Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa
File:                     32646d93-b5db-3d3a-b676-ea3a461808bf.roa (raw, json)
Hash identifier:          Xacef9wC4vWEEIc5cNkP2mtWy3Qsa5XuyPLx1Ens3Fo=
Subject key identifier:   80:FF:FD:54:63:A5:FB:95:D5:FE:56:FC:E4:F7:47:F8:BE:FE:C2:1D
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584DF640A929AB18F07EF07CCB00
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     393387
IP address blocks:        66.113.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a9:29:ab:18:f0:7e:f0:7c:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=bde28a97-3438-4695-b6da-e71b50b8a688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:5f:ab:cd:05:1a:43:03:ec:3a:0d:fb:67:
                    67:73:6a:f4:a4:e0:60:3d:cc:58:f5:15:e6:47:c2:
                    5f:b9:fe:9c:9c:15:65:1b:b5:c5:87:2c:0e:d5:a3:
                    06:b8:d2:e1:a1:45:70:09:98:2f:8e:94:5b:96:8d:
                    8d:77:ec:f1:b2:ba:49:f6:2e:d3:09:1e:66:37:88:
                    5e:a9:0f:c0:8f:59:91:ac:87:9c:14:75:92:ef:73:
                    21:53:c6:10:98:29:a0:d9:af:4e:7c:d1:dd:8c:6b:
                    05:af:f4:c5:69:fd:c5:bb:1f:db:32:15:1a:de:cf:
                    68:26:49:a1:e1:84:b4:60:a7:d7:75:4f:23:de:43:
                    26:db:af:de:ed:e1:81:83:77:2b:f4:9a:69:da:2e:
                    af:5e:e6:d6:b0:11:cc:8f:d5:3c:9f:27:e9:ff:b4:
                    a8:01:9e:73:07:15:4c:e4:69:48:d7:ce:f2:8d:7c:
                    a1:0e:1b:73:9b:18:b7:4e:2b:6d:aa:0c:9b:dd:7a:
                    8b:47:c2:70:a7:cd:f9:4d:d5:88:bf:fe:d8:2b:6a:
                    c8:af:f5:5c:70:2a:ee:6d:de:57:94:f7:6c:42:8f:
                    39:27:76:36:c2:d7:6a:30:fc:88:d7:ce:13:14:d1:
                    17:e2:82:1a:6f:4f:c0:05:3f:22:40:fa:4f:e4:d9:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:FD:54:63:A5:FB:95:D5:FE:56:FC:E4:F7:47:F8:BE:FE:C2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/32646d93-b5db-3d3a-b676-ea3a461808bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.113.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:be:97:14:69:f7:79:d2:de:1f:78:0f:31:b6:ab:87:35:46:
         38:7a:a5:ad:65:c6:01:c0:e6:f8:b4:d0:f9:b0:d5:34:27:52:
         17:04:d5:24:e3:6d:f5:f1:64:79:c1:bf:f7:ab:a5:25:b2:27:
         9d:88:50:e4:b0:ee:fc:78:86:67:74:82:e9:12:26:74:19:72:
         d5:73:dd:f4:8d:1f:f5:9f:49:f0:60:7f:f5:fc:fd:3a:41:9d:
         68:6c:54:30:4b:7f:73:94:5e:9f:30:9e:89:06:aa:b4:77:b7:
         65:9e:e6:17:29:ae:c6:82:ca:5b:bd:5f:a9:cb:48:63:0b:16:
         b1:c3:bc:e8:60:22:d9:c9:59:c7:f4:b0:70:a9:92:5f:39:55:
         2b:fa:f1:7d:16:21:17:ca:80:dc:96:be:94:08:ee:47:5c:86:
         0b:58:e3:dc:14:06:cb:97:da:43:fd:25:d4:66:97:e9:21:7c:
         f5:2c:21:3e:a4:a0:77:8d:66:87:72:a6:59:aa:ee:0d:af:a1:
         05:e4:17:85:e5:db:d1:f4:96:d8:b6:fb:33:ec:3e:c0:26:24:
         81:a3:94:e9:da:11:43:7f:d5:26:27:35:a4:fb:55:9c:f8:90:
         d6:f9:a2:3b:f9:36:d8:01:fb:78:4a:d2:97:ad:31:a3:ba:1f:
         74:92:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:59:35 2026 by rpki-client