Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
File:                     72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa (raw, json)
Hash identifier:          3vQSEDw9SPFNMczZk3uz+isi1gAHCf+txgJRbrxpV+o=
Subject key identifier:   81:2E:7A:3D:B9:25:A4:A3:2B:22:22:28:F9:53:5B:A0:7F:54:DF:DF
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584D3F64D5C19C898C707EA4BB12
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        66.178.140.0/24 maxlen: 24
                          66.178.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d5:c1:9c:89:8c:70:7e:a4:bb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=36929d4d-2c7d-41e6-aad8-171d7159c5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:77:b6:40:d5:90:65:eb:14:3f:53:a6:36:
                    67:b2:b8:c4:ed:a5:2b:7f:66:57:0d:36:e7:0c:91:
                    51:20:92:db:b4:74:7b:59:73:c3:f7:4d:00:c7:1a:
                    c8:b5:6d:45:52:73:ff:85:7c:d9:df:54:bd:6e:10:
                    bc:19:a6:4b:7d:de:12:96:17:fc:d0:59:35:51:c7:
                    ef:78:cb:e2:28:a1:9f:9f:ae:39:33:43:1b:64:de:
                    ce:a8:90:96:c3:08:1e:bc:3c:76:90:d0:da:a4:a7:
                    3b:32:ed:4b:97:d1:4a:5b:91:90:9b:96:58:4a:f3:
                    08:52:89:c0:a6:bf:d6:d1:45:08:cb:21:d2:03:78:
                    41:80:cd:01:00:68:e5:f2:a2:80:67:d1:fd:2e:21:
                    0d:45:e8:18:42:47:02:08:99:a3:02:b9:94:d0:2d:
                    fe:a8:10:2c:2e:30:4d:72:e5:d5:ef:5b:6d:e1:d6:
                    b2:34:85:5f:34:f5:d8:63:f7:68:48:b8:5d:87:5f:
                    43:1c:25:a7:08:02:2d:2d:24:0b:3b:c6:c4:2f:d5:
                    7f:49:ff:d8:44:d8:28:b4:a7:a5:1a:39:ce:87:88:
                    98:f1:5f:9e:7a:97:30:ab:3e:b5:f7:0f:e3:e5:7a:
                    2c:97:a7:ed:07:ca:44:0f:e0:c8:3b:59:d6:2c:1e:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2E:7A:3D:B9:25:A4:A3:2B:22:22:28:F9:53:5B:A0:7F:54:DF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/72930ee0-f048-3a24-9bd2-54cfa6b4aa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:7a:de:dd:c6:7e:6c:9f:76:8f:40:78:29:8f:93:3c:ab:
         24:f0:0f:25:93:78:53:9e:85:0d:cf:47:96:1c:b8:31:54:3a:
         43:ee:55:c5:5a:45:82:4e:ad:dc:ef:2b:48:29:0d:53:48:cc:
         35:f5:67:ef:9b:e3:66:bc:21:51:44:0c:e2:90:8a:9b:ba:23:
         9e:69:40:d6:d5:fc:86:6a:42:11:e5:c2:2c:17:34:a0:4e:8b:
         68:29:00:01:3a:8c:f7:77:29:55:aa:56:4c:35:71:b7:42:92:
         64:eb:af:0a:a2:41:9c:14:58:38:e5:5a:ee:b6:db:33:82:98:
         d5:08:e3:0a:45:74:2a:bd:58:0c:00:0c:c9:58:98:a8:f6:7b:
         a9:1e:8d:19:df:4a:5e:cb:70:f3:ed:1e:50:e8:4d:89:8f:6d:
         ec:7a:60:e6:f1:0f:22:d2:ef:29:4d:36:89:37:e4:84:1c:bc:
         f9:f3:6f:5c:4b:51:26:41:5e:07:09:9f:0d:1c:16:b4:88:8c:
         83:a6:4c:62:9b:31:5d:52:fc:22:1b:0f:17:a3:9a:47:6b:36:
         a3:43:66:df:22:26:a9:b6:c0:0b:c1:0f:88:64:20:0e:be:05:
         11:49:8c:0b:b7:2a:1f:90:50:81:15:c9:06:53:a6:81:d2:3f:
         d4:b4:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:29 2026 by rpki-client