Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa
File:                     e14cc174-68fa-3252-9d74-713b58db3ade.roa (raw, json)
Hash identifier:          Ra43/S/x3vIolaSdBPK7sHmRPqoLWuLZDGOizq46fEU=
Subject key identifier:   BF:00:2B:D3:67:CA:C7:0E:F5:AC:C5:B5:F1:DA:68:38:9D:B2:20:82
Certificate issuer:       /CN=f8424ff1-5313-4a68-a60f-9d8217567420
Certificate serial:       010D0C9F4328584EA7882ACAD537AAC9859FA100
Authority key identifier: B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397731
IP address blocks:        66.245.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2a:ca:d5:37:aa:c9:85:9f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8424ff1-5313-4a68-a60f-9d8217567420
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1087e0df-69c8-4c27-9267-32fe75736e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:84:69:f2:23:99:76:b6:62:88:78:c4:fc:
                    9c:bb:c2:3a:e7:89:4f:74:ca:64:eb:01:68:0d:94:
                    31:a5:2a:d3:4a:c9:61:80:dc:06:dd:d1:39:34:ce:
                    aa:ed:f1:1d:8c:f2:d6:67:b0:d9:55:64:eb:56:54:
                    f5:65:27:35:86:ad:05:fe:7d:23:04:9d:0d:00:6d:
                    a5:a2:c5:de:be:56:1d:35:3c:13:97:5c:78:bc:80:
                    5b:e9:60:7d:70:44:f5:92:34:b6:c2:05:46:25:2a:
                    c0:8a:74:94:fc:04:b4:af:e0:22:5f:00:34:8f:d8:
                    dd:2f:7a:ad:0b:94:f8:70:64:2c:59:fc:32:32:cc:
                    d4:0f:ed:77:81:a7:88:1a:69:69:fa:03:bf:3f:ef:
                    7b:7b:51:02:5a:8c:79:76:78:92:42:89:2c:77:f6:
                    96:48:27:45:27:51:2a:37:4a:0e:62:f7:f8:7a:4b:
                    2e:7b:69:00:13:28:50:dd:af:05:8e:3c:95:af:16:
                    32:bc:b3:5d:38:02:ed:67:ef:64:1c:a4:d4:ef:4d:
                    cd:08:02:26:22:1a:26:87:62:4b:e6:3a:ec:5b:26:
                    ae:3a:5c:3a:dd:44:77:5c:9c:a9:db:0f:91:65:97:
                    1d:58:74:58:30:26:76:bb:7e:06:68:9e:6a:7c:09:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:2B:D3:67:CA:C7:0E:F5:AC:C5:B5:F1:DA:68:38:9D:B2:20:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/e14cc174-68fa-3252-9d74-713b58db3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl

            X509v3 Authority Key Identifier:
                keyid:B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:5a:e3:e7:d3:e2:d9:03:d5:94:f9:33:1e:17:b9:9e:c0:
         60:54:ec:6f:90:8e:6f:0f:06:ac:f7:96:64:4e:43:38:86:d4:
         ef:e2:7e:a0:67:35:84:15:ad:e0:45:dd:ac:6f:72:58:1e:a0:
         3c:e2:52:aa:97:07:41:79:cd:d0:4c:c8:91:2d:0c:1a:a7:c6:
         55:65:e1:07:e9:db:6d:c3:50:f9:02:10:c7:eb:98:11:b5:14:
         65:03:3e:ab:02:36:63:45:78:00:92:27:30:6c:a0:86:b6:e4:
         ce:41:75:95:54:28:88:90:c4:ce:bf:91:b3:f6:70:56:1c:ee:
         18:6c:47:a6:73:94:ae:53:39:b6:b7:bf:2a:88:43:bb:e2:a8:
         bc:57:56:d3:85:d0:39:fc:7f:25:d3:62:c9:8a:a8:40:d7:b1:
         3b:20:88:d4:48:2c:aa:63:62:11:2b:2e:15:2c:59:97:2c:b4:
         83:18:44:11:22:48:45:19:e1:6f:2d:3e:5e:ea:e5:cb:35:b0:
         33:f9:ef:72:46:32:c2:d1:1a:ea:4b:c7:d8:b9:a0:64:be:f8:
         b1:f7:06:4a:66:2a:d7:aa:f6:fd:51:db:d3:81:ab:05:7b:6f:
         e4:94:f2:76:18:66:35:4c:b0:30:1e:6f:1a:68:c7:e6:26:aa:
         ff:da:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 23:26:31 2026 by rpki-client