Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
File:                     932614f9-93ff-322c-895f-a209b9bdba38.roa (raw, json)
Hash identifier:          3Emc+G8cMP47HYrOn3+/iKrjvz3ty2TPZ91JRYMB7YM=
Subject key identifier:   AD:9F:7E:F0:41:DE:C6:EC:AC:04:FE:87:B6:F5:A6:6F:F7:13:0A:B6
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E4129DAB95BDAB7FD98AFF700
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     20014
IP address blocks:        66.115.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:da:b9:5b:da:b7:fd:98:af:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=9b8faeaf-eeda-45e5-ad14-acda34730537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:b9:7b:ad:34:7d:35:2a:0b:71:74:fd:33:
                    89:72:44:c0:04:fd:97:66:e2:a8:dc:07:54:ea:2e:
                    0c:cf:34:62:cb:28:02:3d:7e:7b:4a:37:85:f0:b1:
                    2c:65:5c:e0:75:4b:8e:d4:3e:20:21:e8:d3:49:ce:
                    47:17:71:4f:ef:06:b1:39:88:e4:9e:41:bd:c9:1e:
                    44:24:9e:ff:66:35:b0:bc:31:e9:a1:70:a2:ff:ed:
                    75:1c:10:12:22:c1:7b:f5:f9:ab:c3:39:0a:3c:fa:
                    8d:8b:e3:30:c1:0a:2d:1d:7b:32:10:74:4d:9d:e3:
                    d2:b6:c2:15:d4:41:05:80:c6:d8:32:d5:56:a8:8c:
                    5e:8f:6d:00:8b:dd:3d:43:01:0a:b6:d3:df:a7:39:
                    c4:af:13:46:e8:3d:54:08:38:fa:3a:22:08:1e:0f:
                    ec:18:fb:6c:37:88:48:b9:11:39:80:38:d8:c8:47:
                    2c:cb:7a:e1:56:15:9b:45:96:87:3d:41:77:e0:d1:
                    64:96:e5:85:8c:f3:f2:3b:41:90:31:27:3d:11:47:
                    9c:02:93:df:32:db:81:c7:94:09:2c:f3:a1:53:16:
                    ba:87:ea:41:a8:bb:2a:b3:52:51:1f:01:97:3f:5c:
                    8d:3c:d1:08:99:4e:2e:0d:86:85:1a:72:59:38:d0:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:7E:F0:41:DE:C6:EC:AC:04:FE:87:B6:F5:A6:6F:F7:13:0A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/932614f9-93ff-322c-895f-a209b9bdba38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:1f:55:0c:26:8a:16:7b:fa:d4:91:5b:66:2c:31:8a:63:
         10:77:b0:5a:72:83:4b:2b:a0:e7:f8:30:83:3b:0e:94:8a:66:
         5f:ce:13:36:a9:fa:64:08:92:fb:d2:00:69:d3:c3:fe:2c:94:
         5e:32:0c:83:54:35:5c:b5:7f:4e:eb:67:b2:e8:e8:99:ab:00:
         10:0d:d4:98:94:6c:07:94:fe:0a:b9:a0:3a:90:0d:28:0b:0f:
         3c:67:80:51:f0:46:b5:d0:91:85:d6:35:45:57:51:c1:37:82:
         fa:d8:66:4b:d6:91:f2:ec:67:83:41:39:9b:a8:76:8c:ce:21:
         b4:c7:18:47:5e:77:d4:b9:63:b5:5a:3b:ac:af:c0:f2:39:b6:
         07:bf:57:56:f3:00:3f:3f:53:0b:92:2d:39:24:95:09:f4:83:
         f8:3d:21:d3:4e:62:2b:a2:5d:4c:bd:8d:5b:fd:0a:81:2e:a9:
         77:05:ff:95:29:3e:a0:72:27:d7:fd:75:9d:45:84:0e:ac:d6:
         20:22:cd:24:fb:e1:14:92:dc:9d:9b:41:86:76:d5:c8:7e:2b:
         34:fd:75:45:55:42:ad:74:f1:c9:0c:3f:a8:be:ca:1d:39:29:
         6e:fa:96:73:1d:cb:d0:d7:d9:d2:c4:94:02:c4:af:78:61:01:
         a6:e9:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:33 2026 by rpki-client