Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa
File:                     76fd5146-0a4e-316b-9c51-a775978d68a4.roa (raw, json)
Hash identifier:          T+S/h/xlsfawDotNSSq/V97Yo+bwQDIXjkL+UDK/m6c=
Subject key identifier:   26:9F:5A:92:75:DA:3E:66:55:98:95:53:57:CE:A2:41:DC:3D:76:C2
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E9A7FD3A3CEDC3C8D73E9A380
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11290
IP address blocks:        66.171.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d3:a3:ce:dc:3c:8d:73:e9:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=8c57bb49-7a41-4433-843d-3be347ef344e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:a1:1f:de:1f:2f:60:da:80:97:8c:f2:52:
                    53:42:29:3e:02:b4:af:b5:00:2b:ff:ec:cf:58:05:
                    2d:65:de:b1:4f:1a:c1:2c:42:cc:7a:eb:98:c1:35:
                    aa:6b:e4:c8:bd:c9:97:00:73:41:84:b8:63:0a:dc:
                    e7:96:01:44:55:de:4a:7c:e6:b4:1d:44:ca:be:47:
                    4b:a4:5d:03:ba:69:4f:71:a4:b0:8c:af:ff:9d:6d:
                    45:cb:6b:3d:06:f7:72:84:e2:fe:f7:e4:3f:9f:9c:
                    ca:a3:10:5c:42:d0:73:06:93:8e:30:a4:a6:7c:a4:
                    63:77:68:f9:50:19:af:a1:2a:9a:b5:20:e8:cc:2d:
                    09:9a:1d:f9:b3:06:e6:eb:ed:f7:12:02:bd:6b:55:
                    9a:54:88:df:73:75:3e:cf:37:84:e0:96:d2:66:ff:
                    3f:13:ad:c7:15:cd:64:3b:ef:ae:95:cd:1e:cf:a5:
                    2d:0a:e7:1f:59:e7:e5:1a:06:e1:67:a9:50:e4:e2:
                    bb:b2:c7:3e:a1:d0:07:c1:4f:02:9d:b8:87:ae:6b:
                    e2:5c:4a:ce:a3:f2:35:14:f2:e1:e2:23:d4:db:9c:
                    5b:ee:6f:ee:54:6a:b9:32:a2:8c:80:5b:28:18:7b:
                    c8:32:f8:56:be:b8:10:85:58:99:91:b8:fc:cb:20:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9F:5A:92:75:DA:3E:66:55:98:95:53:57:CE:A2:41:DC:3D:76:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:d9:ef:6b:fd:d8:98:7f:eb:3f:b9:d5:ec:99:23:67:e0:
         ae:b6:38:04:ec:1c:9f:0e:e4:3e:66:07:c2:ed:de:4d:65:12:
         2d:13:40:da:ae:95:40:7c:27:b0:4b:c8:6f:1e:b9:d7:aa:24:
         99:7f:ea:80:ff:8f:f0:55:ac:a1:f0:8a:83:b1:49:f7:bf:10:
         34:75:60:88:f6:28:fa:32:04:cb:7e:6c:84:b1:15:87:06:a7:
         47:cf:c1:39:97:da:3c:b1:ae:d4:77:d9:e0:de:6b:18:ee:f3:
         d9:e8:93:38:a9:20:04:42:cc:07:41:16:81:f5:df:36:70:c1:
         94:0f:e8:12:82:4a:49:9e:2b:ff:b8:cb:c5:51:4a:d2:b6:42:
         b9:6e:36:55:e2:e1:5c:7a:6c:0a:ca:47:fe:3b:9b:08:6d:1f:
         43:fd:4f:f5:a7:bd:92:e9:49:1e:f1:53:cc:5c:57:d7:bd:ba:
         57:40:2d:0f:89:26:30:fa:4e:7c:20:3d:fa:ed:c2:68:62:3b:
         d9:05:b4:13:8e:74:91:8f:bd:c5:56:68:e3:55:ab:a6:aa:a2:
         02:d8:bb:9d:ea:68:b2:e9:6e:6c:dd:9a:01:50:da:b4:e6:19:
         62:11:cd:36:cd:c4:df:8f:18:13:ec:18:bd:72:59:b3:23:2b:
         fb:aa:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:51 2026 by rpki-client