Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/ea7c7205-d328-3398-a599-10d3729c3424.roa
File:                     ea7c7205-d328-3398-a599-10d3729c3424.roa (raw, json)
Hash identifier:          749uqdQQnFHObXN2xkA/KulecaeksmhvIagDtukp2D4=
Subject key identifier:   74:0E:C8:A8:44:C3:46:C6:B5:55:58:C7:F1:66:FB:CC:F7:F9:8C:F0
Certificate issuer:       /CN=c171481d-6579-4949-8249-70529ec0d0f0
Certificate serial:       010D0C9F4328584E9EAFE4E56F0823B6B55D9950
Authority key identifier: 37:74:6E:72:DC:83:87:D0:42:29:6F:C9:D5:AB:F9:39:6D:B0:DE:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/ea7c7205-d328-3398-a599-10d3729c3424.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     20332
IP address blocks:        66.84.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e4:e5:6f:08:23:b6:b5:5d:99:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c171481d-6579-4949-8249-70529ec0d0f0
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=d55fe1ac-0aca-4a25-aade-c0f325dd4a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:a1:68:76:87:05:e1:37:a2:9d:98:f2:f4:
                    d0:cb:fb:1d:a9:27:c9:b2:0e:62:ce:c9:77:91:00:
                    48:e4:7f:25:92:95:e2:fb:fa:15:24:a6:2c:1a:0f:
                    05:ea:5d:f6:13:5d:5d:0f:a7:ae:45:f1:5e:db:b3:
                    76:f8:27:94:f3:22:a7:e1:c7:96:53:a4:0c:e8:4c:
                    e7:81:21:9f:a6:b2:e8:d9:e8:34:af:2b:73:f5:f6:
                    43:50:9d:e9:fa:9b:ed:78:3c:6d:fc:ef:9c:8b:94:
                    5f:70:65:90:85:54:23:9e:ca:6b:fb:24:f4:cf:88:
                    7d:02:91:7f:18:23:1c:bb:fb:08:64:f0:5f:80:74:
                    f4:36:bf:2a:9f:91:ce:dc:af:ac:b0:c6:12:30:5e:
                    4f:53:3e:32:e9:64:11:1a:10:63:e3:f0:0a:c5:a6:
                    d7:45:99:48:76:61:05:df:38:ab:85:69:36:ed:a3:
                    f5:14:6f:00:53:3e:e0:91:4b:61:c6:90:6c:21:c1:
                    4c:59:6d:7b:ce:db:ef:36:de:b3:46:59:ca:6a:04:
                    fb:39:9b:48:7f:5e:47:5d:a9:14:39:d6:75:a1:40:
                    34:6d:77:b4:3d:5b:cd:a4:77:7f:98:ed:2a:a3:21:
                    b0:fa:5a:c0:23:db:f0:76:12:95:8b:de:3d:9a:89:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:C8:A8:44:C3:46:C6:B5:55:58:C7:F1:66:FB:CC:F7:F9:8C:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/ea7c7205-d328-3398-a599-10d3729c3424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0/c171481d-6579-4949-8249-70529ec0d0f0.crl

            X509v3 Authority Key Identifier:
                keyid:37:74:6E:72:DC:83:87:D0:42:29:6F:C9:D5:AB:F9:39:6D:B0:DE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c171481d-6579-4949-8249-70529ec0d0f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.84.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:75:56:34:83:29:81:11:9f:5d:b3:05:8b:25:59:56:14:
         0b:4c:7d:95:de:ea:02:01:66:c8:81:28:d8:f5:26:eb:ab:68:
         f9:e1:37:bb:84:79:b7:90:f2:1c:66:47:fa:29:68:3a:58:c4:
         82:ac:88:7a:c8:15:41:85:70:9e:55:61:02:3f:1c:fe:8a:c1:
         b9:7f:7a:0c:dc:ca:69:45:8e:a3:29:52:08:af:de:89:52:b7:
         f6:6e:7f:ec:a5:58:5b:d0:e8:ff:f8:04:e1:0b:d9:e2:e2:5f:
         8c:53:99:cd:69:b5:63:76:e4:5a:0d:47:ff:0a:99:9c:43:53:
         e8:fe:95:1a:f4:65:8f:57:95:ae:0b:2c:90:80:b6:85:b2:67:
         6b:a9:0f:4f:36:1f:9a:7f:15:17:aa:af:b9:67:42:97:9e:49:
         84:f8:ad:32:de:48:87:17:fa:99:c8:e4:d9:e8:28:9d:6e:42:
         ac:ad:4e:8b:30:17:98:03:7e:9d:53:eb:04:c6:d9:46:b6:fb:
         5e:e4:53:38:ce:20:ee:2d:b3:03:13:07:06:4d:3d:5b:d2:44:
         df:49:f4:c4:f2:95:68:c9:ff:7d:64:98:3c:e5:00:d0:94:d8:
         ff:1a:25:93:26:bf:60:9a:60:a2:0b:d5:08:0d:4e:1d:f7:0b:
         23:61:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:40:59 2026 by rpki-client