Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
File:                     b33af0fc-e9a0-358c-8666-2e266d81251f.roa (raw, json)
Hash identifier:          v0xcWPelynhsJk7XbVCprWl9hCvjwdq7WFmQYwPKUZw=
Subject key identifier:   79:9C:AF:B2:34:23:F0:09:2E:93:27:A1:EF:FE:28:CF:F4:F6:F1:78
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E78FF839CACC6730823698B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     6939
IP address blocks:        216.66.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:83:9c:ac:c6:73:08:23:69:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=c436f6ee-2eab-428a-95c1-bdc8938e61a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:83:74:6f:b9:9d:2d:9f:aa:ce:72:42:66:
                    6b:06:82:42:2a:fb:28:3c:51:25:d3:e1:03:1f:64:
                    96:1a:4a:df:e6:64:6f:ca:6f:70:7c:44:56:c2:f2:
                    2d:64:9f:3f:3b:eb:bd:b6:6b:af:4c:2d:35:e7:f0:
                    87:38:d2:bd:4e:ed:77:6a:7b:97:05:75:08:32:ff:
                    f9:2e:6e:2c:12:7b:b7:ff:fb:3b:dc:1f:2a:de:a4:
                    68:4e:3e:17:21:59:f1:62:73:d5:5f:d3:50:b3:e2:
                    5c:61:1e:89:2d:d9:3a:00:42:b4:9b:3a:5d:32:76:
                    ca:29:09:80:90:99:e0:7a:e9:82:76:34:61:61:82:
                    cf:54:c5:e4:25:02:4e:c7:e7:ce:d2:40:f5:2f:8c:
                    e8:92:0f:d4:33:3b:1c:71:e1:4b:23:81:88:cd:f2:
                    29:3b:34:b4:21:45:db:a4:f6:2a:34:0c:63:c9:7f:
                    0a:52:3c:33:4a:78:99:e4:eb:70:df:d5:4d:fd:c4:
                    e5:3b:c3:17:cd:99:7e:c3:c8:1d:b6:a9:52:dd:6f:
                    be:43:60:15:96:6a:88:01:1f:70:cd:11:ec:c1:fa:
                    10:13:b6:e4:21:5b:7b:15:ba:be:b0:86:05:2a:97:
                    67:c6:e4:b8:2a:2e:b2:09:4e:cc:b0:d6:ae:65:58:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9C:AF:B2:34:23:F0:09:2E:93:27:A1:EF:FE:28:CF:F4:F6:F1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:83:12:da:fc:5c:57:be:1d:48:bc:c4:ed:34:10:d9:7f:
         08:f6:69:13:0c:a6:dd:ca:3a:db:ec:59:94:56:08:20:d5:5e:
         94:9c:76:98:58:42:e6:21:b5:c1:0e:94:d2:25:e0:ab:07:b4:
         6f:8e:d4:87:c9:66:9e:8b:05:81:77:aa:8e:2d:13:b4:aa:e1:
         e0:89:fa:03:0f:e0:37:f3:d0:45:46:0e:a7:8c:3a:61:95:5b:
         3f:4c:83:f3:d7:fd:5b:3b:cd:50:67:a0:47:c0:bf:36:f9:7b:
         5a:63:a2:b4:61:94:36:77:9d:27:9d:46:48:77:af:e5:13:15:
         30:1b:fa:39:08:f0:b7:09:bb:6c:a2:97:6e:94:3c:e2:d8:4a:
         71:3f:98:cb:a3:22:4f:7b:89:6f:a4:f8:e8:b1:00:e7:be:da:
         48:b9:be:da:8a:50:51:92:b9:2c:c2:52:03:98:29:48:61:f2:
         86:0c:a1:7b:68:40:a0:e2:03:53:35:60:59:d3:f1:04:55:62:
         a5:2f:ab:e5:03:dc:47:a4:ba:98:e9:64:d9:7e:4b:c5:fc:49:
         17:31:b7:99:bc:22:fa:1d:83:87:c7:d6:59:38:c9:c4:1a:b1:
         09:17:75:9c:cf:03:04:d1:de:57:86:15:08:d3:18:32:7f:75:
         b8:c8:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:25 2026 by rpki-client