Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ea9936b9-42b4-3435-bead-fb27ca303a8b.roa
File:                     ea9936b9-42b4-3435-bead-fb27ca303a8b.roa (raw, json)
Hash identifier:          dfSrZFcu++5bTi/fgzFijEiWde6CU4oEydii6+pYn14=
Subject key identifier:   04:9F:C4:FC:68:BA:8B:4C:73:17:33:C0:C4:5C:37:49:17:EF:D1:3D
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584E35FF1E0A248CA021005B1500
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ea9936b9-42b4-3435-bead-fb27ca303a8b.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     8560
IP address blocks:        66.179.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1e:0a:24:8c:a0:21:00:5b:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=01dde891-0719-4ced-a5d0-593da769519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:e4:8c:fd:c7:e9:b1:27:d2:8d:36:4e:dc:
                    5f:65:48:bc:38:6c:40:ec:93:49:93:df:dc:42:cf:
                    c8:28:83:60:e2:b4:00:19:d4:75:66:d9:a8:72:f5:
                    2c:09:ea:75:21:ed:4e:7d:a0:70:0e:f3:1d:cb:0e:
                    c6:e1:a2:7a:40:23:6b:a8:65:a5:c3:51:57:3b:81:
                    fa:83:57:ed:50:95:e0:25:68:ac:a6:e6:d1:7b:e7:
                    67:30:6d:24:6e:83:e7:3a:9d:fd:d8:1b:f7:3a:54:
                    a3:7f:55:16:07:00:ed:db:ea:7b:f2:a0:8b:97:b7:
                    7f:a1:ac:bd:ff:a2:e5:3f:ba:ca:13:f8:fe:28:6c:
                    73:8f:5c:ad:8c:90:6f:46:b1:d8:59:ac:5f:27:dd:
                    8f:03:82:17:c1:7f:09:26:2e:0d:e0:96:74:c8:58:
                    69:5e:57:aa:e8:35:27:22:9d:64:1b:d4:2c:a0:55:
                    5f:e8:e4:3b:e8:bb:75:2f:58:e2:a5:80:64:63:63:
                    56:21:1f:90:db:6d:f7:4f:36:51:48:c0:f4:3a:05:
                    18:3a:31:04:f0:95:bf:e2:a8:4b:dd:5d:45:9b:43:
                    82:a4:4d:54:90:7e:6d:c7:35:37:b1:63:1d:f6:dd:
                    86:88:20:f8:e3:78:e0:32:ec:d7:bd:c2:27:27:92:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9F:C4:FC:68:BA:8B:4C:73:17:33:C0:C4:5C:37:49:17:EF:D1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ea9936b9-42b4-3435-bead-fb27ca303a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:7a:74:9d:4c:f9:8e:b6:b6:c8:fb:54:80:6f:16:cb:e4:
         6e:e0:31:35:8b:a1:1e:51:56:04:77:ef:9e:98:23:c1:4b:a9:
         19:d3:08:a5:fa:69:51:d9:8e:09:11:82:90:6b:8a:56:03:d9:
         ea:09:e7:5f:d1:55:19:2d:3d:56:4a:36:9c:3e:d1:c6:24:b6:
         6f:07:ee:6c:4c:66:82:04:77:e8:41:ce:eb:b4:7e:e6:98:6e:
         fc:d3:05:bd:fe:31:c5:3f:0c:aa:35:76:4e:42:68:64:b3:56:
         a3:10:7f:1d:04:57:75:ff:96:9e:9c:d6:37:7c:bc:9b:dc:64:
         c9:0e:56:04:fe:30:67:9d:0f:b9:0d:e4:0a:6c:60:4c:21:22:
         f3:be:6d:c9:9a:7b:e9:69:ec:71:59:e5:e2:9d:2a:79:ba:58:
         bb:da:f1:4c:b6:75:4a:2d:93:04:38:a1:0e:55:aa:5c:52:70:
         51:e7:a2:12:b7:9c:7f:74:54:22:ab:4c:05:df:b1:c9:b6:ce:
         a4:e9:54:ac:ca:c4:33:1a:3c:7c:40:97:ae:26:30:fa:54:f8:
         a2:70:20:9c:0d:e4:bd:fb:15:9b:87:86:1b:d2:19:44:36:11:
         68:83:5f:f0:6d:cc:17:f3:09:e1:92:f5:bc:df:e0:53:e8:f2:
         58:38:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:17 2026 by rpki-client