Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/70b0559f-0676-3309-bd02-cbddb3833c6c.roa
File:                     70b0559f-0676-3309-bd02-cbddb3833c6c.roa (raw, json)
Hash identifier:          T8sX+x0fd5YR50jOBlz+ajRrkEx6uG9gfjAeH0sMWl8=
Subject key identifier:   7E:1F:F0:43:CD:84:96:A2:22:25:07:4A:15:4C:18:AC:C5:49:DA:D5
Certificate issuer:       /CN=f924d902-b3ed-4578-a1c7-866c1aeef49c
Certificate serial:       010D0C9F4328584E55DE1CA0FD79E0D567786500
Authority key identifier: 17:51:85:8D:ED:3D:CA:86:E5:86:D8:62:54:6B:39:19:00:B7:AC:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/70b0559f-0676-3309-bd02-cbddb3833c6c.roa
Signing time:             Mon 29 Jun 2026 18:59:45 +0000
ROA not before:           Mon 29 Jun 2026 18:59:45 +0000
ROA not after:            Sun 27 Sep 2026 18:59:45 +0000
asID:                     402563
IP address blocks:        66.84.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/f924d902-b3ed-4578-a1c7-866c1aeef49c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/f924d902-b3ed-4578-a1c7-866c1aeef49c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:55:de:1c:a0:fd:79:e0:d5:67:78:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f924d902-b3ed-4578-a1c7-866c1aeef49c
        Validity
            Not Before: Jun 29 18:59:45 2026 GMT
            Not After : Sep 27 18:59:45 2026 GMT
        Subject: CN=11484770-0953-45c4-9f36-74e35d1b572b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:d1:06:13:9f:00:2e:d5:c0:cb:e6:68:32:
                    94:8c:5b:89:c0:cb:d3:7b:3c:9b:29:e1:fb:4f:68:
                    62:b3:86:06:5d:e9:d9:a9:95:16:35:57:3a:5e:b1:
                    94:05:81:0f:d7:9b:3c:d0:68:d5:bb:68:56:36:dd:
                    7b:3c:95:9e:b1:96:55:a7:a7:ca:82:be:bc:db:77:
                    e6:3a:fe:d0:35:42:12:e6:2f:63:e6:2e:d4:a7:a9:
                    d9:23:f0:90:2b:2d:4a:c7:e9:be:fd:a4:ad:2a:0d:
                    f1:9b:48:59:74:e5:d1:54:59:4f:a9:dc:e6:11:fa:
                    74:35:e9:a4:22:54:68:d6:8e:52:8e:45:c9:29:d8:
                    c5:86:ad:7c:0c:ec:7e:09:f9:dd:aa:a5:39:69:3c:
                    b4:f6:05:f5:20:ed:84:a6:50:42:7c:50:a3:e2:b4:
                    0b:4b:a5:8e:61:81:c7:21:aa:5f:0e:f3:74:00:4e:
                    12:12:ba:f0:43:83:40:d6:2f:18:ef:01:64:f0:58:
                    2e:43:9a:99:38:28:1e:1d:5c:69:c1:78:ae:f9:16:
                    dd:3a:35:1c:36:d1:d5:dc:89:b6:7d:e1:f3:9b:8f:
                    e9:fb:56:ff:b3:84:9d:bb:d2:a3:3d:33:86:0a:46:
                    a6:79:1a:13:d2:98:67:d0:2a:f5:f4:8f:22:fb:80:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:F0:43:CD:84:96:A2:22:25:07:4A:15:4C:18:AC:C5:49:DA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/70b0559f-0676-3309-bd02-cbddb3833c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c/f924d902-b3ed-4578-a1c7-866c1aeef49c.crl

            X509v3 Authority Key Identifier:
                keyid:17:51:85:8D:ED:3D:CA:86:E5:86:D8:62:54:6B:39:19:00:B7:AC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f924d902-b3ed-4578-a1c7-866c1aeef49c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.84.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:17:64:38:49:1e:b8:f5:c3:f8:66:54:06:28:f3:e1:7c:
         cf:8e:4c:21:46:a6:a2:64:ee:98:5b:5f:7a:a7:b2:76:3c:ae:
         00:42:f8:0f:43:e0:a5:60:81:56:e9:c8:b7:ed:ee:15:26:68:
         bb:3e:60:e2:22:c1:31:ab:85:17:4b:67:c5:45:bc:b6:18:81:
         83:4b:36:82:9e:09:79:df:f6:49:2c:47:7e:18:3b:ca:88:28:
         e6:1b:85:58:bf:55:e5:f9:87:ce:e7:c4:d0:56:ea:cb:95:6a:
         db:75:08:5a:bb:46:df:02:c1:91:c3:05:8f:59:fe:54:b5:75:
         3b:0b:3c:6d:13:d9:36:02:d6:cd:66:3b:c0:2f:a7:e9:8e:42:
         52:75:d7:7b:d2:82:37:ce:2d:26:2c:2d:73:10:76:8f:60:01:
         44:07:ff:df:3c:d5:45:b4:dd:9d:fc:20:75:b9:1b:a7:bc:d8:
         8a:bc:c3:a0:77:50:3e:ef:d9:7a:45:10:0d:3e:bb:14:ca:11:
         2f:ef:7c:ec:b3:36:d0:ff:19:23:cc:bd:1a:4b:b7:4e:47:95:
         f2:e1:74:26:49:ba:6d:82:eb:89:14:1c:ab:6a:5d:6d:72:ca:
         f7:ad:85:03:23:7c:73:7c:38:1c:71:61:e1:df:77:15:60:d2:
         6c:d5:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:56 2026 by rpki-client