Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa
File:                     39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa (raw, json)
Hash identifier:          U18ZP3nYFQns5XgK9Q7YP6smokoyTJzMyBc4AThCm7Q=
Subject key identifier:   67:73:4F:95:B2:C6:4B:DD:2F:BA:6F:11:07:9C:40:B5:D6:93:67:2C
Certificate issuer:       /CN=09e8ec9f-45c9-4103-ba8f-29090f373418
Certificate serial:       010D0C9F4328584D4EBF9C7EDCF4D28B01812980
Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     17125
IP address blocks:        66.211.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:9c:7e:dc:f4:d2:8b:01:81:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=e733b814-725d-4a9c-af8d-b8d14ab4892a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:2b:c9:9c:01:2f:51:14:45:f1:9e:50:fb:
                    1b:ae:89:6e:fb:c0:a5:d3:9e:53:77:ea:47:ef:ec:
                    95:da:ef:6d:8c:39:a9:7f:04:44:9c:a6:6f:b8:46:
                    6c:9d:ca:b1:5d:b7:84:47:a2:40:03:df:19:4b:d8:
                    6b:14:a6:d3:65:21:0d:62:ee:f7:b2:23:b5:76:35:
                    05:3b:42:46:bd:73:3a:12:a2:d6:ef:02:f7:3a:75:
                    38:8a:88:2f:64:86:e0:0b:7d:40:99:14:05:10:a8:
                    eb:7f:90:fc:11:c6:05:d9:4c:49:2b:43:c2:f1:ab:
                    2e:5a:2c:45:96:1c:a4:a6:ba:ee:9c:ca:3e:4b:18:
                    fb:39:12:ea:54:3f:56:8a:8a:48:a0:60:43:64:37:
                    58:ed:2f:a9:4e:0d:d2:a4:cd:56:93:f5:f2:e4:08:
                    0e:90:2d:24:9e:fc:5d:a8:0b:5c:04:15:75:a6:fc:
                    01:00:e6:d6:44:bc:92:c9:45:5a:3d:a4:94:af:96:
                    23:c8:f7:55:16:88:c3:89:bf:20:83:33:a2:be:e7:
                    81:24:2e:34:f0:e3:79:ba:a0:aa:c6:c1:bb:cf:e7:
                    be:26:da:e0:f7:57:45:a9:2e:76:92:68:5e:f5:4c:
                    57:d6:3a:53:d2:1b:9a:1b:d1:c6:58:9f:d6:91:49:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:73:4F:95:B2:C6:4B:DD:2F:BA:6F:11:07:9C:40:B5:D6:93:67:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/39f45e26-f3cc-3e8c-876c-aafdc0c1c2ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl

            X509v3 Authority Key Identifier:
                keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.211.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:03:65:96:8f:20:af:ff:8d:13:08:bd:fb:66:f6:fe:c1:57:
         af:9b:e9:e1:37:fb:de:05:17:11:1d:c3:ac:ef:db:36:e2:67:
         5e:5b:2b:5f:45:cb:44:34:27:b5:63:f4:e2:33:50:98:2d:00:
         c1:25:ef:dd:16:97:07:8b:31:14:3d:4e:a1:15:e9:e2:05:69:
         61:b1:86:28:a4:b5:e6:e6:aa:95:b6:9f:e3:1e:e4:72:c1:c6:
         48:78:f7:11:c8:38:88:5d:9a:79:50:15:49:2e:48:30:15:4a:
         8f:34:19:b8:47:30:36:6a:33:42:a9:f7:e4:29:85:f2:82:a0:
         07:2d:cc:5a:78:25:db:26:84:bf:93:06:14:2b:2d:b1:b4:87:
         d3:06:1f:15:2b:1d:40:15:7b:c0:21:75:dd:84:3f:58:b8:04:
         33:d3:ba:3f:af:3a:94:d0:4c:fe:78:83:13:64:ea:6d:b0:84:
         99:88:4e:5c:f3:ba:98:d3:fc:72:b4:83:5e:f5:c1:94:0c:e3:
         e1:ea:c5:6a:de:99:e0:b3:d0:e4:8b:8d:4c:1f:c6:7c:4c:61:
         4f:b3:40:64:ba:ca:9c:d4:3e:f6:bf:c7:16:57:d8:a3:91:3c:
         f6:3d:68:44:2b:9a:9c:fc:c2:82:a2:03:45:41:c8:29:5d:51:
         5a:fd:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:15 2026 by rpki-client