Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/6cfbb5b9-cab3-3cf6-9cb7-3e4dff97b31f.roa
File:                     6cfbb5b9-cab3-3cf6-9cb7-3e4dff97b31f.roa (raw, json)
Hash identifier:          gwhR52LGblbgGZ7UwOlac2rNv4VyaVeWU9LRASzIDY8=
Subject key identifier:   8B:D5:0B:E2:46:71:A1:F5:26:DD:DE:6D:7C:C5:22:C5:45:13:3B:4B
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584D9827319CB851CE74C7B45100
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/6cfbb5b9-cab3-3cf6-9cb7-3e4dff97b31f.roa
Signing time:             Wed 22 Apr 2026 20:03:25 +0000
ROA not before:           Wed 22 Apr 2026 20:03:25 +0000
ROA not after:            Tue 21 Jul 2026 20:03:25 +0000
asID:                     21547
IP address blocks:        66.186.160.0/19 maxlen: 24
                          72.12.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:27:31:9c:b8:51:ce:74:c7:b4:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Apr 22 20:03:25 2026 GMT
            Not After : Jul 21 20:03:25 2026 GMT
        Subject: CN=a91d7611-4f7b-4a1f-83a7-f9b7250cb961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:da:a5:ab:46:6e:29:bd:95:ac:1b:92:a3:
                    56:18:24:d7:a1:94:16:29:66:56:0b:a0:a5:4d:72:
                    32:31:20:06:45:78:43:01:d3:d8:47:4d:12:61:7d:
                    bb:66:71:5d:f2:bf:67:89:a3:a7:47:5f:fe:2a:f6:
                    9d:12:96:71:e0:54:d8:71:d7:19:b6:37:b5:25:f5:
                    bc:e8:de:63:8a:87:80:b5:22:7d:4f:09:9e:ab:b8:
                    95:05:bc:76:23:01:00:cc:ed:25:cd:93:f7:33:1e:
                    ac:74:a4:44:52:07:75:5c:56:cd:f7:c3:6a:01:ae:
                    44:0a:10:37:6f:b7:36:5a:5a:e9:bb:59:5c:8d:4a:
                    06:ce:88:27:f7:18:fa:b8:11:2e:d9:72:b9:5d:94:
                    ea:aa:2a:a0:6e:24:28:39:0e:a0:a3:3c:38:35:07:
                    fb:7e:f5:d9:f1:f2:0c:42:f2:33:90:ab:34:ea:ca:
                    1c:ea:a1:de:da:71:4a:5f:ef:48:67:85:cc:50:09:
                    fe:58:cf:2b:4d:c7:75:30:69:5e:0a:84:42:0e:00:
                    15:ea:31:0c:3b:7d:dd:c5:c4:cf:70:d7:ce:71:e0:
                    c5:f3:ba:00:6e:32:fb:0c:d2:a0:a1:8e:b2:89:1b:
                    cb:24:84:e5:c5:e7:ee:64:07:d0:7c:21:5f:f6:2d:
                    16:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D5:0B:E2:46:71:A1:F5:26:DD:DE:6D:7C:C5:22:C5:45:13:3B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/6cfbb5b9-cab3-3cf6-9cb7-3e4dff97b31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.186.160.0/19
                  72.12.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1f:5d:1c:54:47:c9:3c:ee:65:7a:18:ed:1a:64:74:e1:81:
         aa:af:7e:56:20:0f:eb:f4:d8:00:ba:25:75:06:b6:4a:b7:bd:
         34:54:26:a5:a9:3e:03:61:03:7a:d5:d7:21:ad:f7:41:b8:04:
         90:65:3e:3a:72:c9:2e:9b:04:5d:02:c4:ee:28:aa:0d:d0:ea:
         86:29:07:bd:95:76:df:d3:7b:99:df:75:10:f8:2c:e3:99:fc:
         c0:ac:09:c5:e7:98:0a:76:95:98:6c:de:2d:aa:d5:21:33:4b:
         19:5c:04:19:ea:1a:4f:f2:e5:6f:50:2b:33:4c:bb:fc:8d:e5:
         70:28:6e:5b:d8:3a:6b:08:13:54:1e:86:84:a5:e9:ec:a6:7b:
         b0:75:52:2e:fa:1a:9f:61:93:42:81:ad:a5:fb:c8:9c:d1:0d:
         ae:f3:d8:ce:12:7c:75:11:be:de:4d:aa:dc:ba:24:16:1e:c7:
         5d:78:93:3e:5f:e3:ea:1e:33:38:60:66:8f:3d:f2:91:43:4c:
         84:3d:5e:aa:75:b7:68:27:21:42:cf:71:1b:41:b2:a1:0a:e0:
         7c:8d:47:c3:a4:62:1d:b6:a7:74:87:da:a2:90:cd:ce:0d:92:
         06:df:a7:96:8d:7d:93:a7:82:31:ce:36:c1:cb:2a:cd:f7:9d:
         33:b8:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:26 2026 by rpki-client