Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/5e67a11d-eca9-37bb-8eb1-194ac8a15808.roa
File:                     5e67a11d-eca9-37bb-8eb1-194ac8a15808.roa (raw, json)
Hash identifier:          IHH1LBz8KgnvLHeStwEbI5TdnLwLOe8+jx10H2HWL9w=
Subject key identifier:   4D:FC:81:47:04:B4:33:1B:7E:76:5B:D4:CA:5B:EF:21:DA:B5:59:2A
Certificate issuer:       /CN=72ef9c16-2d45-4e8c-b035-49d30318c10f
Certificate serial:       010D0C9F4328584DC1A8399020F21818A6827B80
Authority key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/5e67a11d-eca9-37bb-8eb1-194ac8a15808.roa
Signing time:             Thu 07 May 2026 16:51:32 +0000
ROA not before:           Thu 07 May 2026 16:51:32 +0000
ROA not after:            Wed 05 Aug 2026 16:51:32 +0000
asID:                     10352
IP address blocks:        66.170.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:a8:39:90:20:f2:18:18:a6:82:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f
        Validity
            Not Before: May  7 16:51:32 2026 GMT
            Not After : Aug  5 16:51:32 2026 GMT
        Subject: CN=8163306e-2a2c-4b55-8bbe-5fa71e6b1f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:6a:55:8b:f9:5c:e2:15:41:0b:f3:52:6b:
                    3e:e6:a9:b3:a7:2e:92:01:d7:98:e7:87:b3:84:12:
                    e0:8f:d6:50:3f:e5:4d:00:79:f9:c4:63:f3:1f:34:
                    21:5e:c9:8b:37:67:77:bf:e1:20:26:a1:a5:48:f1:
                    65:46:99:9f:cc:82:d7:40:d8:52:2b:5d:d1:e8:7b:
                    84:25:a0:2a:71:af:db:4d:e6:84:90:df:ed:ef:0c:
                    9f:2a:0e:2e:00:a0:40:6f:58:02:df:96:58:36:63:
                    07:a0:6d:79:cf:5d:d4:4d:36:91:de:62:52:47:4d:
                    fd:4c:eb:9a:3a:2a:71:d1:59:6f:93:7b:4a:6a:2b:
                    bd:7e:22:c4:f1:30:88:39:c3:6d:a0:a9:4d:cf:eb:
                    eb:21:7e:35:81:53:16:18:5d:bb:39:d4:af:ad:9c:
                    90:d7:7f:db:fc:55:da:44:56:b2:38:dd:36:34:7d:
                    20:ab:74:b4:ef:b6:d3:95:cf:f3:2e:5b:d9:db:b0:
                    56:c3:b2:fb:70:70:47:d0:38:17:00:26:c6:29:77:
                    03:e7:42:20:24:79:24:d1:06:01:d1:9d:4c:0c:8f:
                    50:fd:77:bc:17:4e:2c:4b:ce:35:60:dd:f0:f5:e9:
                    98:b0:cc:45:c3:fc:8d:e2:7e:6f:eb:cc:be:3c:6f:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FC:81:47:04:B4:33:1B:7E:76:5B:D4:CA:5B:EF:21:DA:B5:59:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/5e67a11d-eca9-37bb-8eb1-194ac8a15808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.170.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:77:3c:ec:c2:11:5f:63:d7:ad:c0:86:e8:0a:3b:79:eb:
         ce:1e:43:8c:0e:4b:17:7c:18:b8:80:63:7c:b4:e1:d7:19:de:
         bb:f2:89:02:9a:a1:f5:fa:6f:6c:6b:b6:8e:08:b2:9a:97:12:
         89:96:c7:21:d2:7c:c4:76:e7:73:ec:30:14:5c:c9:9c:e6:6c:
         06:25:f6:96:68:ae:c6:0f:f4:f6:35:a5:5c:05:85:17:7f:ea:
         d8:b0:02:ed:ff:29:6a:92:42:e6:b9:6e:92:bc:99:2d:fa:36:
         01:5a:13:b5:c3:2a:77:f0:9f:0e:53:2d:f0:1d:2f:ff:38:e6:
         75:11:c2:4e:94:d2:ed:f6:e6:81:a2:18:cc:7d:aa:ff:9b:f5:
         6f:5b:ff:2c:29:91:36:3c:47:24:5c:3e:26:fc:4c:8d:25:db:
         fd:69:1d:49:14:35:2f:a9:ba:e5:f0:b5:39:69:d4:bf:3f:bd:
         ee:bf:d3:e5:48:2f:69:18:d5:8a:3c:25:10:07:6e:df:5c:c2:
         8f:6a:12:cb:df:5f:65:09:74:76:f3:76:25:5e:77:95:4c:33:
         8d:83:63:7d:70:70:63:a2:41:63:12:b0:6d:a2:3d:e2:42:04:
         7c:57:1a:a1:4c:b6:c4:39:5a:d9:5e:42:37:2a:ee:0a:6c:48:
         ee:1b:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:05 2026 by rpki-client