Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa
File:                     43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa (raw, json)
Hash identifier:          0CSw5g91KmaQXWERiy41tMAQSAHC6B2k+OtDrZz3gRY=
Subject key identifier:   22:CB:44:17:65:9E:CF:92:E9:45:4C:B2:A6:0B:7F:FC:34:10:9B:DB
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584E4129E325D591D226F8FB6890
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     14434
IP address blocks:        66.185.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e3:25:d5:91:d2:26:f8:fb:68:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=15d77273-16d8-4717-bdd2-fe437f8c175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:84:4b:d2:44:f0:d9:d1:6d:76:6c:48:24:
                    f1:07:d8:fe:91:bc:67:75:d8:9d:38:53:d3:07:82:
                    ad:80:75:75:2e:ab:02:6b:b9:ae:7c:b6:b3:df:e2:
                    f8:7f:a6:fd:bf:8a:12:63:74:98:a4:d7:fa:0a:45:
                    c3:df:70:4a:db:68:44:e8:23:14:22:45:c0:e2:b8:
                    44:6d:6e:52:ad:57:58:01:86:8e:1c:7d:a2:b1:8f:
                    be:ca:6e:66:b2:2b:f7:ff:15:59:b0:cc:9d:c8:22:
                    da:c6:3e:a4:4d:54:b4:5f:f3:fb:2a:43:2f:c8:60:
                    8a:91:fa:6f:14:a6:52:c7:94:71:59:43:8b:a0:54:
                    a9:50:6c:6a:90:05:b8:fe:9e:4e:33:bd:4e:8c:4d:
                    45:ca:79:87:4e:42:21:29:bc:31:97:62:26:e8:8f:
                    b1:a1:3a:2d:42:ff:46:da:c6:53:17:bc:d2:14:ab:
                    5e:6e:05:b4:2f:9d:0e:b5:96:24:18:aa:77:dd:06:
                    38:d3:2e:aa:0a:a1:1b:c0:69:b2:fc:6e:e9:5c:d9:
                    a3:0a:59:98:40:0d:a3:89:ee:9e:e5:b1:fb:f2:63:
                    37:a5:86:cb:b0:e4:5d:f9:ba:b8:c0:aa:d4:00:ce:
                    cd:85:f4:77:5b:87:39:bc:1d:24:34:a9:3b:64:02:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CB:44:17:65:9E:CF:92:E9:45:4C:B2:A6:0B:7F:FC:34:10:9B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/43cf56e2-5bde-3dbe-a6a3-4082c04c4372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.185.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:09:dd:c3:3f:f0:10:7b:80:22:73:02:78:81:3e:e6:00:81:
         06:9f:d4:a9:68:7a:97:c0:34:52:9c:06:22:78:da:f0:36:30:
         d4:70:3f:45:74:04:65:87:c7:f5:0a:8d:e8:98:e2:cd:cf:10:
         75:5f:dd:89:39:fd:d5:e6:6c:a0:6c:be:7a:af:cb:7a:70:a9:
         90:57:e5:9e:29:92:2c:fd:4b:5b:83:e9:6c:ed:44:19:59:da:
         77:74:c6:bf:dd:7a:3a:ad:3d:8d:d3:2b:7b:3c:77:02:09:19:
         e6:97:59:d4:0a:80:ff:cb:1f:a0:92:4f:90:94:40:bf:c3:9b:
         96:a3:60:90:af:88:5d:28:41:20:fc:d1:8b:5d:f7:ce:be:e9:
         d9:d3:61:64:83:20:31:f9:20:b0:59:84:09:ed:75:d9:14:75:
         db:c9:5f:c6:8a:c7:ee:f0:a9:c3:4e:19:28:dd:a5:4b:40:38:
         06:9b:21:5e:f9:82:f2:81:db:ea:3e:67:a9:f5:6f:14:92:fe:
         2c:86:21:d9:cf:67:82:33:7b:14:e7:23:f9:d7:83:7b:f7:19:
         b8:58:ed:c3:a5:10:f8:71:19:6a:4c:2f:5d:98:09:1e:dd:b4:
         71:c0:cf:96:64:d2:cc:85:15:5f:15:89:ab:b0:de:95:b0:fc:
         7c:70:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:46 2026 by rpki-client