8a:5b:db:d0:41:c3:11:
         d6:3a:32:de:1e:a6:78:a5:14:fe:04:20:df:8f:49:e2:1c:bc:
         b6:4d:f8:ae:35:b5:24:73:8a:83:13:af:1c:f7:b3:1a:bd:75:
         93:93:2d:2e:70:09:6a:04:1e:b8:c1:35:80:19:e5:dc:51:80:
         4b:75:4a:9a:75:07:db:45:0f:6f:3f:d7:f1:0b:3c:e7:d0:7b:
         ae:13:27:68:f7:bb:be:fe:1c:6b:bb:12:44:86:ba:ed:74:82:
         11:b3:a4:aa:a2:3c:e6:43:a1:d0:2e:60:ad:98:c2:91:ff:8b:
         a4:54:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 02:38:44 2026 by rpki-client