Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/935c8d67-cbcb-3dba-8591-086e8785ac02.roa
File:                     935c8d67-cbcb-3dba-8591-086e8785ac02.roa (raw, json)
Hash identifier:          zRtN72+oquOaFoTNIecztCPFTC1y0Yl3CrvXS/oOHzw=
Subject key identifier:   89:35:96:4B:11:87:85:74:CD:A8:06:17:7B:40:68:DF:14:80:B0:C4
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DDD2073EB28C623A201A18140
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/935c8d67-cbcb-3dba-8591-086e8785ac02.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     63023
IP address blocks:        66.163.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:73:eb:28:c6:23:a2:01:a1:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=149614dc-0960-4c20-8c92-cbd3ee1eba1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:6e:06:f1:82:dc:c8:4a:7e:18:d1:53:80:
                    dd:b0:0c:ed:69:4e:12:9a:90:9b:60:77:0b:de:f2:
                    51:dd:5c:3f:e6:15:09:40:81:f4:e0:7b:9a:d3:91:
                    5d:ff:ec:f5:31:46:84:39:fe:2a:fc:f4:71:35:f6:
                    a2:41:b8:4e:d3:81:f3:48:9c:30:da:94:88:88:16:
                    f0:75:30:91:f5:5d:37:b0:e7:87:b4:f0:cf:24:57:
                    bf:79:4a:35:bb:20:ef:69:76:86:4f:9a:c3:fd:b3:
                    71:46:84:6a:6e:f1:87:bb:2d:08:c2:0d:20:30:19:
                    76:00:37:b8:22:65:fc:ea:f5:6c:a2:fc:15:59:76:
                    ac:62:46:ed:6e:20:2b:67:12:58:eb:f2:1c:0f:d9:
                    76:e1:68:b6:75:fc:e1:06:a6:26:0f:d8:20:a1:c9:
                    10:45:1f:fc:45:10:51:c1:61:1a:7c:6f:6a:5d:f7:
                    a9:81:2a:3c:fc:00:b2:6a:4e:27:3e:10:90:1a:ce:
                    79:2b:7f:04:76:98:13:ec:bd:45:57:1d:9f:ab:4f:
                    47:0c:40:e4:56:82:c1:2f:ce:01:1c:fd:13:87:23:
                    52:7f:79:23:1e:9e:b5:31:9b:fb:12:50:89:ed:2b:
                    7a:c6:92:a8:1d:ad:0e:ab:0e:6f:43:54:ff:5b:50:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:96:4B:11:87:85:74:CD:A8:06:17:7B:40:68:DF:14:80:B0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/935c8d67-cbcb-3dba-8591-086e8785ac02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:37:4d:11:4d:c6:43:92:b0:17:24:09:46:e8:48:e7:81:
         43:a4:54:7b:4f:bf:9f:e2:43:70:12:b4:38:28:89:dd:b5:38:
         e6:38:3d:d9:28:d6:ae:9f:00:5b:90:9e:d5:eb:58:80:15:7f:
         16:4c:ee:1d:0e:c1:f7:ee:ec:70:f3:c2:96:67:aa:9c:96:d1:
         ea:28:ad:b7:1a:01:1d:23:5f:fa:f6:0b:76:78:11:00:ef:08:
         c1:b7:8e:9c:11:b5:33:eb:6a:11:a9:46:38:55:84:21:ac:8e:
         26:0a:ac:99:64:a2:30:9c:c0:5f:28:19:3f:43:99:a5:1b:9b:
         ca:88:b3:4a:56:8e:36:b4:ed:23:c8:c7:86:b5:65:d8:f3:07:
         0b:ee:ea:24:a7:f7:76:6f:70:6d:56:f6:2d:8b:d6:c1:7f:09:
         69:ae:80:c7:1f:aa:71:e2:0a:5f:34:3f:f4:b9:0d:45:dc:bb:
         fa:e1:ff:49:ba:ed:2d:23:d2:c1:d6:2e:68:12:73:5e:19:91:
         5d:36:3b:4b:4b:05:8b:1d:b8:c0:e9:c0:58:6e:eb:1f:47:24:
         a4:b8:cb:aa:3d:cc:1c:8a:a8:74:8a:7c:8c:af:a0:fc:ff:36:
         2b:4a:2e:69:7d:4b:cd:b2:8c:9b:85:99:55:c1:51:46:7e:31:
         12:27:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:16:49 2026 by rpki-client