Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa
File:                     e16baff4-7918-391a-b882-0b5aec46e403.roa (raw, json)
Hash identifier:          qGz8I+HL1XCXKCId8Yrjz5tObtp+Y2LhPjqi/dJYoUw=
Subject key identifier:   67:C3:F5:F2:84:01:EA:BD:4A:CF:12:43:E7:EC:32:4D:0F:EC:EA:F7
Certificate issuer:       /CN=f36f7462-c7a9-4aa8-af42-792dae19380f
Certificate serial:       010D0C9F4328584E35FF1CB7E117380C67B41D00
Authority key identifier: 3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     394564
IP address blocks:        66.112.201.0/24 maxlen: 24
                          66.112.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1c:b7:e1:17:38:0c:67:b4:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f7462-c7a9-4aa8-af42-792dae19380f
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=83c057a9-45fe-4b8e-9fca-d9a3f2179b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:46:26:3b:2b:0e:f4:a2:ef:6f:3e:bf:bb:
                    8b:99:c4:4b:5a:13:cb:9d:a7:b7:dc:08:5c:71:1e:
                    f2:46:a7:2e:f9:e8:d1:52:cc:f0:81:3e:6c:1f:40:
                    f0:34:b9:78:a4:01:8a:f7:ec:79:c7:b9:dc:8a:9d:
                    0a:4b:7e:a2:79:88:63:98:e7:22:87:f0:dd:48:bd:
                    ad:ab:e7:3b:c7:3a:99:c5:60:91:70:29:75:a3:41:
                    7c:b2:a8:ac:c9:ff:82:e8:93:1d:5d:49:ee:5e:b5:
                    55:e2:20:8b:55:1a:88:d2:bd:3e:61:ef:8d:6d:99:
                    ee:06:82:9e:01:f1:af:71:44:b6:a3:c9:c9:4d:e2:
                    d1:76:e0:92:37:0c:8d:44:c2:25:ab:ef:31:ab:65:
                    9b:d3:9a:cc:8e:f9:23:a7:c7:2f:13:bb:69:af:78:
                    da:46:8a:9c:7a:35:4e:b5:d5:9e:d4:98:bb:ea:6f:
                    ac:ed:6f:57:8d:c1:25:5d:63:10:32:55:f4:a3:ea:
                    23:ef:07:f9:e9:85:55:77:c7:8b:50:30:e2:62:45:
                    5b:fd:43:f8:d2:40:26:40:bb:39:11:4d:2f:53:08:
                    07:6c:8d:3e:54:00:91:dd:82:9b:85:91:d2:5d:56:
                    7f:a8:e3:3d:b7:8d:1c:64:c3:c1:85:41:e7:53:f4:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:F5:F2:84:01:EA:BD:4A:CF:12:43:E7:EC:32:4D:0F:EC:EA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/e16baff4-7918-391a-b882-0b5aec46e403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f/f36f7462-c7a9-4aa8-af42-792dae19380f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:27:A1:D0:28:2E:FC:FB:82:DB:21:5F:1B:F2:3A:CC:FC:E7:2E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f36f7462-c7a9-4aa8-af42-792dae19380f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.112.201.0-66.112.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:71:58:45:05:7b:2e:3b:83:d5:dc:0b:ce:ad:e7:b1:06:
         0d:cb:92:ae:37:20:d7:20:65:fd:99:07:48:c5:d9:84:e9:7b:
         84:6f:79:e0:3e:19:6d:f8:4d:6f:f9:8a:75:6d:20:3b:db:25:
         d6:f5:28:ab:46:95:21:f4:8b:2f:29:e6:cc:76:79:59:89:9c:
         57:c7:23:ba:92:70:09:e4:f8:f7:d4:3b:55:07:16:c5:46:27:
         0f:32:55:45:c4:20:e0:e3:8d:c9:9e:d7:84:38:7c:42:d3:01:
         1c:30:9a:a4:84:22:2e:ba:53:20:67:32:67:fa:31:90:c6:f3:
         d9:f9:b2:83:8a:02:fc:9a:27:08:0b:bd:8b:bc:b8:ae:f1:c5:
         90:5d:02:19:e9:b7:f9:6a:02:0d:8d:57:dd:e4:81:46:2c:6a:
         5f:3b:db:2a:d8:00:8e:91:7e:6f:2f:c7:b2:d5:d1:66:d4:b3:
         59:09:26:3c:d4:b4:91:01:d8:da:d7:c1:f4:b6:aa:3f:82:4c:
         8e:ca:8b:1f:5a:8d:46:ea:71:bb:85:7a:05:0f:94:3d:07:be:
         ba:7b:63:78:77:95:4c:38:4b:b1:9d:6b:c6:44:6c:ac:b6:d1:
         4c:ac:fd:c9:06:73:8f:94:21:d8:27:98:bd:fb:c3:6e:ef:06:
         5e:89:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:04:30 2026 by rpki-client