Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa
File:                     0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa (raw, json)
Hash identifier:          Z6ZlrQ0eK3e+wPAJTIPT83SK5xrVofWS8puGtpPQlCo=
Subject key identifier:   DE:C8:02:A4:5C:BC:E2:5B:A1:84:DC:01:F7:39:F5:C7:9F:0E:6E:6C
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584EA798706B7605CF1DABDB3DB0
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1403
IP address blocks:        66.158.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:70:6b:76:05:cf:1d:ab:db:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c5c79f56-05aa-49b7-bc18-62cf72038cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:bb:57:cd:a2:3c:be:fa:b5:5a:95:07:fd:
                    c0:ec:cc:0c:ff:7d:0f:c2:99:40:89:41:4f:d8:a8:
                    9a:c3:81:07:61:64:a8:de:3c:c8:89:c7:11:71:55:
                    fd:0a:bb:fc:c9:6c:eb:a4:62:e4:f4:61:11:bd:a2:
                    ec:e3:ec:7d:a1:d5:4e:07:13:f5:96:96:d0:cb:7b:
                    81:97:3a:82:17:e0:a3:bf:d3:0b:a7:fd:3b:3a:5c:
                    1c:b0:8b:09:e8:5f:1a:e8:dc:64:0f:f4:55:b8:a4:
                    d4:0f:91:8d:0b:72:f3:74:d3:b6:0a:4d:de:d6:a3:
                    43:a4:6b:61:de:6d:39:4c:2d:30:6c:04:54:92:d1:
                    fd:99:e6:63:d8:0f:99:c9:69:5b:f0:d9:ff:05:d7:
                    a9:6e:55:4a:e9:fb:0f:ff:91:d4:fd:df:4c:2a:e1:
                    99:f5:26:27:56:f4:4f:7c:3b:be:46:da:8b:48:3d:
                    5f:92:d8:75:fa:f0:6d:30:19:91:1c:3b:17:d4:ba:
                    53:cf:7c:54:4b:27:55:c9:f1:2c:e6:24:45:a0:16:
                    c2:de:84:2c:3a:ba:d8:20:05:45:76:f7:53:61:0e:
                    66:17:47:12:9b:c8:ea:42:44:76:d5:16:e4:8e:2d:
                    cb:aa:04:9c:70:f7:4a:14:4a:13:f6:da:b7:b6:35:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C8:02:A4:5C:BC:E2:5B:A1:84:DC:01:F7:39:F5:C7:9F:0E:6E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/0ef7228e-ab24-3ac3-8fdf-12e756bb8b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.158.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:17:72:b9:26:a4:9c:78:30:b5:42:d2:70:ef:5b:9b:28:c2:
         ff:c4:8d:ab:07:63:2b:a8:c3:9b:30:a2:70:c9:d4:af:29:d5:
         1b:c4:74:4d:3f:91:7d:8f:3a:b3:88:1c:98:1e:5c:d3:34:d8:
         68:f8:3e:80:18:60:39:77:6a:70:da:e1:5a:8a:a8:3b:fa:88:
         42:68:49:a5:4d:f4:49:8a:7c:b7:9e:84:c2:13:f1:ea:9f:6d:
         ed:16:e2:2f:73:52:3a:ac:a1:fe:4f:21:fc:af:89:b3:7d:da:
         95:d3:37:3c:76:d7:28:07:31:57:fd:26:d7:3f:3c:41:ce:51:
         1e:17:17:40:b3:b3:c8:74:a8:a9:0b:3a:05:43:11:a5:73:98:
         04:01:98:b9:6c:2e:8a:89:49:fb:78:c0:91:cd:a0:9e:6c:67:
         ea:be:e4:0d:59:b8:87:1b:a5:e0:4a:ec:1f:21:4b:11:21:49:
         03:a9:47:99:40:8d:fd:10:69:da:fa:3f:d7:01:62:7c:90:e7:
         09:a7:bb:56:ee:7e:55:7a:a6:41:58:18:91:8b:c2:57:bf:da:
         f7:e6:be:02:55:07:fa:06:5d:09:7f:be:f3:ee:de:db:cf:e7:
         26:86:60:20:12:91:9a:09:de:f5:58:e7:c7:f6:3b:eb:1f:68:
         e1:f9:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:10 2026 by rpki-client