Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/a4582581-da21-3fec-af37-14261669b74b.roa
File:                     a4582581-da21-3fec-af37-14261669b74b.roa (raw, json)
Hash identifier:          ekTAZ6wUh/XfwJtheTipGXvf4zpoht/JyUe2xW/V2pI=
Subject key identifier:   2C:5B:D4:F8:4A:0F:C9:59:79:DC:FD:92:43:EA:33:E5:BC:7B:E8:63
Certificate issuer:       /CN=028c0596-c3dd-44df-9761-677e68794c69
Certificate serial:       010D0C9F4328584E2AD455685D6EA75757165200
Authority key identifier: D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/a4582581-da21-3fec-af37-14261669b74b.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     14371
IP address blocks:        66.171.40.0/21 maxlen: 24
                          208.77.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:55:68:5d:6e:a7:57:57:16:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028c0596-c3dd-44df-9761-677e68794c69
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=e19a44fe-af3b-4c06-8879-b95a467bd1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:2d:29:7d:3a:71:f5:3a:0f:f5:b8:cc:31:
                    3b:56:38:86:d6:94:6c:7f:18:58:50:f6:24:9c:2b:
                    64:03:c0:ad:40:bb:f6:85:2c:b4:1d:09:cd:fe:8b:
                    34:25:bd:ed:14:bd:71:43:04:68:98:0e:dd:a3:e3:
                    89:97:45:32:e7:6a:71:60:a9:30:ae:ce:0e:ed:d7:
                    35:c7:69:34:ac:0c:f3:1f:3d:bd:55:92:ab:2f:49:
                    ab:52:05:6d:ee:e8:90:45:90:f4:71:62:10:21:7a:
                    2c:14:ae:04:81:47:0e:4d:51:e6:41:05:37:9b:00:
                    ee:75:82:b1:cb:9b:ed:2f:7d:a9:78:12:31:f5:8b:
                    72:cf:90:dd:cb:11:33:1d:19:24:10:50:53:2d:e8:
                    a6:8a:6d:3e:15:c0:b1:15:df:6b:06:be:65:7b:91:
                    bb:4a:e3:42:8e:d3:6b:b5:fb:b8:8e:b5:43:ac:5e:
                    fe:24:0a:48:f6:67:2c:a5:91:11:a8:ad:93:cd:60:
                    6d:80:9d:54:6e:ae:1d:4f:0c:86:fa:6e:91:06:ed:
                    2f:03:3d:e2:ec:34:e0:2d:b6:c6:13:4e:39:a0:88:
                    c9:33:6e:93:02:48:70:7a:17:68:4f:a3:a2:63:68:
                    22:a3:34:bb:d2:0d:06:d1:e1:ff:76:6e:ab:b7:40:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5B:D4:F8:4A:0F:C9:59:79:DC:FD:92:43:EA:33:E5:BC:7B:E8:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/a4582581-da21-3fec-af37-14261669b74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.40.0/21
                  208.77.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:a5:16:27:01:7e:5d:af:75:f0:31:68:48:18:01:76:af:25:
         ca:52:80:d1:e7:d3:05:04:55:36:00:7b:b3:91:bc:c4:09:c6:
         c7:ad:81:cc:14:1a:24:5f:7b:4c:e7:11:d5:ac:dc:73:ff:66:
         11:68:66:8e:11:61:93:61:70:f9:2c:af:3e:b5:74:fb:87:b5:
         87:eb:4b:24:49:e4:6c:fa:54:5d:56:8f:d5:6f:c6:98:4a:82:
         47:38:f4:bc:38:9c:6a:f3:e9:fb:ef:93:60:06:5b:9d:46:01:
         76:72:53:8d:33:f3:b1:b5:f8:a1:eb:cc:85:74:67:ef:1c:fb:
         1a:15:f9:cc:dd:fb:d9:8a:88:58:08:09:e6:0b:df:35:54:d9:
         ec:d8:7e:28:3a:ae:6f:94:ed:c0:70:ba:14:ff:da:c9:e2:5e:
         6c:2c:a8:f2:ca:20:4e:ec:26:17:e4:4c:62:67:13:71:11:ea:
         e5:c3:39:2e:74:28:d7:1b:07:2b:43:e7:0b:05:a1:0f:00:9a:
         7c:e6:7b:5a:6d:ef:5a:01:b1:62:55:ef:17:53:ba:05:ee:a0:
         1d:b6:26:bb:02:c5:dc:cf:d5:f7:e1:b7:1e:ac:ce:52:f8:2e:
         51:6c:2c:fc:34:c0:7c:17:81:7d:e1:fb:8c:1b:6e:ec:6c:42:
         74:33:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:33 2026 by rpki-client