Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/33f12907-b3e0-34ac-8d56-81c044f85d44.roa
File:                     33f12907-b3e0-34ac-8d56-81c044f85d44.roa (raw, json)
Hash identifier:          bc+qpTZUkbYH5TRPuoaXacnw/QSHO+a3Hvcz6Xowe58=
Subject key identifier:   1D:99:56:CA:F7:72:9C:1C:44:18:AB:15:A9:ED:9B:7E:B2:77:ED:05
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584E3A2F34F7009AAE17CF061800
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/33f12907-b3e0-34ac-8d56-81c044f85d44.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     5769
IP address blocks:        66.185.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:34:f7:00:9a:ae:17:cf:06:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=b425bb12-996a-4d1e-b8ab-cd4a6c009da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:12:51:5e:66:fb:a1:56:74:13:0b:3b:b2:
                    02:df:02:4d:5f:fa:f4:9f:dd:7e:9d:24:28:bb:25:
                    8b:3a:de:ca:e7:d6:61:d1:ee:78:a0:11:a0:61:16:
                    92:ef:a8:b0:95:a2:0e:fb:40:d3:9c:07:c4:84:41:
                    58:40:e2:bf:1e:59:43:c1:f3:20:24:ac:92:94:cf:
                    23:89:d4:b1:ad:b3:4e:e2:d9:15:8b:a8:6f:fc:1c:
                    ae:4e:ce:a0:15:c6:ca:1c:07:c9:ee:0f:9c:e1:5d:
                    14:03:0c:ce:70:80:27:56:ed:11:c2:8d:b4:fb:95:
                    d2:5a:01:37:b9:28:e4:94:84:d6:42:f7:21:94:86:
                    3c:fd:b8:75:ce:00:6a:30:c8:d2:c7:5d:10:3b:a3:
                    cc:62:0c:ed:01:a6:76:94:65:43:09:82:d7:7e:0d:
                    ca:b4:0e:47:7a:5c:a1:dc:cb:29:71:19:bd:b7:99:
                    da:ba:de:5f:8c:ba:e9:14:d1:5c:03:e7:9c:78:f1:
                    77:77:75:64:56:23:f1:c6:77:15:dd:f6:eb:6f:13:
                    a8:64:ae:a2:52:d7:e3:b3:82:00:45:72:f7:7a:34:
                    cc:c6:27:93:31:99:25:15:6e:d3:1d:9f:8e:9b:b2:
                    1f:ad:80:66:28:7a:0f:80:88:d3:0b:9e:b8:ac:c0:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:99:56:CA:F7:72:9C:1C:44:18:AB:15:A9:ED:9B:7E:B2:77:ED:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/33f12907-b3e0-34ac-8d56-81c044f85d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:14:f3:5b:1c:f8:63:f6:4c:dd:fa:26:c3:e1:72:ed:be:2a:
         8f:30:65:03:a1:20:57:0c:b3:ce:42:8e:4f:97:f7:9f:c6:7a:
         d0:a3:12:8f:f6:2f:ef:86:f4:f7:13:19:3f:f3:1b:0c:81:f6:
         ea:09:1f:3a:f4:94:b8:d5:db:17:14:b4:f6:09:6d:94:e3:3a:
         44:f9:69:de:67:66:72:69:ab:f4:23:4c:b0:45:ed:91:f1:9f:
         ec:29:93:d5:37:51:7f:55:d8:d5:b9:c9:87:db:71:c9:8a:f2:
         f4:4c:ee:f3:33:10:44:96:d8:fc:9c:2e:8f:a9:f9:86:64:f0:
         d7:fc:3f:0e:c3:1b:98:09:ab:43:ba:9d:2b:cc:05:95:52:55:
         42:10:42:1a:dd:37:ea:4e:00:43:0b:b3:ee:1d:0b:67:ff:0f:
         0f:a5:58:4d:99:d2:e2:ec:be:ed:8a:10:0f:4b:bf:4a:c4:64:
         c0:75:d6:f8:64:f9:3f:03:bf:3e:c9:fa:2b:ec:00:c0:60:81:
         7c:cc:aa:d5:b5:c1:fc:b9:5e:07:ac:7d:cd:1d:2d:eb:ef:19:
         9b:99:00:12:cf:b0:0a:ed:40:b0:50:be:95:0b:de:67:91:ff:
         ed:3e:7e:45:ff:13:2f:8f:76:56:7c:3d:d7:5b:3d:a5:04:f6:
         93:78:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:27 2026 by rpki-client