Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/7fb0d524-54d0-3c92-a488-c505132d0330.roa
File:                     7fb0d524-54d0-3c92-a488-c505132d0330.roa (raw, json)
Hash identifier:          ZAAOcbMPr5+4NmmUk85/6kvBsGcxrnH/tT3v/BAoh1s=
Subject key identifier:   FC:A9:32:9D:80:B0:55:FB:E8:61:87:4A:09:18:6F:3C:B6:2E:80:5E
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584D5E1A7C29A83DC82A3DFD9040
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/7fb0d524-54d0-3c92-a488-c505132d0330.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     397062
IP address blocks:        66.235.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7c:29:a8:3d:c8:2a:3d:fd:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=65e7f20a-deb9-4f5d-8ce3-45a9907325be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:22:4d:dc:a0:31:7c:2c:0f:d3:8a:bf:cc:
                    6e:4b:19:5e:6e:f7:1a:06:b6:a8:bc:22:44:b2:0f:
                    39:ee:68:57:54:95:61:23:a6:3c:fc:9f:02:e6:2b:
                    d1:74:cc:e6:76:36:2b:4e:a6:d4:62:3e:b8:20:51:
                    ef:2c:52:8c:18:9e:75:54:9e:59:db:12:02:f4:f6:
                    a1:9a:24:c6:91:b7:a5:50:08:f7:15:34:14:03:9c:
                    fd:00:7a:4c:42:13:a7:e6:0a:f8:52:24:e5:cf:fb:
                    f9:a3:cb:b8:2a:37:6a:bf:a2:43:f7:4c:cd:90:23:
                    fd:0d:c7:89:85:d5:f4:c0:ad:03:9f:ba:01:6d:63:
                    65:f8:2f:8b:f4:2a:0d:95:36:66:5e:08:7b:35:31:
                    80:0b:ba:4a:08:bd:13:8c:d5:07:71:9c:ea:7e:3c:
                    3b:2f:c7:23:ed:74:d6:5a:3c:c2:84:7c:47:7a:84:
                    0b:41:f3:72:6e:69:71:c3:72:a3:48:17:cb:9a:92:
                    45:9b:38:67:94:37:d9:72:34:dd:3a:b0:a4:62:06:
                    df:d5:44:88:af:30:4c:0a:fe:42:10:0c:87:48:51:
                    72:e4:98:7c:d4:af:4a:b5:2f:3f:f3:37:c6:22:32:
                    56:bd:16:24:28:46:b5:7c:aa:ae:70:b0:48:12:67:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:32:9D:80:B0:55:FB:E8:61:87:4A:09:18:6F:3C:B6:2E:80:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/7fb0d524-54d0-3c92-a488-c505132d0330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:f6:36:9a:8d:0a:c1:ba:4a:8d:70:31:56:97:94:d9:cb:
         57:5a:04:0f:8e:3f:a1:bc:d0:76:b2:e8:93:66:a6:fd:60:4d:
         8e:2f:92:6d:63:f8:ec:df:c5:68:02:fa:7c:72:7d:57:c5:61:
         d7:ef:50:d6:29:2a:91:f5:24:d3:61:91:90:f2:85:ad:51:58:
         c8:f4:da:ad:4c:3e:3d:6c:e1:58:79:47:d5:0a:78:d2:43:fd:
         72:07:1c:ce:93:2c:72:96:0a:c7:ea:03:9a:fd:81:4d:dc:7b:
         93:71:96:8e:e4:16:3a:33:8b:a8:51:90:e9:3d:63:73:08:98:
         fd:34:31:5f:ed:4d:7d:a1:25:28:67:82:12:e7:1a:46:55:2b:
         19:11:e9:32:56:d4:66:fb:84:18:f1:b8:af:45:8d:23:c2:2b:
         65:9c:ed:40:cd:ac:a6:14:7b:4b:74:35:ee:6b:de:f8:65:c9:
         f7:40:18:e2:98:bb:18:6e:8c:89:4a:a6:15:1d:d0:ac:46:b4:
         32:48:a2:2b:a5:e9:72:1b:e5:6f:1e:b5:0b:30:61:21:c2:e2:
         57:ab:8f:14:1f:86:3f:91:1c:88:10:80:24:59:7b:0e:62:17:
         7c:ed:67:92:64:b0:74:11:0f:92:06:94:51:cf:65:4d:56:c5:
         1a:0a:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:39:29 2026 by rpki-client