Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b7abea4-6e21-3ed7-96fa-c0a053938782.roa
File:                     4b7abea4-6e21-3ed7-96fa-c0a053938782.roa (raw, json)
Hash identifier:          IPGVdZFXUxxauMCMent79EG6qNXnHTGEtiQN3AM87r0=
Subject key identifier:   F2:B9:78:6E:C2:0F:CB:88:FD:CB:7D:2C:4A:E7:37:AE:FD:8C:19:98
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB3366CDB180765C2C0180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b7abea4-6e21-3ed7-96fa-c0a053938782.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16787
IP address blocks:        66.61.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:33:66:cd:b1:80:76:5c:2c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=639b5615-3711-4366-a9b5-4b0d211bdbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:70:4e:a2:89:8c:f0:e3:83:4e:1a:9b:fe:
                    cf:c2:db:38:90:0c:1c:68:f6:97:1c:89:8d:a2:01:
                    d6:19:e8:dc:2e:ca:d3:ce:b4:7b:89:6f:f7:a6:52:
                    c5:a3:02:a0:c3:04:f3:ed:1e:52:52:0e:41:ad:d8:
                    f1:21:ac:c4:17:05:51:0e:c9:b6:aa:82:c5:da:2a:
                    1d:64:7a:84:2c:4f:65:67:50:30:23:c4:19:3d:5f:
                    47:e1:8b:d6:a3:52:3f:7a:4e:cd:b1:fd:8e:75:0b:
                    05:45:a4:55:82:63:5e:aa:7c:9f:36:05:cf:e7:7f:
                    6d:cc:8a:22:8a:d8:1d:04:1e:56:b0:c4:f0:dd:e0:
                    1b:5b:bb:03:15:4d:b8:40:47:7e:7e:c7:b0:fd:6e:
                    27:0c:84:30:9f:66:2e:80:68:9e:e0:32:36:ed:d9:
                    0a:91:83:b4:64:8f:92:ba:26:7f:94:f5:d1:0b:51:
                    04:a3:83:2f:94:6d:b7:f0:7a:ab:6d:20:95:9f:0b:
                    e9:e9:1a:37:66:10:69:35:bd:36:dd:31:f3:35:08:
                    b6:aa:3b:b7:70:06:64:54:8a:51:a1:97:44:29:58:
                    b2:97:13:6f:02:0c:bd:39:33:be:ec:b9:26:3d:58:
                    61:74:4d:5e:3a:12:19:37:cd:3f:9f:93:78:bd:1e:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B9:78:6E:C2:0F:CB:88:FD:CB:7D:2C:4A:E7:37:AE:FD:8C:19:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4b7abea4-6e21-3ed7-96fa-c0a053938782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.61.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5f:89:93:53:9a:ac:f2:79:c6:31:e2:df:ec:bc:63:c4:b0:
         e6:55:24:4b:58:d4:c9:73:5d:d3:e0:a8:4e:5a:c9:65:35:33:
         19:fe:0f:33:fb:94:f3:2a:49:4d:eb:49:da:07:cc:7f:66:19:
         f8:ef:dd:46:35:e9:aa:e5:64:34:34:26:8b:06:08:cb:e0:4c:
         cf:7e:53:29:f6:b2:d9:0e:eb:39:3b:af:29:57:a7:fb:48:a2:
         ed:01:c7:61:a0:a8:72:49:92:18:9c:aa:1e:20:df:80:7b:39:
         a3:0a:c6:af:fd:31:24:ec:d4:91:58:3b:1f:01:fe:ec:4a:86:
         cd:f6:f1:e6:6c:4f:6c:d2:61:a3:55:c6:f0:9d:33:69:bd:71:
         12:fb:fd:18:46:51:d0:bd:26:e5:25:56:20:80:1e:1d:f0:86:
         52:03:4f:f3:a2:00:02:26:f2:2a:dc:be:98:b6:45:be:7a:0e:
         7e:43:e1:98:26:45:c7:68:e6:8c:35:c6:df:9f:0b:a1:6c:75:
         56:89:99:ff:df:8f:2f:0d:f3:ed:91:81:4c:2e:d1:8c:54:00:
         64:21:90:b8:6c:1e:b7:f0:1d:a4:aa:ef:38:ab:4e:40:5d:59:
         09:b5:28:a1:31:09:c5:fb:06:23:84:f9:a4:83:a4:0c:62:7f:
         94:43:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:10 2026 by rpki-client