Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa
File:                     4deac7bd-bb42-3c2d-9be3-d984835111b5.roa (raw, json)
Hash identifier:          QpR5OPDXJrWkB+tV54WYL7TVVNsVAZUoIprketbC/L0=
Subject key identifier:   92:94:A5:FE:B6:41:65:78:45:B6:E1:F6:97:92:1C:61:9C:0B:5C:7C
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584D8EF566C1C833E7B117646060
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     25637
IP address blocks:        66.228.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:66:c1:c8:33:e7:b1:17:64:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=2ede3fee-fd78-48eb-a352-1b1937fba864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:70:d1:4a:bd:78:00:f0:8e:6b:f4:63:67:
                    7a:c2:f9:79:17:95:b2:63:b6:4f:2b:4e:f1:02:28:
                    2b:50:3a:38:a4:c8:b4:c2:f2:1c:8c:95:7f:e3:1d:
                    4b:00:9d:8f:33:46:91:92:2f:bc:c7:33:44:41:c5:
                    b0:1a:d7:1e:9a:d1:70:b9:fa:f5:9c:cb:0b:40:32:
                    15:db:52:9a:60:f7:b3:0b:d7:4c:27:d8:5f:64:59:
                    90:3a:f6:d9:93:9e:1f:4d:14:de:72:81:94:19:b9:
                    29:17:06:fe:0d:74:91:f9:ad:bc:85:7a:2d:89:9f:
                    a1:5b:e1:76:92:7f:ab:bf:53:29:ba:f3:6e:69:44:
                    87:c6:37:13:9c:d5:04:55:61:9a:e9:37:b9:b7:aa:
                    1f:7c:a7:2a:67:38:27:61:ed:fa:d3:d5:a5:db:eb:
                    bc:9e:27:23:e9:7f:ae:c1:4c:5c:39:86:3c:ff:89:
                    2f:95:f6:2e:ea:bd:9d:bc:24:3a:0e:5e:ce:da:17:
                    50:39:ee:52:c7:fb:0c:60:24:6a:1b:ed:72:52:f6:
                    0d:6f:bb:3c:d1:78:8f:d2:94:89:4d:80:cc:f6:bf:
                    1d:c0:44:46:da:46:22:b8:8e:ed:8b:69:c2:3a:65:
                    92:11:97:f9:69:8a:95:9f:00:28:15:89:23:01:1b:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:94:A5:FE:B6:41:65:78:45:B6:E1:F6:97:92:1C:61:9C:0B:5C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/4deac7bd-bb42-3c2d-9be3-d984835111b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.228.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:b7:55:87:19:0a:fa:88:9a:f7:c3:88:d1:68:c6:a5:99:
         54:d2:cd:0f:c9:95:18:14:f2:5d:e8:8e:d1:a5:e8:80:6a:90:
         de:28:e4:bc:f0:44:74:1f:b9:6e:f1:3f:db:ef:9c:49:7e:da:
         b7:bd:50:ac:df:58:f4:64:85:74:3f:91:fd:05:c7:7c:57:d2:
         39:25:8c:76:dd:87:a2:6c:51:64:f7:0f:c9:a3:47:eb:32:5b:
         38:6f:26:61:f7:b4:a2:cb:51:1b:33:7e:c1:d0:96:16:96:c8:
         68:ae:c1:ce:e1:8b:2c:ea:10:cf:55:b7:99:8c:aa:4c:83:d7:
         01:d5:62:75:87:c8:6e:03:d2:50:46:80:c8:6d:df:0a:4e:34:
         0d:10:18:8d:1e:40:9b:50:94:20:9f:ba:3c:41:df:f6:02:57:
         30:c9:d2:47:2e:ef:0b:77:ab:55:9d:3e:c1:6b:72:e2:5a:1d:
         b8:62:43:01:54:78:1a:a7:40:d2:4d:07:fa:c9:39:d2:3e:77:
         85:df:ef:5c:fc:ce:da:27:a0:a6:19:56:56:30:fe:1c:83:63:
         36:60:27:95:76:df:bd:14:8d:8e:e3:1d:13:16:ea:2b:a8:f3:
         ec:04:76:8a:dc:ff:fc:09:db:32:de:2e:c1:93:e7:a1:32:eb:
         df:00:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 21:03:32 2026 by rpki-client