Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa
File:                     51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa (raw, json)
Hash identifier:          kio69lvn3hCr4CEXpHIMC+krjYtaqrM6lcJ6wKu3NMM=
Subject key identifier:   19:9C:D5:90:1D:39:65:71:1C:98:89:43:8F:63:B6:A5:DA:80:01:1E
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584DFA7080441D56956AF39A6200
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     8075
IP address blocks:        166.98.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:80:44:1d:56:95:6a:f3:9a:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=2adb5a37-304d-4007-8455-ab563fdda9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:03:a2:58:63:4b:d2:de:f7:b0:b5:0e:48:
                    c4:5c:82:34:3a:8e:48:98:f4:d3:bb:86:54:71:3c:
                    43:b2:fe:10:32:b6:19:f6:5d:64:75:ed:09:78:a2:
                    cb:37:5a:7d:84:93:5c:ce:60:04:97:1b:1f:4a:f6:
                    89:bf:34:ec:47:be:c1:fb:92:bd:ad:8b:c6:7d:75:
                    82:76:0a:fc:40:f6:d7:49:df:b0:5a:58:38:ee:27:
                    dd:a1:20:3d:cc:23:9a:e7:90:65:41:01:52:69:0b:
                    ba:6c:53:21:f6:66:e7:43:2b:ba:42:8d:fd:80:66:
                    3d:81:f7:d4:dd:75:ee:bf:51:df:b2:c7:6b:a8:e4:
                    a4:c5:e3:5f:74:4c:70:1b:e7:46:0b:fc:ab:7b:b8:
                    3a:b5:f1:e7:4d:d3:bb:af:cc:72:4a:ae:96:37:f4:
                    bb:e9:a6:f5:6a:75:c0:ad:5b:af:49:63:2e:c1:5a:
                    05:25:47:72:bd:a6:c1:72:f6:59:22:f8:f5:b2:8e:
                    69:ec:da:9b:dd:a4:e3:2f:a5:57:5c:50:bb:08:5e:
                    6e:c1:98:de:fa:3d:3d:dd:5a:07:3b:4d:51:0f:9e:
                    c2:6a:3b:7e:65:fa:f9:41:9b:f2:7d:fa:72:71:b9:
                    69:ba:91:2f:6e:a1:5c:9f:58:43:c6:e7:54:31:19:
                    56:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:D5:90:1D:39:65:71:1C:98:89:43:8F:63:B6:A5:DA:80:01:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/51b28b8f-0a83-34f7-9e8e-16918e7a2b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a5:22:96:b7:4b:39:fb:12:c3:2f:e0:81:56:e3:04:55:e8:
         d9:8e:bf:04:9f:26:f3:5d:ee:43:b8:7c:23:10:cd:31:47:da:
         98:72:1d:1d:52:65:49:2c:d1:fb:a2:ba:19:b4:41:ff:f4:66:
         9d:51:6d:4a:0c:ba:15:d8:e5:8d:d6:55:50:6a:aa:71:39:37:
         3c:6d:21:cd:ed:28:74:2b:84:f8:fc:7d:80:b1:ee:33:8f:78:
         df:a7:ff:a0:0c:1f:d0:34:2e:c7:fb:ad:74:90:ab:54:10:b1:
         1e:fc:c2:e3:91:92:25:c7:1a:cd:22:35:01:9c:6a:ef:1d:92:
         aa:89:cb:ad:6d:4c:e7:03:0e:79:e7:66:2b:3f:3a:1a:d8:ae:
         c4:53:21:8e:76:c4:09:97:8e:10:c1:ec:db:cc:09:c8:07:26:
         64:f0:e3:b2:5a:00:05:62:c4:67:41:2a:57:ae:63:fb:fc:71:
         12:ef:8f:0d:45:1c:24:46:2e:78:10:dd:a8:d9:d1:c6:9e:93:
         44:52:77:ab:38:ef:d0:f5:b0:f4:53:e6:dc:ef:b6:ba:8a:4a:
         83:c9:9a:a4:ea:2b:f7:9f:cf:77:ae:fc:8a:cb:8f:22:ba:7a:
         e7:96:2b:54:2a:f8:29:34:87:c6:e8:ea:94:d2:57:3e:2b:36:
         c0:de:f3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:45:54 2026 by rpki-client