Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa
File:                     6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa (raw, json)
Hash identifier:          EPBgypizsZWbvnUEuXwL9IUwFNJQKPvTb1irLpKCZQs=
Subject key identifier:   25:15:3C:68:16:63:D9:3F:63:7C:A7:BA:4A:2C:1C:A5:C8:5D:51:F5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77A37DC3AFBB9C6A0CBEE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     3360
IP address blocks:        66.54.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a3:7d:c3:af:bb:9c:6a:0c:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=7f84fc4d-35bc-4694-a1f2-8111bf0f398e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d2:64:01:45:a1:2d:e6:56:a3:41:82:ff:ad:
                    16:16:7c:85:08:22:69:ac:32:64:24:c8:e8:79:6e:
                    a3:8a:06:73:53:00:d0:41:d6:1b:49:2a:b5:a5:88:
                    2d:a2:65:27:c8:99:a8:78:7d:2b:89:53:ea:04:8c:
                    c4:40:c8:06:bc:ce:dd:b9:77:d3:12:56:ca:93:af:
                    db:e7:0c:e0:f2:93:6d:de:b3:3c:44:e2:da:b2:33:
                    3a:d9:21:07:65:22:5f:db:b7:34:78:25:f5:de:fb:
                    b6:2b:f6:74:55:20:88:d0:d2:98:d4:34:c4:dd:8c:
                    c8:a5:8c:ef:d6:e2:da:67:72:77:04:18:a4:b1:b2:
                    81:69:dd:5b:56:3f:a8:6c:4c:66:af:8f:be:ae:f7:
                    47:20:1a:87:b1:cc:4a:61:7c:45:50:8d:1f:50:b4:
                    f3:9b:28:d1:72:fb:2f:0a:39:08:27:26:1f:ed:78:
                    e7:85:47:ca:56:84:e4:7e:66:40:82:a8:25:fe:6b:
                    67:20:a7:b2:eb:d7:05:00:31:90:5c:da:2b:a6:21:
                    ca:d5:77:eb:cc:0d:56:a9:fd:be:37:16:05:ee:e6:
                    65:33:dd:52:b5:29:9e:ed:3d:2d:87:2b:b4:12:b6:
                    93:ae:6e:f2:e8:a5:08:0b:a3:fb:3e:20:4c:54:ea:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:15:3C:68:16:63:D9:3F:63:7C:A7:BA:4A:2C:1C:A5:C8:5D:51:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:95:cd:6b:4c:e1:21:d9:fc:ba:2e:41:27:34:78:78:bb:
         47:38:6f:32:a4:c5:9c:c4:e4:4a:4f:c4:26:62:c9:57:57:5d:
         43:7b:43:09:65:02:8e:0e:f5:72:28:ee:fb:f5:e8:a9:0d:17:
         e0:3d:1f:bd:fb:42:a0:bd:65:a8:79:c3:77:57:30:c3:b8:7f:
         8d:4e:c7:18:56:b7:7b:c1:17:fe:4e:c6:5f:e2:0d:af:c4:e4:
         6b:50:90:3f:4f:e7:c8:e2:9c:39:fa:af:db:07:4c:de:a2:8b:
         9e:82:d5:2b:53:46:1c:b3:5d:58:89:01:58:48:d8:76:83:30:
         b6:a8:bf:bd:0b:b3:7e:dc:05:d7:81:3a:b4:65:85:37:16:ed:
         2a:d6:f4:00:3d:46:41:ff:6a:66:21:e1:c2:08:61:60:38:1e:
         c2:25:75:9c:17:d9:e9:c8:4e:50:14:70:06:a9:e9:61:d5:9c:
         da:b5:2d:6b:13:dd:98:3d:23:42:42:06:cb:d5:d3:1d:db:2c:
         16:75:43:23:f4:98:d8:c6:87:59:bd:65:55:4d:ac:7d:d9:99:
         2b:bd:e4:0d:51:68:de:22:74:1b:aa:1c:9e:ee:ba:a1:f0:ee:
         ed:52:b6:66:9e:1c:78:c4:1d:0b:96:de:b5:c0:10:bb:76:16:
         4f:2f:15:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6N9w6+7nGoMvuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
N2Y4NGZjNGQtMzViYy00Njk0LWExZjItODExMWJmMGYzOThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNJkAUWhLeZWo0GC/60WFnyFCCJprDJkJMjo
eW6jigZzUwDQQdYbSSq1pYgtomUnyJmoeH0riVPqBIzEQMgGvM7duXfTElbKk6/b
5wzg8pNt3rM8ROLasjM62SEHZSJf27c0eCX13vu2K/Z0VSCI0NKY1DTE3YzIpYzv
1uLaZ3J3BBiksbKBad1bVj+obExmr4++rvdHIBqHscxKYXxFUI0fULTzmyjRcvsv
CjkIJyYf7XjnhUfKVoTkfmZAgqgl/mtnIKey69cFADGQXNorpiHK1XfrzA1Wqf2+
NxYF7uZlM91StSme7T0thyu0EraTrm7y6KUIC6P7PiBMVOo+rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUVPGgWY9k/Y3ynukosHKXIXVH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmFmYTBmZjktNWM3ZS0z
OTFiLTk2YWQtNTNiZmVhOGM4YTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyLlc1rTOEh2fy6LkEnNHh4u0c4bzKkxZzE5EpPxCZiyVdXXUN7Qwll
Ao4O9XIo7vv16KkNF+A9H737QqC9Zah5w3dXMMO4f41OxxhWt3vBF/5Oxl/iDa/E
5GtQkD9P58jinDn6r9sHTN6ii56C1StTRhyzXViJAVhI2HaDMLaov70Ls37cBdeB
OrRlhTcW7SrW9AA9RkH/amYh4cIIYWA4HsIldZwX2enITlAUcAap6WHVnNq1LWsT
3Zg9I0JCBsvV0x3bLBZ1QyP0mNjGh1m9ZVVNrH3ZmSu95A1RaN4idBuqHJ7uuqHw
7u1StmaeHHjEHQuW3rXAELt2Fk8vFfo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:06 2026 by rpki-client