Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/1ce562f2-76c1-3391-a9ae-75d8af098ff6.roa
File:                     1ce562f2-76c1-3391-a9ae-75d8af098ff6.roa (raw, json)
Hash identifier:          F3zRmflBT3yf5288Adyycghm+egcK7SoGFMVuGrfMTc=
Subject key identifier:   C5:91:DF:1A:42:14:B2:94:AE:99:75:D3:4E:FB:D5:6C:25:9B:80:91
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584E4AEF4D6EC0CB62EC9A7B0100
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/1ce562f2-76c1-3391-a9ae-75d8af098ff6.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        66.178.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4d:6e:c0:cb:62:ec:9a:7b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=9af25345-b93a-42ea-a7b3-729a0d3249a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:f2:d9:d6:e5:95:09:0b:87:1f:56:37:cd:
                    0f:82:d3:b9:4f:aa:94:2a:9a:94:03:6f:8e:f3:0d:
                    d8:93:9f:14:53:aa:f5:7f:07:36:86:1b:e8:49:14:
                    0f:05:a3:87:7b:be:02:6f:80:94:f8:11:c3:91:bb:
                    21:3f:b2:52:60:25:03:3a:b5:1f:14:20:76:0d:a4:
                    9c:00:73:0f:ce:42:0f:5a:fc:38:72:81:d2:de:da:
                    b3:84:43:0e:c3:b8:8b:17:f3:72:59:a3:b5:a6:5d:
                    32:8e:6f:81:ee:6f:77:f5:1a:41:40:ac:86:26:4d:
                    ec:98:ff:9b:cd:16:47:ec:8a:88:32:b8:c4:a8:52:
                    99:a4:e3:61:94:59:2f:41:60:cd:c3:c8:4d:2f:fc:
                    04:65:c7:c0:19:68:50:17:3f:d3:23:57:85:c3:f4:
                    2a:7b:ae:e3:33:e8:12:23:84:ab:af:54:77:5c:da:
                    43:6d:89:e1:61:37:8c:9a:8d:75:88:8a:40:a5:2c:
                    10:b0:52:08:c0:9d:7a:a5:9c:f8:22:a5:16:fc:ea:
                    49:89:67:67:c0:72:86:f5:e7:f5:fa:1d:a0:d4:fd:
                    ed:33:b6:a2:bd:56:d5:c8:e4:70:0b:8f:06:59:4e:
                    36:00:18:42:2a:58:ba:d7:b6:b2:7a:91:b8:8c:fe:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:DF:1A:42:14:B2:94:AE:99:75:D3:4E:FB:D5:6C:25:9B:80:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/1ce562f2-76c1-3391-a9ae-75d8af098ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:60:f8:22:be:4a:66:9e:31:12:be:ae:5e:97:1f:ce:27:
         6d:c8:96:70:4e:6b:b1:50:89:e3:79:a3:77:33:b4:5e:04:ed:
         fe:b1:6b:86:1b:d7:2a:0f:60:63:98:d1:e3:d9:75:97:99:56:
         f2:73:35:70:28:8a:56:47:05:e5:07:39:8d:ca:ba:c6:07:7f:
         8e:1c:cc:26:6b:da:b6:aa:3a:c4:e1:6e:36:09:e1:b3:da:49:
         7d:b7:8a:0e:a4:98:bd:e2:e4:8f:2a:50:18:4d:d8:56:76:a8:
         17:07:9e:68:e8:34:d1:d0:b1:cc:e5:e5:96:58:0c:63:30:15:
         b7:5c:89:3a:bd:00:84:eb:b4:13:6b:1c:55:ca:2a:29:0c:57:
         15:dd:77:d4:a5:fc:0a:62:10:d3:82:56:9c:81:90:60:02:81:
         d8:ef:40:a1:bf:1e:2d:6e:e1:9e:29:48:04:95:b8:4b:1a:1d:
         42:39:5b:44:97:96:ff:61:59:f4:cc:bb:df:90:a2:89:97:0d:
         27:22:70:65:74:9b:68:ae:9e:8f:88:9f:97:d5:33:9c:12:53:
         cc:33:e1:8e:7f:44:99:9f:5e:23:28:44:18:8e:69:c7:29:28:
         82:b0:aa:ee:91:69:de:b6:03:ed:99:af:b6:48:31:fe:06:9b:
         64:3f:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:34 2026 by rpki-client