Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/25d6b20d-3b6b-3f60-a3d1-e98d4f1135e8.roa
File:                     25d6b20d-3b6b-3f60-a3d1-e98d4f1135e8.roa (raw, json)
Hash identifier:          dy97N9RfQZUXJBI9HRe9SoXOr9xW3/XC9pEF9jQKpiQ=
Subject key identifier:   5F:2E:17:44:32:28:63:6F:E1:40:C6:68:87:ED:4F:A1:E7:4D:AC:F8
Certificate issuer:       /CN=19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f
Certificate serial:       010D0C9F4328584DE163817AD0BD639763490280
Authority key identifier: 9C:1A:43:31:B6:9D:C6:E3:98:75:89:66:EA:29:14:83:1A:94:FB:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/25d6b20d-3b6b-3f60-a3d1-e98d4f1135e8.roa
Signing time:             Tue 19 May 2026 01:38:57 +0000
ROA not before:           Tue 19 May 2026 01:38:57 +0000
ROA not after:            Mon 17 Aug 2026 01:38:57 +0000
asID:                     6079
IP address blocks:        66.6.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:63:81:7a:d0:bd:63:97:63:49:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f
        Validity
            Not Before: May 19 01:38:57 2026 GMT
            Not After : Aug 17 01:38:57 2026 GMT
        Subject: CN=694ded09-1b48-429b-baf7-bc990593e0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:c8:33:10:a8:7e:d2:54:e8:32:2e:d4:4d:
                    c4:70:68:75:ab:c5:f6:20:bd:6f:3a:db:d4:b3:15:
                    a1:ef:92:88:6f:26:da:12:c1:2e:20:56:59:43:e7:
                    9f:c7:27:12:65:75:88:df:90:88:11:7b:59:66:89:
                    44:e7:08:91:62:8e:d0:f6:ab:1a:bc:44:1f:c6:e5:
                    2f:f4:71:aa:90:de:f2:20:33:66:ab:ac:3d:cc:92:
                    e5:93:cc:3d:d3:11:1e:4b:4e:c7:66:0f:0a:45:46:
                    2f:96:10:83:73:b4:60:dc:97:2b:67:c6:26:14:b8:
                    74:f4:4d:22:57:9f:a8:42:7c:68:d7:cc:93:b5:90:
                    65:26:e7:ab:f0:da:6e:20:58:f2:8a:92:9d:8f:a4:
                    1e:6f:ab:24:a8:46:7f:93:8c:2b:35:36:cf:26:76:
                    3c:21:cd:07:01:71:7d:82:6b:61:85:1d:57:ed:df:
                    00:45:90:4f:04:c7:79:7b:2d:ad:ed:bd:5a:1f:7a:
                    6c:ba:f4:3e:41:63:a3:c2:3b:a7:42:5f:e2:9b:af:
                    23:00:97:22:61:62:db:dd:36:01:b4:39:4d:dc:2f:
                    73:97:9d:4c:a1:3b:55:b9:91:99:1b:d7:7e:00:a8:
                    3c:39:6e:a1:5a:55:e9:32:bc:6e:89:30:42:fb:49:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:17:44:32:28:63:6F:E1:40:C6:68:87:ED:4F:A1:E7:4D:AC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/25d6b20d-3b6b-3f60-a3d1-e98d4f1135e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:43:31:B6:9D:C6:E3:98:75:89:66:EA:29:14:83:1A:94:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/19a1fbc6-bf11-44db-8ec0-d43bcbba1a7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.6.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:93:1a:39:af:db:78:a4:76:80:7e:7f:23:03:06:71:b0:24:
         de:00:e3:4c:c5:01:03:cf:27:7d:8e:8c:97:b6:66:e0:a8:2b:
         86:c3:b4:77:54:2b:1b:64:d4:65:05:a1:43:53:60:71:00:dd:
         a7:58:ce:a0:6a:44:fb:26:0f:cc:25:da:52:44:c2:d0:19:fc:
         a2:a6:7c:fc:b4:39:c1:3d:bb:e8:fb:a9:1c:dc:81:b8:5c:73:
         20:76:29:70:37:1c:16:44:e7:2f:b5:ea:2e:0c:b8:15:30:f5:
         ae:c5:5e:28:9a:e9:05:20:44:4d:df:33:72:b0:9f:27:d6:24:
         66:a6:93:20:9f:58:9c:02:10:f3:e4:28:ec:17:9d:28:88:e2:
         fc:18:99:97:67:6a:87:51:2e:fb:4f:c6:61:39:bf:cb:c7:03:
         87:29:df:4c:9c:61:ac:b8:52:4b:a9:65:a0:aa:b6:b0:3f:83:
         9c:d4:d1:dc:fa:90:b6:fa:01:2a:ac:ee:fe:a2:8c:f6:ab:72:
         38:e2:5d:11:64:f6:f4:ca:08:41:9e:94:8a:e3:25:11:03:52:
         1e:17:2f:74:f4:e0:89:76:09:67:5d:e6:f7:dc:6f:12:1a:79:
         bf:cc:8c:25:26:d2:ef:47:6c:27:13:65:19:3b:2e:26:cd:98:
         b0:81:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:52:46 2026 by rpki-client