Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
File:                     fbd0f42f-fbef-3f5d-b443-269369b555df.roa (raw, json)
Hash identifier:          tTSujhTo6sA7tl9CwmupU/uuQQTfh+e3YKDKDIrOnqU=
Subject key identifier:   27:2E:B9:FE:7F:1C:47:71:9E:0A:DB:0E:D9:8D:35:D8:40:74:1E:32
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584D0D425AC11214D64D5707A0BC
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     397673
IP address blocks:        66.11.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:5a:c1:12:14:d6:4d:57:07:a0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=757d83c0-1848-4a91-988a-d4da57b66ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:df:21:14:e1:cd:13:62:48:82:6c:83:8e:
                    ca:a0:14:f4:c5:cd:46:cd:bc:e5:31:11:fe:81:e9:
                    b7:f5:a9:a4:92:4e:36:4a:5b:3f:37:bf:a1:87:39:
                    e5:8d:9d:a1:24:5f:9e:1e:c1:69:95:43:ce:e4:aa:
                    46:07:b8:40:b3:a6:a9:c2:a2:f3:67:9c:79:ab:58:
                    fa:fd:b3:90:b9:9f:0f:6d:21:f4:58:d3:70:09:50:
                    03:ec:bc:e3:7d:0d:cc:23:28:c5:3f:a0:18:f3:e1:
                    40:46:51:7b:e2:40:5b:48:8a:1f:eb:92:98:d8:6f:
                    2f:c9:b9:db:ff:18:9a:38:c8:33:30:19:94:be:e9:
                    39:b6:09:a2:49:ee:87:a1:9c:d5:93:a1:73:77:93:
                    d4:16:f1:52:ea:0e:29:37:47:e4:07:bb:b3:58:40:
                    5d:13:55:9f:95:43:30:2d:92:ea:a2:61:89:2f:1a:
                    df:e6:6c:27:bc:79:1b:da:76:0a:c3:a4:ac:8b:16:
                    9d:d0:e6:ef:ec:5f:2a:4e:bd:6b:52:f2:47:b4:2d:
                    e4:8f:8e:f3:38:4e:a3:4e:ca:7f:bc:44:cd:a8:e1:
                    cc:8e:11:67:43:71:d9:86:0b:82:c3:20:cd:6b:df:
                    9f:90:4a:88:3a:0b:37:cb:c5:7f:b2:37:6a:f9:33:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2E:B9:FE:7F:1C:47:71:9E:0A:DB:0E:D9:8D:35:D8:40:74:1E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/fbd0f42f-fbef-3f5d-b443-269369b555df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.11.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:51:99:b0:b4:48:53:37:99:32:aa:9c:da:e9:56:84:eb:7c:
         96:a9:85:7f:bf:11:c5:e0:9e:a8:9e:36:28:70:eb:64:ba:46:
         d9:21:b1:3e:d4:35:81:81:fa:5b:4f:91:fe:32:ed:e3:bf:03:
         43:8b:66:35:9d:e8:fb:cb:41:71:89:00:d0:5a:8c:a3:0b:1b:
         12:08:91:90:26:52:5a:1f:c6:4f:92:ea:f7:c2:85:8f:60:5b:
         e6:e6:fe:45:73:77:36:36:81:4b:c8:2c:df:7e:71:3b:2c:11:
         8c:62:b9:15:d2:cc:0a:20:7f:1b:8b:c7:54:70:c0:27:b3:0c:
         a9:1e:9e:96:83:30:68:b3:69:48:75:b3:93:15:01:ee:ee:9f:
         e7:90:37:14:56:a9:0f:f3:6e:dc:05:12:b9:e2:5c:c4:7a:37:
         92:26:28:87:dd:b2:4a:89:0c:e0:95:c1:9f:ff:0d:47:7d:40:
         c1:e2:b5:68:2f:66:94:94:c7:f5:0d:ea:32:f9:d6:1e:1b:c5:
         b9:63:d2:f3:c0:95:33:4e:1e:f0:a7:fe:57:d1:0c:29:79:b5:
         e1:5b:dd:0e:02:ff:c3:f3:7f:5d:b5:36:17:f0:0e:09:97:ec:
         2d:25:93:49:44:f2:35:fe:00:c1:4d:0b:8e:1c:41:63:10:85:
         bd:4a:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:16:42 2026 by rpki-client