Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
File:                     677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json)
Hash identifier:          ygSqJ1KU1L3GQXX+KchZ4lMU/fGsjmxgqX7WRkIehqg=
Subject key identifier:   60:6E:A0:2E:B8:83:F8:63:8B:B9:8A:4E:56:CA:1D:19:3F:4F:8D:6E
Certificate issuer:       /CN=669f938e-8371-4220-9059-9081449ba23b
Certificate serial:       010D0C9F4328584EBDDC5BF6227053CAE792FC80
Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     46694
IP address blocks:        66.209.240.0/20 maxlen: 24
                          192.68.190.0/24 maxlen: 24
                          2607:6280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:5b:f6:22:70:53:ca:e7:92:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669f938e-8371-4220-9059-9081449ba23b
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=1d83de88-d8fe-4746-9df2-6b51a0219a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:41:a8:0c:1d:d1:9b:c4:2c:86:24:99:e0:
                    47:45:5d:36:0a:51:43:11:09:57:f7:8f:26:d0:da:
                    46:fc:3c:91:5e:b6:b8:9b:52:52:fb:fe:91:87:e4:
                    51:f0:cf:cc:65:52:cd:44:b4:89:dd:57:08:d9:c0:
                    ad:a4:65:1c:3a:b5:c0:b4:6c:b8:0c:ac:1e:91:89:
                    e1:43:28:21:55:a1:fb:34:8d:71:84:60:46:ec:51:
                    46:58:e5:9a:b6:c2:8c:2c:3c:61:36:f1:6d:65:e5:
                    20:3f:a0:35:6a:6c:dc:ee:fe:c2:a2:0d:9e:e3:7e:
                    c8:43:9a:a2:0f:e4:88:a3:dc:ff:ce:a1:5f:3b:ea:
                    10:d1:f9:6a:51:36:9d:c8:e3:12:5c:0e:bc:2c:71:
                    0a:81:b3:3d:dc:db:ba:3d:d4:de:8e:1e:f2:bd:51:
                    9e:b5:ab:ac:15:7f:84:5b:b5:6b:cd:83:46:62:91:
                    13:7c:1a:87:2d:bf:78:09:b4:1e:4e:a0:8b:2c:fa:
                    eb:fa:40:7c:38:d4:cb:1c:91:0d:ed:28:12:b4:30:
                    58:11:3e:a5:0a:ee:83:ae:47:69:f9:14:ac:56:ba:
                    59:b3:11:8d:94:f6:c3:da:8a:1d:76:e7:7c:1f:48:
                    86:3a:a0:08:37:eb:72:86:26:0f:98:a8:76:5d:c5:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6E:A0:2E:B8:83:F8:63:8B:B9:8A:4E:56:CA:1D:19:3F:4F:8D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.209.240.0/20
                  192.68.190.0/24
                IPv6:
                  2607:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:b8:f2:20:fc:7b:6f:37:b1:8b:ee:54:ed:36:44:4a:eb:
         4d:d4:61:3f:1c:e2:2f:25:53:48:c9:9a:c2:9d:6c:eb:fc:e7:
         41:60:92:4f:fd:4a:4c:49:3c:7d:8b:ad:3b:2b:cd:af:64:cf:
         63:c6:41:8c:f9:d5:bc:16:b3:8f:e2:5c:87:6c:11:c4:c2:65:
         cf:04:f7:78:58:1c:ce:77:54:0a:20:59:1f:86:c7:92:57:ec:
         f5:dd:00:3b:08:17:5e:c9:85:49:dc:fd:17:f7:de:58:31:c1:
         cb:b5:a2:19:d7:1b:28:b7:ce:92:4d:89:07:b8:fc:16:e3:18:
         0d:f8:55:68:3d:1d:c6:98:cf:0a:b9:3d:8f:5a:03:05:d6:89:
         48:74:5a:e5:72:d2:d9:41:5c:03:36:56:61:26:b0:30:f7:8e:
         8a:e6:96:11:45:bd:eb:1d:dc:e7:ee:25:38:81:db:f7:84:0d:
         09:6e:0b:c3:89:0c:06:0a:32:80:32:0d:9a:f5:43:32:93:ac:
         d1:3a:5b:c9:9c:aa:89:64:4a:4c:f4:e5:39:19:40:eb:d7:be:
         87:f6:29:e6:0d:c7:bf:52:ad:f8:f9:31:83:a2:ff:fa:1b:f3:
         69:a4:2e:01:66:ac:b0:5d:fe:0f:da:72:07:0d:07:97:00:14:
         88:55:5a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 22:09:52 2026 by rpki-client