Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/b828d39e-9e2d-3a98-b77d-25dba55e6763.roa
File:                     b828d39e-9e2d-3a98-b77d-25dba55e6763.roa (raw, json)
Hash identifier:          NaD5kE/RQC3DiLlunCnR3+sbNUS+Id6A/nd9VzHiMa4=
Subject key identifier:   D6:41:09:B1:4F:72:BC:EC:0F:A1:65:25:7A:4B:D7:3A:E6:A9:B8:9D
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584D8EF55CF4F15C8F7CD65EBA40
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/b828d39e-9e2d-3a98-b77d-25dba55e6763.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     394161
IP address blocks:        199.66.8.0/24 maxlen: 24
                          199.66.9.0/24 maxlen: 24
                          199.66.10.0/24 maxlen: 24
                          199.66.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5c:f4:f1:5c:8f:7c:d6:5e:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=313b54db-e09b-4130-8f88-5ab5ea60dc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:25:34:9d:68:6b:47:bc:ad:03:d1:77:0d:
                    17:22:d8:77:47:89:6d:38:90:47:0f:f7:31:9e:a6:
                    e7:0a:b6:29:e1:c8:76:35:76:99:18:76:47:15:3a:
                    26:1b:89:75:33:8b:5c:14:0d:07:c3:d8:bd:f3:fb:
                    8f:a1:66:17:20:73:11:f0:83:7e:1d:6f:9d:4d:e6:
                    f2:2d:95:03:ae:2d:ee:21:b4:6e:13:d3:8d:d8:91:
                    ce:74:cf:6c:49:15:9b:0c:b1:a4:cb:2d:4f:08:24:
                    54:3c:16:13:ff:14:35:d1:41:4e:14:1d:cb:da:68:
                    03:73:fd:e7:e3:f0:1b:11:63:80:19:57:7d:12:de:
                    68:c3:25:ab:0e:bc:fe:d2:e8:52:d5:53:1a:e2:5c:
                    5e:6c:58:cb:33:e5:f8:88:e4:71:13:72:69:00:7a:
                    73:46:38:55:a0:2e:a8:4a:e6:e5:70:b0:21:95:d1:
                    44:16:6d:40:92:ee:2e:ba:d3:ea:3f:c5:a4:81:ad:
                    c1:eb:3d:74:52:dd:f3:0c:68:7d:51:7d:f8:e8:cd:
                    d3:42:67:80:ee:c0:8a:56:a4:28:a8:33:62:dd:97:
                    0f:01:2f:8b:9e:06:47:dc:3d:7d:6e:ba:13:53:b0:
                    06:cf:48:07:cb:b8:dd:47:47:eb:32:cd:2e:1c:e4:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:09:B1:4F:72:BC:EC:0F:A1:65:25:7A:4B:D7:3A:E6:A9:B8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/b828d39e-9e2d-3a98-b77d-25dba55e6763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:06:c5:36:26:28:de:81:01:7e:6e:e9:e5:43:ce:2c:c7:96:
         46:8b:8b:3f:f2:86:2e:4b:4d:52:c8:c8:e4:65:9c:9c:18:79:
         ac:fc:77:99:e9:8e:62:e3:17:0d:f7:f0:ee:a8:94:66:ec:8a:
         3a:17:a3:5c:0a:fd:18:0f:8f:f0:10:9c:3b:b8:a0:67:2a:b8:
         db:1f:9b:bf:26:62:8b:ee:4a:aa:e1:d5:60:b6:73:fd:a3:76:
         72:f4:16:16:a5:e1:db:2c:e0:b6:80:cc:cc:d3:d7:16:6a:7f:
         ad:99:16:55:6b:db:e4:6d:1d:97:fe:a4:a3:b9:4d:41:b0:bd:
         6b:4d:71:c3:e0:8f:89:8a:4b:b5:d7:ce:90:c0:f7:a5:21:7e:
         50:e2:72:3d:c1:c8:06:87:ff:33:67:7f:ea:a9:2d:91:c6:51:
         7b:35:c5:89:85:72:e8:4d:03:cb:a5:b2:de:15:a6:df:7e:69:
         07:f3:f9:30:18:a9:6e:1b:84:63:02:80:bf:b9:22:93:d9:5e:
         72:05:0d:45:a7:35:b0:e7:a0:99:ef:e8:ff:ff:05:79:7a:ef:
         c0:38:b6:5c:82:1d:cc:e4:cb:ed:f6:8f:b8:c2:88:ca:02:e0:
         28:64:06:21:f6:6a:cc:69:99:88:c5:15:df:14:30:cd:fb:2e:
         4a:a0:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 17:44:11 2026 by rpki-client