Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
File:                     30f3f2b7-133f-3093-8bac-371e64c54f97.roa (raw, json)
Hash identifier:          EKQtX3zWO3b1arY6johfQ4GbwtK1GqwkOhahC7z9ptQ=
Subject key identifier:   90:D6:21:4C:99:71:39:AD:EA:76:81:3C:B9:B2:5B:D8:11:07:8A:58
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584EB9AC500D4F01E7830CE03480
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     16740
IP address blocks:        66.39.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:50:0d:4f:01:e7:83:0c:e0:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=521ce9d5-f2f5-47b4-9447-aef3872f5241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:4c:07:5e:d2:97:aa:35:b5:a7:f8:58:80:
                    28:00:c6:f5:62:95:86:51:4a:6e:b7:cb:0c:86:fe:
                    b5:9d:01:00:a9:d5:d2:ba:29:eb:cb:3b:a9:4e:7b:
                    c2:35:bd:ff:6c:c4:96:30:cd:5a:d4:b9:4d:d6:46:
                    9d:87:09:f2:7a:45:97:19:41:f9:93:e2:dd:c0:bf:
                    b0:7f:d0:56:d8:8b:e6:41:5a:b1:c4:ac:9f:25:33:
                    80:67:fe:81:43:67:4a:3a:4d:76:60:f9:5b:31:a3:
                    58:ee:9d:b6:7e:6d:8b:e9:b5:55:28:fd:8b:ae:1c:
                    7d:06:34:b9:d5:81:26:a3:11:18:75:22:7c:3e:d0:
                    60:52:68:7d:15:da:97:7d:30:96:d9:48:ed:51:4b:
                    34:e4:af:e6:ed:b3:78:b8:c5:92:0c:1a:ac:ce:5a:
                    11:9d:f8:e1:0f:a2:50:fe:4a:48:47:3e:ed:4b:10:
                    da:fb:2d:71:e8:66:68:eb:93:45:d0:ee:41:7e:17:
                    9b:ee:a1:41:7f:c5:11:3d:fd:2f:2c:a8:e0:bc:7c:
                    4c:c6:bf:a3:1b:32:66:b6:9a:73:94:e9:44:0b:71:
                    07:09:c4:5e:ff:8e:74:a5:13:a4:06:67:ac:f6:b0:
                    42:6a:d9:b5:d5:c3:07:23:19:05:4b:0e:fe:f8:6e:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D6:21:4C:99:71:39:AD:EA:76:81:3C:B9:B2:5B:D8:11:07:8A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/30f3f2b7-133f-3093-8bac-371e64c54f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:99:30:32:6f:9a:fe:51:d6:de:dc:1f:ef:4c:1c:b8:c7:
         26:71:f6:22:7b:a1:e0:fc:90:8c:ce:5d:06:21:1f:7e:b6:b5:
         ca:6e:b9:a8:da:be:76:d9:c8:dc:46:2e:53:f1:27:e7:64:d5:
         85:5d:7e:77:64:8a:0c:76:71:fe:f1:1c:3a:da:f6:d0:b5:d7:
         e6:7b:82:c3:e1:d8:e1:d2:2d:8f:94:c0:3b:61:bb:be:0e:d2:
         69:1d:20:49:95:52:15:05:4b:30:26:1f:50:f5:68:e2:80:26:
         8a:5e:2a:4b:ae:20:cd:20:08:c2:f7:01:ad:b2:a9:9b:2f:1e:
         b4:a8:bf:47:8b:6d:04:2d:07:b5:17:f6:9e:8a:6e:c5:91:8d:
         65:cf:df:cc:44:e5:f8:f2:c4:93:c2:1d:8c:c0:58:d4:41:35:
         e3:6f:8f:36:d4:20:25:3d:66:51:9f:41:8e:ad:76:01:4a:c1:
         1b:64:7e:79:4c:0b:02:f4:fd:06:67:de:f7:e5:d2:7e:22:ef:
         e0:8b:12:a4:5a:d2:f2:86:e5:e4:77:d1:0a:c6:18:5e:1c:23:
         dc:7a:13:54:ae:92:a0:79:63:11:82:77:6c:7e:c7:8e:f4:8e:
         1f:90:ae:a3:e5:cb:2c:b3:37:58:db:6f:fa:4e:3d:c7:c1:ea:
         3a:a0:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:48 2026 by rpki-client