Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596db589-466c-3bfd-a364-0325795ebac6.roa
File:                     596db589-466c-3bfd-a364-0325795ebac6.roa (raw, json)
Hash identifier:          ofvBSRyB/uX9wZ+GhgR5wS6/DZf4FqOXGu3fLJYfSy0=
Subject key identifier:   A2:EE:9E:7B:86:80:28:BF:14:56:98:10:9B:95:BF:4E:52:59:B7:54
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB084D6B87C54D1CB8BF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596db589-466c-3bfd-a364-0325795ebac6.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     7843
IP address blocks:        66.61.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:08:4d:6b:87:c5:4d:1c:b8:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=8b75a5a5-8395-49fe-abe1-69fef6dbc64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:76:6e:9b:8f:6c:6f:f2:cf:c4:89:75:52:
                    ee:4a:5e:db:72:06:30:bb:48:ce:c2:38:26:08:fb:
                    d5:72:05:09:8e:0f:45:2c:4b:63:8c:b4:f2:4e:49:
                    fc:32:31:91:e6:f1:e3:a0:b0:3c:9d:b0:90:71:ac:
                    ef:e0:6c:92:6f:da:9f:1a:95:ec:77:8b:78:30:a6:
                    ba:5d:e8:e9:05:72:e7:a2:66:dd:94:a6:8f:b0:20:
                    b3:0d:69:3f:34:f3:13:8e:b1:70:9f:cb:a6:c2:d7:
                    b6:e2:f2:cf:5e:54:15:36:75:e5:7e:ec:3b:b4:c0:
                    01:11:a4:99:22:d6:24:6a:61:5b:3b:00:bd:82:22:
                    c5:32:b8:41:c1:43:42:d6:86:5a:d6:be:c3:b0:01:
                    e2:d2:a5:bf:1f:2f:95:58:d8:f1:3c:4d:50:02:20:
                    6b:28:80:52:ed:e3:96:41:85:a9:5d:b3:1d:c3:9a:
                    4b:5b:ce:df:ed:e6:9a:54:60:12:3c:a0:74:50:95:
                    35:6e:45:64:ee:20:0e:66:59:84:2c:4b:89:a3:e1:
                    3f:16:d0:85:7d:b6:18:91:cd:2e:c9:2f:83:c5:2d:
                    ed:74:e3:5c:f6:a0:70:3e:68:ef:61:f1:b8:7c:27:
                    bc:79:52:49:60:44:c1:fb:1a:6e:43:26:cb:ca:b5:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:9E:7B:86:80:28:BF:14:56:98:10:9B:95:BF:4E:52:59:B7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596db589-466c-3bfd-a364-0325795ebac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:56:28:45:07:e0:b5:02:02:99:39:fb:89:11:b3:9d:cc:c2:
         0c:0f:f4:70:13:a1:97:44:0b:09:b2:a1:62:9c:4f:a8:d2:6d:
         6c:fa:fd:b9:7a:d0:48:7d:90:f5:7c:3d:d1:01:12:6d:88:ae:
         9d:5e:67:78:c7:2c:72:e8:48:d0:ed:79:cc:ff:0e:61:85:df:
         3f:06:0a:2f:e4:7c:6a:c9:86:35:8a:e6:18:58:98:cf:e9:9c:
         2f:6a:25:ca:dc:0d:ac:48:1d:e5:0d:9f:02:d7:2a:8a:52:f0:
         cb:83:06:56:84:07:d9:e9:83:86:82:6b:1f:bd:b2:5a:ac:bc:
         97:43:72:0a:7f:e1:62:f7:67:25:93:35:eb:11:56:da:25:22:
         01:54:7d:8a:90:b7:1d:99:f1:31:e4:40:9c:6d:b1:cc:bb:cf:
         f2:72:2a:8b:7f:48:ac:2b:76:a6:e7:6c:76:d8:c3:62:4d:b3:
         e0:2c:c8:f0:cb:e8:6c:d3:1a:d1:3b:4f:cb:10:35:2b:81:30:
         8c:a6:6d:ab:10:2b:64:c4:fd:4e:43:8b:03:21:bd:e3:b5:de:
         f0:86:ac:fc:74:d1:60:66:26:d0:11:46:50:96:f9:d8:4d:a4:
         b1:2b:aa:0c:bd:10:e5:0f:f8:e2:38:f8:af:04:dd:a8:85:9c:
         7e:04:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 15:46:36 2026 by rpki-client