Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/66a567ec-8036-35ef-bf65-51b31f7220ac.roa
File:                     66a567ec-8036-35ef-bf65-51b31f7220ac.roa (raw, json)
Hash identifier:          EkV9Dw2TI4vujmVD4/6tZhL9v9gFeOgtsoTcUgbFR2k=
Subject key identifier:   8D:49:F2:3B:96:13:8F:6E:84:11:64:BF:17:2D:FF:5F:07:B0:9F:21
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584D8100A80C105586BB5C01FB00
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/66a567ec-8036-35ef-bf65-51b31f7220ac.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     400110
IP address blocks:        184.169.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a8:0c:10:55:86:bb:5c:01:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=2c95a233-257c-4c92-a093-33b066900175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:3a:53:ac:71:0c:71:f3:d0:4c:77:4e:94:
                    35:d9:f6:d3:21:4e:54:da:3a:65:4e:64:8a:ab:52:
                    8c:ea:48:d0:79:49:96:b3:ea:b8:3c:b8:f9:93:ad:
                    7b:16:ba:74:a8:9c:d7:8c:21:eb:f7:43:5a:c8:a3:
                    5a:67:bc:de:c5:b9:2f:85:82:a5:08:3b:d2:d6:39:
                    ce:5c:ce:bc:d6:0a:1c:b6:68:02:3f:58:83:8c:12:
                    fb:3e:28:a7:4c:be:ba:35:2e:76:8d:c1:00:ef:1e:
                    63:ac:cf:80:ef:62:41:1d:69:de:8a:7c:c4:0e:44:
                    e6:1d:0e:66:49:c7:85:8a:f0:56:d0:2a:fc:72:19:
                    49:dd:ba:f7:10:8d:5d:83:36:c5:49:08:ac:ba:7d:
                    1c:23:d2:12:a0:27:83:a3:58:9d:99:f1:ca:b2:66:
                    fb:18:07:3d:f5:e5:7b:e6:10:82:13:33:ad:09:c4:
                    cd:77:c0:c0:3f:eb:cc:eb:72:c9:20:c2:4d:c6:9d:
                    21:4c:0c:5a:b7:bd:e7:31:54:39:da:68:a9:81:8e:
                    1d:1c:84:75:3f:76:5d:91:75:6f:cd:6b:55:4c:29:
                    bc:19:74:d4:22:30:0a:49:a7:1a:02:c5:5f:84:39:
                    81:b1:3b:b0:16:8a:b7:20:dc:1f:db:45:81:2e:47:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:F2:3B:96:13:8F:6E:84:11:64:BF:17:2D:FF:5F:07:B0:9F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/66a567ec-8036-35ef-bf65-51b31f7220ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:ff:6b:5b:76:18:fa:34:3a:13:42:a6:57:27:34:d8:50:
         34:8d:08:5a:60:2a:26:7a:e5:98:8d:cb:be:bd:e1:f0:a7:16:
         01:e6:da:e5:c4:d7:c6:b2:45:62:c6:a1:0b:ec:ed:71:99:80:
         e6:c0:ff:fe:45:8b:68:b8:f0:d7:8e:ce:81:c9:5f:3e:f2:25:
         e4:e6:f6:5c:0a:b2:c4:92:42:69:e5:53:7b:6c:9d:79:c4:31:
         14:68:b7:68:17:16:5a:39:18:93:63:66:d8:7b:09:a1:cb:d3:
         c1:eb:1f:ac:b7:01:8b:bb:de:97:97:fb:41:75:56:1a:a5:8e:
         61:ee:e4:33:ee:cd:75:b5:4d:80:2c:a1:cd:12:dd:14:62:d1:
         c0:23:33:64:b2:ca:4d:ad:1f:8e:9d:12:93:6d:68:18:90:7c:
         ba:0e:31:0d:a4:af:39:b0:ab:c5:fb:bc:2c:bd:ad:89:9e:3c:
         59:43:21:da:a3:67:20:a3:3d:7b:15:45:6c:4d:74:ab:6b:5d:
         77:05:36:9a:65:bd:f6:79:2f:52:7d:7a:86:cf:2c:c5:f4:b4:
         8f:49:ce:03:87:36:6e:01:bb:7f:65:e1:34:f7:70:ce:5b:be:
         ad:f5:01:78:95:2a:49:64:7a:db:a5:2d:9b:c1:bf:1e:84:5e:
         c6:b5:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:00:24 2026 by rpki-client