Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ad9767da-829f-3be2-a859-06ffb5d7481d.roa
File:                     ad9767da-829f-3be2-a859-06ffb5d7481d.roa (raw, json)
Hash identifier:          nks+LXcXvGrCa5wBwGsufjEKluS2dOTwGGkLK6sNqUg=
Subject key identifier:   5A:63:4C:A1:21:5B:14:F6:B1:84:55:96:9C:61:81:3F:73:08:2D:7C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DDD207630CDD5B7FAACAB8BCC
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ad9767da-829f-3be2-a859-06ffb5d7481d.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     63023
IP address blocks:        66.163.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:76:30:cd:d5:b7:fa:ac:ab:8b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=4ecf1741-7125-45e5-bb5a-74ac628929a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:d9:f4:d2:50:97:0a:61:ad:d4:26:b0:f7:
                    78:da:c3:70:37:52:c4:d9:5c:02:0e:d7:62:8c:46:
                    b4:4a:c6:21:4f:3e:70:6c:bb:f4:93:1a:0f:60:16:
                    62:b0:ea:23:94:29:b8:ff:23:f7:ea:96:be:91:0d:
                    67:0f:55:b3:9f:e5:20:e8:92:b7:29:1a:ce:6b:bc:
                    cf:59:f7:b7:1f:7f:92:28:6e:98:fc:27:5a:5a:2d:
                    09:35:a8:b0:5d:d5:12:7c:5f:a3:e7:70:62:e1:6c:
                    19:bf:4b:f9:96:03:a0:b0:f7:d6:b2:85:e4:cd:65:
                    66:66:57:19:aa:d0:21:d3:01:d1:db:b9:e4:5a:06:
                    a9:4c:8c:c8:bc:ba:a1:6c:97:ed:86:4c:da:85:d6:
                    43:5a:c0:3c:b0:15:d1:c5:02:d1:ac:c3:0e:7c:e1:
                    b6:5a:1a:19:f6:10:2d:5a:d8:70:82:9a:b3:cb:4a:
                    bd:e3:48:16:fc:3b:fc:5f:ac:69:00:4a:28:42:57:
                    54:6a:99:f0:3c:76:a4:bc:e2:bf:1a:75:92:83:6e:
                    ba:c0:65:9b:be:9e:41:fd:6d:2b:5f:74:ba:62:94:
                    67:5a:45:0e:bd:33:2e:e7:98:22:c1:ad:a0:8c:55:
                    e0:31:f6:e3:be:1d:f6:ac:f4:18:45:2f:c7:53:75:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:63:4C:A1:21:5B:14:F6:B1:84:55:96:9C:61:81:3F:73:08:2D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ad9767da-829f-3be2-a859-06ffb5d7481d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:e9:15:76:5d:b9:32:ed:cf:45:89:b0:6f:8c:c8:a5:b0:
         af:1a:7d:e5:4a:8f:f4:fe:a7:03:af:32:de:89:c5:2d:a2:a9:
         db:5d:d9:74:83:99:3e:6a:f6:a1:ba:45:08:f5:d0:26:73:c1:
         66:fd:ff:22:0c:49:93:78:31:3b:b4:0c:46:27:1f:d2:86:35:
         bc:70:96:d0:ca:aa:bf:26:01:3e:a3:3d:f5:33:3a:f8:93:2e:
         67:23:a9:8e:c5:76:ef:ca:f7:ab:a4:be:a4:19:60:27:6b:66:
         33:c5:fc:84:eb:68:c7:d7:76:f7:86:b1:41:ef:99:9f:1c:d3:
         1b:d9:9c:1a:08:68:62:2a:c8:0c:eb:0f:ac:7d:29:a3:a5:b7:
         4f:76:d7:c2:7c:74:fa:95:51:e1:10:33:c6:5a:fe:e6:86:a2:
         50:0a:0f:c7:0e:11:d0:9b:cc:01:43:c5:5f:d3:5a:9d:f3:55:
         86:07:9f:40:b9:f5:a1:ab:97:52:9b:4e:a8:45:7a:4b:80:db:
         2c:35:ce:08:b0:99:0c:86:0a:fe:0c:84:34:76:25:6d:e2:0e:
         01:59:d5:f7:93:38:eb:53:41:3a:82:73:6b:10:86:ef:84:80:
         00:58:a0:1c:90:a1:51:ba:68:78:f9:50:5d:76:01:b6:92:dc:
         1c:d2:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:02:12 2026 by rpki-client