Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2630d6f-9436-338e-a3d2-468f96d345c3.roa
File:                     a2630d6f-9436-338e-a3d2-468f96d345c3.roa (raw, json)
Hash identifier:          bAtylss6ac8n3ImlEihPG9cI5hJsh55nQ8e8O4Verow=
Subject key identifier:   E1:B3:39:CA:0A:2E:D3:DB:A4:80:82:01:3A:AC:CC:FC:36:89:E1:36
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3723A090F257FF739C68C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2630d6f-9436-338e-a3d2-468f96d345c3.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     27490
IP address blocks:        66.191.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:3a:09:0f:25:7f:f7:39:c6:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=98fcc8dc-9c2e-44e6-9380-dec9065b173a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:be:22:e4:ce:08:4d:43:c4:21:23:61:a0:b1:
                    bb:3a:fd:c8:24:03:9c:6e:cf:e4:4f:f5:86:46:3f:
                    b0:3f:aa:81:da:16:21:0f:26:86:25:90:fb:16:ce:
                    9b:cd:d1:ad:c4:37:8c:ce:1b:43:d1:03:b7:35:28:
                    08:2d:e3:22:8a:d4:a2:be:06:e2:06:24:6f:c5:da:
                    2f:f8:37:23:05:fb:e9:b1:10:77:0b:f2:3f:2d:c5:
                    a9:fd:dc:7d:8f:6f:f0:c5:86:00:28:07:d5:5a:1c:
                    74:aa:81:e4:a4:17:58:4d:e7:97:f3:64:ae:82:52:
                    f8:6b:1d:77:92:be:3e:e2:4b:ab:4c:d4:ed:a1:59:
                    14:61:74:aa:15:20:2e:29:11:bd:68:0f:9f:de:85:
                    91:b1:aa:c1:42:f5:da:ae:e9:8c:2a:14:6e:cb:5c:
                    7f:f8:ca:86:26:68:93:66:76:52:38:7e:4e:c4:5b:
                    80:45:2d:7a:98:00:dd:1f:c9:8e:8c:c7:4c:ed:9b:
                    9e:42:8c:1c:6d:a2:0c:64:53:18:9f:8e:57:f0:19:
                    53:b0:dc:4e:ec:39:c1:df:fc:8d:02:8e:33:f6:d5:
                    cf:bc:b0:34:22:39:60:2a:36:9a:96:5f:0a:5b:30:
                    c4:81:51:72:93:81:96:d0:4a:1e:60:84:00:24:98:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B3:39:CA:0A:2E:D3:DB:A4:80:82:01:3A:AC:CC:FC:36:89:E1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a2630d6f-9436-338e-a3d2-468f96d345c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.191.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:60:3a:c5:01:e5:34:17:2e:90:ad:91:80:56:04:e5:16:fe:
         10:10:b6:7a:ac:fd:aa:33:54:d2:0a:8e:96:4f:5c:ae:c2:a0:
         28:1f:4e:32:fd:5a:1e:79:e3:2d:97:e0:b0:6a:4e:54:0d:6c:
         18:ea:fb:c2:fa:ad:b8:5a:3f:be:b0:5c:fd:e1:01:cf:62:bf:
         5c:94:6a:49:99:52:d3:4d:92:9c:79:ba:ca:d5:1b:d7:68:5f:
         a6:14:c9:1c:c2:60:74:26:92:dc:73:d9:36:65:47:8b:39:6b:
         1d:0b:79:b9:aa:2d:89:90:73:f8:f1:48:9d:b9:b0:8a:e2:7b:
         42:da:74:71:fd:43:1e:b5:59:29:04:30:0c:d7:50:35:d3:01:
         f7:8c:08:3e:43:74:5f:6f:52:d9:89:7d:aa:a7:7e:12:d8:15:
         12:d8:23:72:b4:15:cf:29:ed:ca:bf:42:d5:7f:c0:e8:a7:37:
         d9:64:35:65:22:12:5b:a9:22:66:7b:cd:9a:40:97:43:d7:02:
         3f:f9:11:5c:1a:0e:a6:12:19:e0:4b:9b:1e:5f:d4:d3:f1:84:
         27:8a:b7:b2:d7:b5:53:5d:9b:dc:10:74:a2:d1:aa:e7:9e:d2:
         60:98:1f:d8:79:06:a0:a0:94:1d:46:15:d3:47:24:9c:d3:95:
         1b:13:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:16:47 2026 by rpki-client