Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa
File:                     1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa (raw, json)
Hash identifier:          5bshkQ+xf3QNtE+0qN/3vJJDXuL87xft+6bAE2Lv6IQ=
Subject key identifier:   FB:EE:C8:67:AD:73:62:C6:82:83:72:07:64:E5:D4:CC:1C:BA:F7:CE
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584E5A49FDA8E3DF641CD4D87A00
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     5662
IP address blocks:        157.166.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fd:a8:e3:df:64:1c:d4:d8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=5d000c12-bc36-4ef4-8eb9-1cc18f34a1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:a2:65:33:b3:d3:49:cb:76:7c:d2:84:6e:
                    7f:6f:c0:66:7e:0d:c2:05:76:4c:b2:cf:83:19:29:
                    b6:d4:39:70:66:86:32:64:f6:82:23:78:cc:a7:74:
                    46:d8:9e:48:bb:ff:a4:e5:77:8f:30:b3:49:36:e9:
                    92:1f:9c:63:54:d6:a9:0a:0f:6c:44:ee:a8:a5:b1:
                    53:92:b1:1e:d5:ef:5a:07:08:db:d7:20:33:d5:f7:
                    f6:85:e5:1b:ea:ee:06:c0:53:ad:4c:41:9b:5c:8b:
                    c8:25:c4:33:6b:10:c0:f8:8b:64:b2:52:35:30:e8:
                    5f:da:79:f1:45:61:ba:43:00:e0:17:32:d1:3b:af:
                    e2:69:d7:4d:95:00:50:52:1d:c7:50:0f:0a:4e:82:
                    e8:b2:f6:f4:7b:a2:d9:d0:ab:04:e2:d7:21:87:a7:
                    9f:6e:33:0a:19:a9:12:b2:c5:af:f1:8e:61:5a:18:
                    11:f5:62:50:44:d7:68:6e:d7:5a:5b:8a:a3:dd:e7:
                    e2:4b:26:43:27:4d:80:87:90:81:a1:32:d2:de:86:
                    0e:0c:31:bc:35:f4:f2:6b:27:5d:e3:ce:70:7f:f4:
                    cd:0f:22:91:b8:52:e0:bc:3f:bd:9c:d8:9b:19:f3:
                    ef:5e:5b:88:1b:d6:c5:21:d3:8c:75:be:43:88:c7:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EE:C8:67:AD:73:62:C6:82:83:72:07:64:E5:D4:CC:1C:BA:F7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/1ee68db0-734f-31d6-8ac5-b5fd973720a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:fb:fd:36:53:8b:b7:15:4b:53:9a:4f:f2:fc:5b:68:41:
         02:26:68:2c:ad:d9:93:db:2a:4c:e3:59:6d:7a:be:52:f7:94:
         96:a7:e0:82:d5:a6:6f:ef:b7:e5:01:e8:ca:18:83:69:14:75:
         0f:0c:50:ea:b8:54:0a:c2:72:08:26:b2:f9:93:97:23:f3:b9:
         36:de:c0:16:5c:0e:2d:bc:7a:3b:91:46:b2:5a:c8:a5:94:d7:
         fa:05:27:ab:fb:4e:77:b2:5f:77:83:80:4e:01:de:50:7a:f9:
         77:16:84:1c:72:2e:6a:80:33:eb:9b:cc:51:3e:8e:80:eb:da:
         5f:84:92:eb:07:5f:2b:83:f8:09:dc:ce:af:9b:da:92:4e:1c:
         3a:47:79:70:1f:ab:79:41:36:21:01:3f:5e:df:84:b2:84:04:
         b8:db:03:d8:a1:39:28:c2:76:71:b2:7a:66:48:00:d7:59:e5:
         40:5a:25:56:b9:c6:a9:68:72:d8:52:de:a1:bc:e8:50:9f:47:
         8c:b5:fb:3b:0c:1c:60:02:95:f5:33:fa:5e:37:71:e8:25:31:
         92:fb:27:47:34:28:71:c7:80:ef:8f:45:2b:0c:08:e6:89:3f:
         90:46:25:2e:7f:72:0e:3b:9d:13:d0:b6:1b:fb:27:8f:f1:a1:
         26:b1:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:24 2026 by rpki-client