Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/fc3d49bc-f84f-3622-bb10-4b6a570a478b.roa
File:                     fc3d49bc-f84f-3622-bb10-4b6a570a478b.roa (raw, json)
Hash identifier:          vlespsE09FNNl6Pp4+7xAO316bPVMkeKRty3ABw2zZs=
Subject key identifier:   77:18:B7:30:55:4F:9D:DF:08:35:36:6F:C2:6E:B8:DE:BC:F9:95:76
Certificate issuer:       /CN=d041dd54-b389-4aef-92a6-9d7a8fd91e99
Certificate serial:       010D0C9F4328584DF210ACB621085CE6FFAC64C0
Authority key identifier: 19:1C:DA:70:60:DF:67:F2:02:E5:63:DA:D8:C9:5C:5F:A1:77:D9:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/fc3d49bc-f84f-3622-bb10-4b6a570a478b.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     54049
IP address blocks:        199.66.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/d041dd54-b389-4aef-92a6-9d7a8fd91e99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/d041dd54-b389-4aef-92a6-9d7a8fd91e99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:ac:b6:21:08:5c:e6:ff:ac:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d041dd54-b389-4aef-92a6-9d7a8fd91e99
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=2dde2f38-8cfb-45fd-8d61-c0b50899633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:b6:06:f9:92:eb:f4:96:99:ae:24:29:4a:
                    6e:fd:36:b2:f9:cb:4c:dc:5f:6e:fd:9e:55:b8:42:
                    11:ce:a5:7d:f3:02:84:41:35:55:38:65:85:c0:31:
                    cb:3b:47:17:68:98:3a:a1:47:34:16:91:a2:8d:52:
                    23:dd:f9:c7:da:71:86:76:c1:4c:67:f2:3e:48:47:
                    07:30:ad:8b:4b:47:8c:d2:bd:a3:a2:b3:74:02:95:
                    86:47:cd:2c:f6:c3:d7:24:0f:2f:9d:0e:e1:79:b6:
                    13:e1:86:dd:25:51:18:24:60:53:fe:8a:15:57:20:
                    5c:f6:06:c6:0a:35:5e:63:c7:73:6b:33:8c:a9:0c:
                    b4:51:ff:6c:13:4b:fd:87:6e:c1:f2:5f:9a:3f:30:
                    26:7f:5a:97:31:61:9d:22:6e:03:92:dd:3a:df:fc:
                    1a:a0:12:a1:37:38:14:6d:bb:e5:e2:ff:d6:51:dd:
                    52:8c:8b:6c:7e:49:68:95:51:62:ab:c3:ff:01:97:
                    5d:d1:72:c6:c0:67:8d:76:d9:ca:74:da:48:6e:36:
                    73:3e:e5:7a:9c:1a:ce:fd:0f:5e:a4:84:07:c6:93:
                    a2:62:9d:21:79:05:7f:6e:eb:08:56:23:14:7a:7e:
                    6f:76:53:f1:41:6b:30:d5:dc:c8:7d:18:bd:26:e0:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:18:B7:30:55:4F:9D:DF:08:35:36:6F:C2:6E:B8:DE:BC:F9:95:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/fc3d49bc-f84f-3622-bb10-4b6a570a478b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/d041dd54-b389-4aef-92a6-9d7a8fd91e99.crl

            X509v3 Authority Key Identifier:
                keyid:19:1C:DA:70:60:DF:67:F2:02:E5:63:DA:D8:C9:5C:5F:A1:77:D9:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:7a:ea:fa:c2:c7:bd:75:8d:44:7e:41:ab:07:22:ca:10:
         d2:95:44:57:a9:b8:3a:b0:9e:eb:4b:b1:e2:37:12:dc:31:27:
         72:05:b1:f7:b3:f5:6b:a4:f4:97:89:12:07:b3:ba:c0:c2:59:
         53:09:a7:be:af:13:8c:b1:2d:28:8b:7a:08:89:fd:dd:ed:19:
         2f:08:62:45:69:aa:12:b2:cd:3d:2d:97:10:5c:6b:aa:2b:80:
         f3:f5:da:19:0a:52:10:10:c7:89:7d:66:d7:e5:0e:64:1c:a2:
         76:58:a0:08:dc:fc:5e:4b:82:98:ea:fa:4f:a1:b9:42:54:dc:
         54:65:39:da:eb:51:77:89:e2:22:55:e4:cb:61:81:2b:fc:5f:
         e1:b3:19:72:e8:2c:25:54:b2:fc:64:65:ad:15:1b:ba:c5:0f:
         91:d4:54:6f:76:d5:ed:87:ce:58:da:75:c7:96:9e:f0:fa:db:
         06:eb:f5:62:19:6e:2b:b7:cb:4b:88:69:e1:68:66:3c:30:6a:
         12:81:a0:0a:75:1a:78:40:68:e2:40:cd:cf:84:6f:8f:8e:4c:
         4b:aa:e3:03:16:1d:26:84:b5:f6:99:56:c6:3f:7f:79:81:19:
         44:f6:48:09:a8:eb:4c:a3:52:41:b8:96:15:fa:74:05:28:7f:
         1c:8c:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:01:33 2026 by rpki-client