Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1dde0db0-3e06-312f-93d6-74678bc1e7ee.roa
File:                     1dde0db0-3e06-312f-93d6-74678bc1e7ee.roa (raw, json)
Hash identifier:          Yljqh1I7sJZS78XXtN+aKS+PRGnOZ+uzOaKSGKXbD6k=
Subject key identifier:   EC:AD:FB:0D:54:85:05:CB:A3:49:2D:4F:58:16:D9:B1:AF:92:D0:61
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584E3E5F5721D8D13AE14A717B78
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1dde0db0-3e06-312f-93d6-74678bc1e7ee.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        66.198.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:57:21:d8:d1:3a:e1:4a:71:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=b7b9f1a3-e47b-4de2-8d7b-a9d02020021c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:17:64:7c:89:36:0b:92:32:ca:d2:21:87:
                    55:a9:05:02:f8:22:32:29:17:b5:41:a4:e5:45:2f:
                    52:53:de:44:f7:ad:74:68:4f:67:ad:bf:32:05:2e:
                    5d:24:fb:55:f7:5b:84:f7:d1:58:97:f5:79:b6:3f:
                    0f:f1:d0:d5:04:61:50:61:2f:de:8e:15:ad:a1:4f:
                    48:9a:c3:3a:23:c7:a8:c3:c7:8b:2f:cf:3e:0f:67:
                    45:5a:4a:df:f9:78:58:8d:cf:bd:20:fa:fc:1f:62:
                    8c:be:86:2d:27:95:53:3d:13:75:da:fb:13:94:d2:
                    5c:c2:c2:a1:49:24:df:bd:75:5f:ca:3c:5a:57:ee:
                    74:e3:0e:06:c3:47:78:b9:d3:d0:9f:0c:16:74:5d:
                    1f:69:6c:f3:51:f9:2a:a7:75:a3:b7:22:b2:ac:3b:
                    f0:fb:19:8b:25:27:93:eb:91:11:7b:d6:da:c8:db:
                    a5:e8:2f:57:07:c5:f3:da:35:b1:4d:bc:47:e9:7a:
                    a4:fb:f9:55:af:e4:91:36:8c:c3:18:40:e8:5f:05:
                    6e:f0:61:31:73:46:14:8e:e6:ab:9f:28:61:ef:f3:
                    94:a2:18:ab:32:d3:a8:22:2c:4b:2b:9e:65:45:6d:
                    93:a7:a8:13:04:04:f9:e0:39:2a:52:94:3a:cc:69:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:FB:0D:54:85:05:CB:A3:49:2D:4F:58:16:D9:B1:AF:92:D0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1dde0db0-3e06-312f-93d6-74678bc1e7ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:81:67:4d:eb:00:65:00:93:a3:c0:73:57:9b:a2:c5:eb:93:
         63:ff:df:4d:79:45:9b:e0:30:11:8a:c6:2f:22:a7:04:73:29:
         7d:ef:8d:d4:31:30:a9:c1:f1:7f:3a:57:dc:6a:47:1f:58:6a:
         e3:06:44:bd:11:8b:27:cd:b6:04:bc:9f:14:ed:b0:a6:e0:41:
         06:80:47:35:21:cb:56:1a:2e:0e:6b:04:17:4b:da:40:c5:95:
         1d:c6:d8:fc:75:5f:73:44:12:7c:e7:05:1a:ea:43:01:47:15:
         77:5d:c0:c4:e6:46:5e:bc:36:c4:87:4d:d3:9c:02:d3:4d:4d:
         68:e6:2f:b1:c0:86:b9:cf:7a:33:8f:38:f7:11:0b:87:86:21:
         4f:3b:22:f2:94:5c:2a:68:9d:f6:0a:5a:cb:c3:f6:34:6a:7c:
         ab:85:e5:fd:85:3c:22:ab:35:a7:10:c4:64:c6:ee:f1:5c:4b:
         04:14:8e:4a:2e:00:5c:90:d5:21:4d:e2:5d:83:40:6d:e3:58:
         4e:7f:54:0b:e7:f5:23:7f:90:9e:30:cf:fb:3a:9e:7c:3c:17:
         a9:a8:2c:ec:6e:be:9f:8f:fe:f7:c8:45:82:b4:de:ac:1d:84:
         b1:45:42:bd:d1:56:d9:12:0d:5f:4e:c6:25:a3:68:38:4d:d4:
         ab:c6:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 03:42:59 2026 by rpki-client