Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/59a34be2-df64-3f0c-9f0e-53bfe364e193.roa
File:                     59a34be2-df64-3f0c-9f0e-53bfe364e193.roa (raw, json)
Hash identifier:          FzImNh89xBYt7ROPlAsqGTdqtH2xc/2lU4njy13R5iE=
Subject key identifier:   71:0F:7C:3C:42:85:FC:E9:CF:E4:C2:C5:1C:3F:F9:20:BC:C0:20:C2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E90BA5433523A28BAED647800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/59a34be2-df64-3f0c-9f0e-53bfe364e193.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     201207
IP address blocks:        66.95.202.0/23 maxlen: 23
                          68.166.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:54:33:52:3a:28:ba:ed:64:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=026692e5-2b79-4521-a19c-06665468b7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:36:17:80:31:de:43:3d:4b:00:d8:c8:64:
                    99:22:f5:05:76:c6:63:1e:23:bb:01:03:a5:6f:55:
                    2f:21:f3:bf:dc:08:d3:98:c9:01:d1:ef:73:b0:20:
                    8a:71:5d:86:9d:6b:48:94:b7:93:e8:3c:dd:f7:b1:
                    e9:dc:23:e9:fd:c1:56:9f:a2:1e:94:fb:ea:8d:6d:
                    17:09:c9:cb:07:69:0b:3b:54:fe:25:cd:09:58:de:
                    10:87:6c:5d:b9:a7:0b:22:8e:a6:46:4a:ee:38:82:
                    8f:53:fd:8a:5a:ba:4f:9e:a6:9f:18:65:e0:b0:31:
                    cf:b4:aa:13:31:60:0a:54:be:c0:33:49:96:cf:c0:
                    27:f9:79:93:4a:25:81:69:41:57:21:b7:b3:90:a5:
                    53:03:66:a3:58:3a:b6:63:0a:1b:d4:79:09:03:d7:
                    dc:c0:b1:d9:32:b0:c9:bd:6f:60:f1:f9:2f:e8:56:
                    b9:4b:30:c5:2d:4b:e1:81:66:37:95:44:d7:45:dc:
                    5b:05:10:0b:56:69:a8:d4:3a:81:71:44:f0:20:c9:
                    f0:ad:04:21:5d:01:b6:a8:79:3e:56:82:70:37:f0:
                    df:32:9f:b1:c6:b3:51:cc:1f:ea:61:d2:1f:52:6b:
                    ba:21:5b:01:c4:1f:51:94:ec:ac:e4:b4:08:d7:a2:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:7C:3C:42:85:FC:E9:CF:E4:C2:C5:1C:3F:F9:20:BC:C0:20:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/59a34be2-df64-3f0c-9f0e-53bfe364e193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.95.202.0/23
                  68.166.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:6f:ab:51:45:8c:60:4c:e0:91:c9:18:21:7b:f8:26:37:da:
         b4:ad:5c:76:63:8e:3e:32:c8:ab:cb:73:f8:47:41:8a:cf:eb:
         9e:29:6b:47:7e:94:bf:90:a8:36:07:c9:6c:f4:23:52:c4:7e:
         d7:5d:1a:16:3d:35:95:06:2b:5a:56:8b:a0:4a:d8:b2:d8:73:
         0e:de:46:44:b4:15:3b:21:ce:81:cc:4d:59:fd:0f:86:01:58:
         64:2e:cf:db:86:77:3a:8a:25:4b:19:80:2b:89:2b:73:5f:19:
         2d:fa:2e:21:78:a5:cf:cd:7d:3f:83:da:9a:0b:ee:ef:f4:e3:
         c5:6f:48:91:76:e1:9a:8a:9d:ac:2b:6d:01:47:43:71:6b:35:
         99:41:15:c0:ee:d8:fd:6f:cc:17:8e:c6:b4:2b:a9:57:60:1c:
         79:67:8e:8a:7d:fb:3c:e8:79:de:9a:95:cc:36:5a:38:19:3e:
         d9:07:5c:58:d7:8a:28:f7:b4:c0:d4:cc:72:bc:26:05:15:00:
         90:31:ef:96:b4:ff:54:58:bc:5c:5a:77:a7:e6:e5:ea:61:67:
         c3:fd:56:d1:61:a9:c3:1a:6c:8c:29:d1:0c:da:fd:3e:ab:17:
         1b:f2:cd:86:27:e1:b8:35:dc:38:ac:43:8d:50:95:61:cc:bc:
         95:eb:ee:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:54:25 2026 by rpki-client