Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
File:                     366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa (raw, json)
Hash identifier:          qASNFMMXChKl+eNgjPhVGaHkUy6+Lg7lpkfDIqJNgPA=
Subject key identifier:   B6:9A:69:0C:4A:78:D0:35:D0:C7:5C:31:F1:9A:07:B8:F3:5C:5B:22
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584E9BE50857C317208D2731B880
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     19844
IP address blocks:        68.67.64.0/20 maxlen: 24
                          198.205.112.0/20 maxlen: 24
                          199.102.64.0/22 maxlen: 24
                          216.238.144.0/20 maxlen: 24
                          2605:d100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:08:57:c3:17:20:8d:27:31:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=edb8d31d-065a-493f-9ce3-af6f63d42ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:cb:df:98:01:a2:ca:96:f3:62:1c:76:20:
                    05:83:b6:07:b5:89:06:d6:14:90:a6:19:a6:b9:e2:
                    19:a7:9a:1d:98:0c:11:e7:77:91:e1:29:5c:da:1e:
                    f1:a5:f4:ed:4a:8b:87:f1:4b:45:3b:6c:28:24:2c:
                    67:4e:0a:5b:92:64:93:9a:ad:05:33:13:c4:8e:6c:
                    86:c5:77:ee:f1:c3:5b:d4:50:31:6c:47:3c:fa:76:
                    7b:a7:59:60:8b:5d:62:32:b9:5c:c0:1d:d0:33:ef:
                    da:b8:66:7f:92:c6:0a:f5:f1:44:e7:ea:6b:69:08:
                    aa:85:03:fe:2b:e0:bf:ed:b0:a6:b2:c6:57:fd:37:
                    c9:e0:4d:dd:b3:2e:d5:96:12:ef:12:38:01:cf:d5:
                    cc:d8:5b:a3:25:71:a2:4a:ef:26:2a:ce:fc:66:ec:
                    8c:0e:75:c2:60:53:89:f8:6d:4a:5f:a2:0f:72:42:
                    87:0f:44:51:90:ad:3a:f7:b8:ac:8b:d7:da:a0:c5:
                    c1:05:fe:c0:36:e4:8c:93:b6:fc:3a:76:a0:9e:bc:
                    e4:39:fd:9b:c6:2e:dd:a1:bd:17:c1:1a:cf:cd:50:
                    1d:a4:a4:56:f7:a3:b5:24:8a:24:6f:86:25:d2:c8:
                    0e:bf:11:6e:44:b6:21:e5:4e:42:4e:9c:5d:1d:21:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:69:0C:4A:78:D0:35:D0:C7:5C:31:F1:9A:07:B8:F3:5C:5B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/366b3e93-5fd9-3b62-ba63-4e8299afc23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.64.0/20
                  198.205.112.0/20
                  199.102.64.0/22
                  216.238.144.0/20
                IPv6:
                  2605:d100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:bc:40:83:87:c2:db:54:8d:77:f3:4e:06:2c:4a:f5:b0:
         96:94:fd:79:c7:af:15:fe:e6:b2:a4:0a:39:06:5a:35:6e:de:
         c4:f5:e9:85:85:65:a2:64:e4:f2:70:03:2e:46:0d:f8:79:bc:
         27:0d:d6:60:c7:19:0e:4b:ee:3c:26:0a:5d:7c:70:cd:a7:6f:
         fd:d2:88:3c:65:79:01:50:db:25:fb:32:f3:01:97:3e:d1:71:
         a4:79:e5:5f:ea:40:90:bc:70:6d:1a:51:55:fa:19:25:43:99:
         45:b9:3e:d5:38:0a:ed:43:82:a6:93:20:20:b6:4f:13:1b:29:
         d1:98:6d:98:e1:d2:98:ce:e4:42:f5:77:1b:f9:3d:b5:02:eb:
         30:c2:b4:51:10:2d:58:f0:c9:c6:8e:20:f4:58:d9:77:a9:de:
         6c:fa:88:9f:6a:8d:65:1b:7f:9b:e1:8d:d7:58:29:26:e8:29:
         df:40:fe:70:c4:61:4e:a9:87:7d:95:3f:88:9e:bc:f9:d3:f5:
         b3:0c:33:29:74:56:7f:71:13:39:a0:9d:c6:c1:e1:8a:a3:e0:
         af:88:10:57:a6:fd:a9:09:fd:4d:dd:8b:48:ef:f0:08:15:7f:
         24:77:8f:c9:78:87:18:cc:fa:4e:af:e6:d3:52:a4:92:99:66:
         e1:7e:cc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:10 2026 by rpki-client