Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d869d145-484a-360e-ab07-7ac6a100dbf5.roa
File:                     d869d145-484a-360e-ab07-7ac6a100dbf5.roa (raw, json)
Hash identifier:          jsdp+ZgmRqhsuLgScsOi+WnYHs9CsiUK79Hs5bIxecE=
Subject key identifier:   31:B7:F4:83:9D:5D:8A:E4:FF:6F:69:76:43:F9:79:E5:84:D5:B5:78
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF375E98D65034B577A28FD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d869d145-484a-360e-ab07-7ac6a100dbf5.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     274035
IP address blocks:        66.80.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e9:8d:65:03:4b:57:7a:28:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=e4734362-fec3-4d71-8327-5b7bfa9c69f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:b9:6f:8d:47:d5:de:d7:f4:24:57:8e:59:
                    c5:23:5e:69:6a:9a:53:62:61:85:a9:8b:e8:63:5b:
                    49:c1:5c:f3:8e:ee:98:0e:f5:08:8f:ec:26:ab:27:
                    0e:ac:72:b5:fe:65:1f:d1:90:e0:ea:3e:d7:6f:d6:
                    e9:1a:23:b7:bb:58:8c:65:a7:dd:f0:f5:8f:60:62:
                    ba:dd:e5:b1:cb:28:1b:ea:93:db:e7:21:ce:81:ad:
                    60:ec:d5:31:fb:16:e5:fa:ff:4a:e8:af:c3:2b:e4:
                    54:d8:3b:05:d0:f8:44:48:aa:47:85:19:44:3a:62:
                    97:21:4a:06:e6:80:33:bf:95:ff:60:61:3f:6d:6f:
                    7b:c0:4f:94:db:15:5d:f3:2b:ac:12:bf:db:40:11:
                    25:5b:d5:0a:33:3f:40:84:64:40:d4:9c:b1:c4:73:
                    3e:29:b9:ff:ae:da:f3:ae:8f:d0:77:31:3c:97:da:
                    12:f1:02:44:bb:62:f7:67:94:ac:e8:3a:8f:1f:10:
                    0a:f6:c5:c2:a1:af:a8:d9:50:52:aa:43:a5:dd:ae:
                    0f:53:b4:57:af:b1:2e:1c:d9:29:16:2d:97:38:26:
                    ea:c8:3e:c8:64:c0:88:e2:53:4f:a8:72:48:da:1e:
                    ae:f1:54:c4:24:5f:7e:91:dc:78:d2:83:a6:9c:c3:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:F4:83:9D:5D:8A:E4:FF:6F:69:76:43:F9:79:E5:84:D5:B5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d869d145-484a-360e-ab07-7ac6a100dbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.80.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:54:e0:5c:ef:0a:7d:c0:a0:9e:01:a9:18:6e:37:f8:ba:5d:
         7a:bd:16:f2:3a:8c:f6:b0:6e:c3:3b:38:fb:29:19:d8:fb:93:
         25:42:a9:40:82:f5:f0:ea:e0:50:a7:ac:0f:6a:26:a0:fc:67:
         29:f0:71:e2:ae:88:bb:8f:97:d7:b7:87:29:1f:1c:74:3b:2e:
         0e:2d:1b:de:64:17:e3:2e:2d:30:d4:a8:56:d3:62:a1:72:67:
         9a:15:51:a1:1b:71:f9:e5:ec:c5:27:3f:5b:40:bd:26:c9:36:
         5a:5f:ea:74:ca:34:14:93:88:3a:0e:4b:7c:98:fa:10:72:88:
         d6:40:cd:51:70:35:a1:6f:cd:12:d0:3f:0c:12:d4:b7:9d:12:
         61:e3:c5:b9:b6:c2:d9:35:5e:6a:b6:d8:63:44:55:06:c2:50:
         cc:88:df:c7:3f:ab:87:03:1e:3c:91:4c:8d:a1:0d:a4:60:c5:
         42:b9:c3:cc:a2:c2:30:0d:1b:35:15:ee:29:b9:7f:91:a9:1f:
         6c:fd:2c:ca:08:ab:82:11:fc:2d:08:d8:df:b2:0c:80:f3:34:
         e9:d8:72:73:6b:ea:e9:dc:03:d1:fa:d4:86:7d:1d:d4:35:25:
         c3:54:1d:20:68:cb:a8:97:46:d5:f1:ae:ee:10:a2:ba:23:c2:
         79:db:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:33:19 2026 by rpki-client