Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
File:                     d8781f8b-bea3-3cce-88ff-84fa5117d863.roa (raw, json)
Hash identifier:          doLFV7wcInwhvMpvTxu2Mq2QxjxmpIzuT7rvqbGjrss=
Subject key identifier:   FD:0F:B9:07:77:20:C4:49:4D:11:03:24:1B:DB:EB:0C:7D:7B:4E:E6
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584E4AEF4D9C4A58641615F18A80
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        66.178.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4d:9c:4a:58:64:16:15:f1:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=60fe4fdb-bb41-4d64-bece-fb0fe3636d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:3e:5f:50:40:7d:ed:aa:4d:d9:87:f2:05:
                    0f:f2:f7:dc:36:55:33:7b:2c:d2:8a:53:ef:7a:92:
                    75:30:53:d9:3a:1f:b5:5a:eb:4c:a9:02:df:dd:1a:
                    c8:44:01:6f:f2:be:fc:da:27:a2:19:93:f0:c7:dc:
                    23:67:e3:85:86:56:69:1d:24:79:43:2d:37:5c:6b:
                    e4:63:e2:26:c8:2e:60:dc:14:12:e0:80:1c:fe:c6:
                    e7:8d:5d:98:10:eb:05:32:ea:dc:2f:5d:2a:77:4c:
                    69:75:90:e8:a1:c4:7a:1d:35:cf:69:4e:c3:77:6b:
                    cc:64:eb:2a:f5:bd:bf:62:34:a4:09:25:26:67:e1:
                    56:12:9a:6d:72:31:fa:ef:0c:33:30:f9:69:70:ad:
                    ec:5a:c4:a7:88:18:0a:fd:ef:f3:74:34:01:c4:15:
                    8f:c5:2f:cb:e5:41:17:c5:d5:13:39:87:df:f0:51:
                    2d:3a:f5:cf:aa:32:d8:93:66:ee:f7:c0:4f:ad:ea:
                    5b:4f:41:53:5d:2b:47:73:12:72:d3:6b:f3:49:60:
                    ee:33:4a:d7:81:e6:b4:a0:c2:65:2c:49:e6:12:45:
                    e5:3f:ce:fd:e8:16:f3:4f:36:23:fa:58:54:52:b7:
                    93:42:66:61:9f:b1:88:bb:cf:63:9e:c8:d4:80:11:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0F:B9:07:77:20:C4:49:4D:11:03:24:1B:DB:EB:0C:7D:7B:4E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:55:e1:40:bd:25:f2:ca:9a:dd:8a:01:4b:7e:66:6d:01:25:
         43:50:a3:c0:88:29:e9:a7:2c:d6:cc:87:ea:50:b9:ae:74:50:
         9d:4a:0c:b4:23:ac:5a:cf:da:9b:bc:e8:d1:02:19:01:7d:34:
         6f:a2:37:3d:93:41:72:aa:ca:d8:17:c4:09:60:14:cd:c4:fd:
         03:67:42:4c:bf:40:d7:00:a5:95:97:7b:8f:98:79:a7:27:8c:
         82:ea:69:59:94:b6:19:3b:4a:b5:68:9f:d4:1d:f3:e5:4f:31:
         e2:18:9d:e6:eb:21:b9:a0:28:7f:cc:04:0b:d1:40:9a:53:0f:
         78:67:4c:7d:0c:ff:67:ea:cc:e3:44:39:7c:f8:1d:7c:3d:77:
         a7:9e:eb:3a:fe:a1:7b:a6:e2:08:49:9c:44:46:7c:0a:6b:74:
         e6:1b:a7:27:dc:e1:5a:92:d0:2b:a1:36:a7:fb:21:5e:03:52:
         97:76:70:4e:05:b2:79:5b:af:23:c8:91:b0:4f:3a:35:2d:39:
         2f:66:26:f6:8d:0a:9e:c4:16:90:c0:90:1f:61:97:98:28:66:
         aa:b7:bd:6b:11:ca:32:7f:1b:fa:56:12:83:91:3c:48:6d:29:
         e9:5d:37:43:0f:d2:7e:57:2f:3c:98:17:a1:09:09:46:ba:59:
         7d:3b:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:29 2026 by rpki-client