Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa
File:                     ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa (raw, json)
Hash identifier:          M81cufN7dmLWJ1u9U2WV/PkkGyCC8owzG6Sp2cy/wXA=
Subject key identifier:   6D:C3:94:DC:1A:2C:83:94:DD:62:C0:4D:31:96:6A:20:1C:FE:BC:1D
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A4BB4E990064FDEFCFB80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        66.115.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4b:b4:e9:90:06:4f:de:fc:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=c5b750fd-8ff4-4262-bf16-628f62ea3097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:c7:84:39:40:4a:ae:9f:40:4c:1c:55:6d:
                    87:4e:e5:ee:27:73:5a:f9:37:22:33:9f:80:1f:ba:
                    58:71:a4:20:19:9f:9f:10:92:f6:ba:e1:13:f2:9f:
                    d4:b5:f7:40:2f:46:1e:5a:e0:e0:fc:10:7b:53:fe:
                    de:b0:49:94:34:6c:ff:c8:36:22:ed:22:0f:d4:ac:
                    b9:db:ac:b9:3d:30:89:76:e6:d3:41:bc:38:95:fe:
                    b1:3d:85:88:26:eb:47:8b:12:c3:b3:2f:c9:63:c1:
                    02:3f:7a:79:ad:13:ff:4b:79:95:0a:95:0e:a8:16:
                    35:89:48:63:04:e4:a1:4a:b0:75:f1:54:1a:f2:cb:
                    b9:06:e2:4c:dd:87:0e:26:ea:9c:8e:d1:15:0f:43:
                    88:6a:fd:5d:b5:e3:c5:d4:54:7c:5e:09:03:a1:d7:
                    94:0e:20:5a:c1:92:ef:65:24:01:7d:09:d6:fa:4d:
                    a4:18:85:9e:c1:87:b4:8e:fa:fb:3e:cb:c7:6d:89:
                    15:56:e2:3b:1e:c1:af:31:15:aa:12:d1:d3:f1:e5:
                    ee:eb:5a:90:c5:98:cb:42:e9:01:b9:e9:39:f7:5a:
                    19:65:9c:a6:f4:f1:1b:25:55:98:b4:66:8d:a2:eb:
                    db:65:86:c9:2a:00:29:39:fb:c2:f5:82:ea:d3:7e:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C3:94:DC:1A:2C:83:94:DD:62:C0:4D:31:96:6A:20:1C:FE:BC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:02:62:bd:4e:a7:51:9a:0c:49:6e:aa:30:31:ee:c4:dd:
         d6:e7:dd:ba:bc:4a:a3:8e:7f:37:d6:c6:35:cc:e8:89:48:2c:
         2e:8f:a1:49:57:24:5e:de:62:89:df:4d:16:ac:9c:eb:4b:bb:
         f6:23:a7:84:81:65:09:a0:2b:6f:be:28:61:96:04:5f:ba:30:
         a0:04:c2:ba:14:e3:70:36:ca:46:bc:3d:4c:6d:eb:f3:97:35:
         e3:57:30:16:b5:f7:7e:a4:02:b7:2a:5d:be:a5:24:e0:92:0a:
         d0:e3:1c:e4:9e:85:95:7f:38:c6:8d:ac:8b:83:df:1b:01:df:
         ad:bd:62:a8:ad:30:99:89:a8:63:88:22:63:db:1e:00:43:b3:
         9f:c2:04:41:4e:12:19:47:e4:47:3e:57:94:8e:83:1e:ee:c7:
         a5:69:61:b6:48:ed:0d:15:ef:56:3b:4b:f3:de:fc:44:7c:c5:
         90:50:6e:44:75:9c:b5:43:85:64:ec:00:32:e1:77:36:fa:9d:
         07:86:26:03:6b:56:55:f7:d5:13:a8:01:18:56:c7:57:e9:e6:
         bb:90:da:18:cf:a3:85:8c:e3:d8:b9:8c:7a:2b:82:7a:ac:93:
         ae:56:22:d4:fb:46:b8:a5:e6:a3:8f:b4:b9:d7:f7:3e:c6:99:
         d3:90:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:06:31 2026 by rpki-client