Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa
File:                     b0d64248-0620-3fb2-b31b-e4ff4326842d.roa (raw, json)
Hash identifier:          KfccUgMklsbM2i5qZncrt9Xl95UG8eF9vGsBcKbYDi4=
Subject key identifier:   6F:7A:DC:12:3C:93:37:47:5F:2B:7D:0D:E9:67:53:C4:0F:4D:D0:A7
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584E9384F748F35BFC05CAFB9960
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     21947
IP address blocks:        66.109.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f7:48:f3:5b:fc:05:ca:fb:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=8b657b90-5f40-47ff-b4e0-47afa217b0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:e8:1a:8e:cd:66:ed:79:22:cf:5b:d9:f9:
                    bf:ca:dc:8b:32:8c:ee:f5:e6:09:85:c7:51:44:6c:
                    d4:21:32:7c:2b:c1:b7:65:17:b2:38:c9:70:7f:94:
                    67:58:79:6a:a6:e4:4c:63:59:0e:7e:b6:8c:c5:50:
                    7c:62:dc:fb:b8:9d:89:57:ec:83:49:90:0f:e6:37:
                    13:aa:31:23:41:40:04:cf:aa:2c:ce:b6:45:87:e0:
                    d2:90:ff:81:f1:6a:d5:3f:14:59:f0:ab:9c:c3:5b:
                    26:45:2f:fa:b9:3e:d9:5c:3d:40:db:1e:cf:1e:fd:
                    ed:7f:01:6d:a7:56:3c:dc:1e:ac:9c:bc:81:0a:0d:
                    7e:dd:39:29:0a:24:cd:be:d5:f2:e1:de:85:97:b4:
                    b1:71:7d:d7:c5:15:64:79:54:44:e6:6c:8b:34:2c:
                    70:44:b0:f1:56:00:ca:f1:7f:38:aa:6f:8d:48:37:
                    f0:ef:fe:f6:fb:65:f7:0b:e6:5e:83:7a:ae:7e:43:
                    82:a4:72:f2:df:d7:cf:4e:a1:85:93:0e:ac:96:93:
                    f3:cb:13:81:7e:01:e6:34:c5:3e:da:fd:3a:d6:c7:
                    3e:72:38:1b:ff:52:fa:ba:c9:c8:4c:29:c0:15:98:
                    ff:62:3b:87:cf:dd:94:69:d0:22:f3:69:24:ca:ff:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:DC:12:3C:93:37:47:5F:2B:7D:0D:E9:67:53:C4:0F:4D:D0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.109.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:41:d1:43:b0:3d:4c:df:d8:f6:39:9d:ef:dd:5d:e8:ad:
         75:23:f9:a0:be:51:05:fa:7a:4a:16:c2:d7:3b:5a:12:a5:26:
         f8:f4:ee:96:3c:3e:07:cb:aa:5e:f0:b7:3f:87:79:09:73:4f:
         86:97:9b:06:1c:2b:95:93:2f:26:da:f6:a0:68:44:ee:df:d9:
         ee:0b:66:ee:e9:2e:93:32:00:3c:c0:99:f0:a7:ea:92:94:ab:
         c3:2b:5d:b7:2e:bd:e3:7d:d0:03:4e:ea:34:71:be:8a:f2:35:
         11:25:d5:51:7a:8b:7e:03:d6:43:0c:c7:1e:89:bb:a7:da:ad:
         ed:0c:8f:3c:b9:d6:7f:7e:51:3b:d7:18:95:38:f1:61:af:7b:
         d3:a8:3b:82:06:55:4c:2b:1c:4b:36:ee:fe:15:c2:d4:d9:ca:
         45:49:a1:c4:31:fa:e3:e8:bc:b2:a7:c5:de:0b:5f:79:50:bb:
         2e:52:ed:03:b9:20:c3:7a:37:68:cb:94:f8:28:5a:1b:36:4a:
         8a:6d:11:7a:1c:ae:96:90:64:b9:ee:df:2a:3e:0c:04:be:05:
         e6:8b:56:1c:5e:ec:54:0b:c3:f1:4d:6b:56:f8:28:c4:f9:54:
         a1:b3:5b:b3:f9:95:1c:bb:58:b6:c4:a1:53:13:6d:c4:8c:08:
         1f:75:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:37 2026 by rpki-client