Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa
File:                     566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa (raw, json)
Hash identifier:          v4b+OOM9z/rkICDaTxsgC6PtKBkFcBBN/Z97nRkdqEs=
Subject key identifier:   C7:72:E0:8A:09:B9:49:25:3F:B2:7D:33:67:62:F0:FA:48:F0:99:BD
Certificate issuer:       /CN=48416e40-8d51-4528-a6af-36dd93cf14ee
Certificate serial:       010D0C9F4328584DD1F5AED3C965365E329CEB80
Authority key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     30625
IP address blocks:        208.66.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:ae:d3:c9:65:36:5e:32:9c:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48416e40-8d51-4528-a6af-36dd93cf14ee
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=8cd6b099-d3ac-4196-aab4-2dff15cc9dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:7a:bb:2d:f0:37:bc:17:66:39:d5:7a:1b:
                    15:6f:f7:67:24:ca:e5:cc:c8:d9:b3:bf:18:9d:d2:
                    bc:d4:c5:d7:b5:84:a6:16:86:21:b9:4e:4f:3d:62:
                    83:67:49:c1:6e:80:3c:40:c0:9c:27:35:3d:9a:38:
                    07:e4:f2:4a:1c:52:75:1a:6e:21:74:86:65:56:34:
                    15:77:80:47:16:24:e0:b6:be:5d:7b:91:71:a5:fc:
                    23:a8:e1:24:41:92:b8:be:95:72:99:4a:5c:5d:d7:
                    5f:8f:93:95:c3:7d:ef:e2:62:42:2c:13:9d:6a:19:
                    39:65:0f:53:39:fb:fa:14:99:42:2a:7e:86:58:c3:
                    53:8b:36:f9:ff:6b:95:16:ce:6c:1f:60:7e:57:50:
                    95:ca:b0:cc:9f:07:2c:14:b9:75:a4:81:a9:98:a5:
                    e9:5d:12:c9:91:df:d9:8d:1c:b3:b1:58:de:e2:bc:
                    ba:f8:f2:88:bc:af:d9:2f:fa:33:c8:1c:40:2f:bb:
                    76:22:0f:16:23:2c:b4:0d:c7:06:db:af:01:87:2c:
                    8a:57:3d:8c:d6:b0:6e:8a:b0:d5:df:c6:78:a1:2b:
                    5b:77:08:50:d8:1b:c5:6f:18:56:5a:85:c9:27:96:
                    b0:35:4e:4f:c0:3d:cc:8e:44:d4:a3:d3:98:29:6b:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:72:E0:8A:09:B9:49:25:3F:B2:7D:33:67:62:F0:FA:48:F0:99:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/566e2a9a-f1f7-3e2b-8cd1-a4549fae2376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl

            X509v3 Authority Key Identifier:
                keyid:58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:64:1b:6e:71:c9:20:f3:a8:d6:8e:e9:d2:15:0c:3d:06:0e:
         72:38:bf:a1:66:f0:f5:ee:dc:39:f7:a9:09:da:ca:22:c0:13:
         83:f2:ac:c4:c7:fb:b9:2a:23:96:05:4f:fb:14:9c:30:74:67:
         ef:fd:48:45:97:6b:2e:71:38:e8:39:1e:88:1d:af:35:3d:c5:
         43:3a:37:63:29:e3:95:d3:3f:29:48:ff:8b:48:94:e2:90:c4:
         42:98:ff:6a:56:0d:53:b9:e5:e1:18:8c:1d:88:c3:c9:bc:0c:
         13:22:69:1f:cf:35:7f:b0:8b:df:f3:c5:5a:a9:79:b2:61:07:
         3d:b1:1c:cb:28:30:a0:c4:56:50:16:bc:9c:e4:6d:5a:96:84:
         81:5d:cf:5b:57:02:28:d6:2d:46:b6:42:9d:a6:7d:62:fa:27:
         45:8a:38:08:19:6e:13:06:c9:29:c5:f9:82:01:a7:bb:f1:a5:
         b1:9b:bf:5b:d1:1c:6d:65:8d:db:c5:d8:fd:9f:39:9c:08:ad:
         a9:70:6b:ae:46:69:85:47:d8:01:37:93:a2:c5:2e:77:85:34:
         a9:a5:83:fd:6f:f5:87:d4:07:56:0d:1a:65:54:3c:ec:26:04:
         60:e2:57:4c:de:76:8c:27:c0:81:7c:39:d6:92:09:f2:fd:12:
         62:86:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:30:31 2026 by rpki-client