Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/1e0894c4-bc7b-327d-8803-c069cdcd2d57.roa
File:                     1e0894c4-bc7b-327d-8803-c069cdcd2d57.roa (raw, json)
Hash identifier:          i+2rDqTUd3cS8bNsiaPZWCXNLZNb2PtTh5AIOYcfV+o=
Subject key identifier:   DA:DF:D2:2F:2C:53:49:6E:28:AB:C8:76:A5:30:27:FD:73:1C:C5:82
Certificate issuer:       /CN=f5903ded-0596-4674-94c8-856dc82e8cbf
Certificate serial:       010D0C9F4328584D27AA16DBA8F5B488C9CDE620
Authority key identifier: 4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/1e0894c4-bc7b-327d-8803-c069cdcd2d57.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     18692
IP address blocks:        66.119.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:16:db:a8:f5:b4:88:c9:cd:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5903ded-0596-4674-94c8-856dc82e8cbf
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=7ffd054e-01a5-4e4c-a8b7-1c59f480dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:21:8b:11:a5:5f:9d:ed:dc:60:4b:bb:d1:
                    12:75:00:71:fc:81:7f:f6:3c:92:91:20:dc:35:3c:
                    80:15:33:db:ce:b1:75:ce:24:9d:e8:f2:d1:4b:c2:
                    f8:0f:2f:66:a3:86:df:49:b7:89:56:c5:09:84:c1:
                    f7:8a:95:0a:3d:98:eb:7f:e6:13:86:e7:52:60:e1:
                    ee:1a:3a:23:5a:b7:b8:b4:08:6e:e9:c7:7e:3a:57:
                    ed:89:d0:6e:df:af:3c:7e:c0:fa:02:83:13:54:69:
                    04:ad:3a:bb:b2:e0:06:cc:2f:8c:f9:20:fc:dd:bb:
                    f0:35:f1:df:7a:81:54:a7:55:73:cb:ff:e6:76:99:
                    7a:02:b4:f4:76:5c:1d:c1:f1:ac:64:cd:9d:35:ec:
                    d1:fa:cf:8f:18:e4:82:e5:f8:e2:7f:76:6e:43:2f:
                    bd:d0:a8:03:8a:32:68:f0:64:39:03:8f:7b:c1:21:
                    4a:40:cc:4e:0f:ab:74:9c:f4:a1:74:1e:82:70:3c:
                    fe:96:8a:c6:e6:86:66:e9:1a:ec:dd:9c:15:ef:94:
                    a7:99:a8:08:80:3f:6e:aa:79:58:6f:14:ed:0c:8c:
                    73:c0:78:a8:0a:33:3b:2c:6e:32:6f:ce:93:5d:d6:
                    7a:96:d4:3b:70:3b:f6:b0:10:0a:31:23:ca:37:5d:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:D2:2F:2C:53:49:6E:28:AB:C8:76:A5:30:27:FD:73:1C:C5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/1e0894c4-bc7b-327d-8803-c069cdcd2d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf/f5903ded-0596-4674-94c8-856dc82e8cbf.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B7:BF:96:97:9B:9D:62:73:B1:CC:01:5F:FE:4A:04:C5:4B:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5903ded-0596-4674-94c8-856dc82e8cbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:88:0a:73:de:a8:01:74:19:ba:88:3f:aa:ff:6b:dc:b8:05:
         3c:58:75:34:0a:7d:94:15:a1:15:2d:04:5d:b2:37:17:92:9f:
         d1:c7:64:d7:9d:16:b2:14:ed:73:0b:66:51:8d:58:02:66:0a:
         54:c9:b1:11:a8:57:a8:a8:e5:55:a0:23:ab:a1:49:48:bb:03:
         4d:b9:b8:12:cc:cc:bd:d1:5f:83:ce:bb:7f:6f:61:9f:ba:20:
         16:bd:e3:ed:d4:91:ae:01:6d:10:01:95:c7:67:e9:fd:d8:5f:
         32:5e:d0:65:90:31:33:13:65:bf:83:36:d0:04:bc:d1:58:2e:
         50:fe:dc:d6:df:2d:20:48:ec:57:a2:65:f7:a3:9d:2c:04:bf:
         60:7e:2b:11:2f:92:63:6d:d0:58:0a:96:40:c6:48:d4:1f:84:
         88:7e:39:59:92:30:f9:d2:d7:10:44:26:9a:81:5b:6c:0f:63:
         27:db:c4:11:d2:be:53:3e:16:56:fc:6b:e9:e1:f4:8a:fa:95:
         9f:ba:c2:d6:15:92:c8:2a:6e:17:ec:90:88:60:2d:70:07:63:
         0d:f0:f5:4d:16:87:e5:60:df:e0:ea:37:9d:06:6c:38:17:23:
         68:c4:37:e7:5c:98:cd:28:54:c2:67:f1:34:1d:58:57:b8:03:
         9b:28:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 22:28:41 2026 by rpki-client