Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa
File:                     ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa (raw, json)
Hash identifier:          QWB1xuon64eQxPCYbm4SRFxM25OSXo2zBqYSiUwP1Og=
Subject key identifier:   B4:B9:2F:A3:80:D3:41:36:0C:30:5C:16:F1:B3:24:2D:1A:C8:67:DD
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DDD2082C00DB97E07674A1300
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     63023
IP address blocks:        66.163.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:82:c0:0d:b9:7e:07:67:4a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=d6241a2d-8bae-4e76-a498-39d27536490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:c8:3e:f6:77:51:3a:5b:cf:4f:aa:71:92:
                    53:66:20:78:17:9f:f6:9d:0e:e4:09:60:92:1f:c1:
                    f5:a5:85:39:5d:35:8f:35:95:ea:89:4b:eb:67:b1:
                    8d:9b:85:4d:aa:e8:77:cd:8b:7d:51:f3:ee:ae:02:
                    ad:9e:9b:01:f8:d6:da:fa:b5:3c:95:7d:8d:df:2d:
                    8d:d7:75:35:00:0f:25:6f:28:9c:39:65:21:d5:22:
                    4b:8a:2f:70:43:b9:20:01:76:39:37:4e:34:6c:63:
                    3d:d8:8c:b3:6b:69:29:41:ff:a2:4c:6f:e9:5b:33:
                    05:05:2e:3b:ff:e9:cf:5a:da:26:d1:ad:19:97:07:
                    04:4f:53:af:ae:f0:6a:bd:af:7a:9f:9a:c6:67:62:
                    d1:3b:a7:1a:b5:58:44:c7:12:f4:3f:89:47:7e:14:
                    53:a4:00:f4:32:cd:1e:3d:7c:e2:86:da:ef:c7:90:
                    98:f7:36:fb:9b:b0:d6:05:8d:e3:97:27:5c:a0:27:
                    9b:c4:28:f1:b9:43:66:d2:19:17:e8:8e:1b:63:41:
                    b4:e9:79:ca:0c:4b:c5:db:ee:34:4d:6e:08:e7:44:
                    d6:df:d1:8f:75:41:a9:0e:9d:8a:d9:bd:1f:42:6c:
                    ae:7c:50:ae:7b:cc:39:3f:60:62:da:ba:30:90:af:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B9:2F:A3:80:D3:41:36:0C:30:5C:16:F1:B3:24:2D:1A:C8:67:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/ea7c5aad-bab2-3731-96b2-cdbfc3a129a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.163.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:1f:cd:1a:43:bd:7c:53:d4:73:f7:15:3a:14:9d:7c:6a:
         93:49:1a:df:85:c7:92:b2:5e:61:b8:65:ad:90:d4:b6:25:bc:
         c2:7b:29:63:0e:ed:95:04:55:68:f3:56:06:fd:31:5c:be:53:
         6e:61:37:c6:3e:89:46:f0:45:bc:eb:58:84:8f:75:38:ec:6a:
         41:7f:7f:4f:fb:0f:c1:36:3c:9f:a7:60:2c:9c:b1:d8:ec:22:
         0f:35:04:e4:84:58:08:4f:09:76:22:5b:cc:db:5e:ab:1e:68:
         04:80:ab:d1:a9:73:9a:de:45:9f:f4:8c:1f:92:08:bb:05:bb:
         0d:37:54:de:d5:ef:59:af:84:9a:65:6d:86:58:98:e1:4f:a9:
         54:59:ac:98:18:ca:29:c8:0c:7d:e2:e5:22:8c:7e:b0:7d:63:
         c3:86:99:4a:c3:33:9c:28:ac:82:b0:c3:c0:0c:43:2c:89:61:
         3a:2d:26:e2:aa:08:b8:ee:32:57:92:1e:a4:93:a5:81:49:a7:
         60:0b:29:74:40:a3:36:a0:b1:6c:e4:56:b5:d7:89:17:fe:06:
         aa:74:8e:51:e9:d2:b3:c6:5d:91:ff:a8:34:e2:e4:3b:0c:67:
         b0:79:d2:44:02:6f:ec:c6:21:23:ed:0b:0f:36:14:d5:a9:45:
         21:0f:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:16:00 2026 by rpki-client