Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa
File:                     666ce706-f266-3fa9-aabf-cb8681729e63.roa (raw, json)
Hash identifier:          YGjRyBp7RQUXl4qUnLIUO0lqS2A4aO7oCIyNaP+vytk=
Subject key identifier:   0A:A3:16:45:BE:49:0D:A5:66:6A:E8:9D:BA:8E:2B:66:D9:FB:25:3E
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584D55BA42EB7890EF182A6ED380
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        142.0.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:42:eb:78:90:ef:18:2a:6e:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=d52b662e-ee18-4875-992e-49d16c525be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:ec:8b:a8:87:39:a6:fc:70:52:9c:20:f8:
                    d7:04:7c:44:bd:32:ed:d3:0f:68:28:4d:b6:9f:14:
                    56:fa:3b:d1:f0:cf:2d:29:58:f3:39:f7:6b:1c:1f:
                    5c:34:f6:76:e1:b7:cb:aa:9c:5b:60:00:f8:19:6b:
                    76:b9:5d:85:0f:6b:bb:5a:5c:c6:d8:9f:a0:8d:9d:
                    a8:b2:4b:4d:5e:36:3a:f8:13:4a:38:25:1b:78:7e:
                    1c:a3:75:03:32:bb:80:43:78:d9:ee:b9:24:80:f0:
                    cf:c3:2b:9b:a5:e6:b0:49:e8:56:56:cf:09:80:18:
                    75:21:59:75:8a:0b:8b:0a:83:3a:c8:ad:db:2d:fe:
                    85:a1:1f:91:ee:31:f4:ab:9b:b7:d3:5c:27:61:d7:
                    2b:58:1e:e0:1d:b4:0c:a2:91:26:f1:62:16:01:fc:
                    64:4d:ae:dc:37:31:f8:9f:61:a4:9c:91:1c:01:86:
                    c9:e6:52:31:a2:53:c8:05:e7:34:ae:c8:d7:e4:7b:
                    4d:e4:8e:1f:5e:ef:f6:d4:a7:40:b8:67:1d:99:d3:
                    97:8e:9d:89:a6:1b:ba:03:29:5f:fd:89:7b:d6:5b:
                    ef:fb:ec:17:fe:6a:77:eb:74:87:0e:05:59:97:d9:
                    68:3a:b4:e8:70:7f:3c:89:e6:36:5a:72:39:34:bf:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A3:16:45:BE:49:0D:A5:66:6A:E8:9D:BA:8E:2B:66:D9:FB:25:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:b5:14:39:3d:31:0a:26:06:cb:88:8b:25:9d:db:50:4e:
         cc:65:af:89:a0:f1:8d:34:5d:fd:54:49:73:ac:23:e9:a6:ee:
         79:d7:8e:8a:7f:d6:d0:64:02:54:0e:84:5a:c0:85:b2:62:e2:
         71:3d:67:8d:3e:00:72:f7:d5:6b:63:e3:d0:da:53:47:e8:59:
         4d:16:e4:09:73:44:fa:f6:e0:43:76:d4:1a:f8:c7:05:32:1a:
         a1:3b:2e:6f:87:86:96:9d:bc:c1:75:79:44:0f:ab:6c:85:5e:
         a7:90:52:e7:c4:27:ef:eb:d2:4d:1c:d2:fb:4a:d5:9a:35:bf:
         b4:e0:eb:5c:05:3d:1f:11:f8:04:da:ac:a2:21:10:0f:f5:7b:
         a9:d4:9e:14:ce:bc:a7:6c:cd:c9:9f:8f:43:c3:7c:94:f9:f0:
         56:3d:99:a9:c9:5f:a2:fd:f1:26:17:f4:d4:72:5a:fb:a1:9a:
         85:30:7b:09:48:0f:73:44:cb:bf:b3:95:95:83:e4:24:6d:b0:
         c6:90:b2:8b:2c:dd:3d:97:e1:89:ab:b8:ad:09:ef:af:1b:cc:
         e5:82:23:c8:7b:98:0e:aa:d3:47:20:79:19:6e:c9:b2:44:44:
         44:d6:e1:97:63:25:b4:bf:ed:7c:3c:4e:20:eb:60:d3:33:c2:
         9a:09:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:20:30 2026 by rpki-client