Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa
File:                     a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa (raw, json)
Hash identifier:          46sglJK4mq/+iEgezthYSvQWM5HIgVR6OVEXZB3IyGk=
Subject key identifier:   65:4D:C0:34:15:BA:68:66:9F:2F:3A:DD:B9:65:B6:F3:4D:93:6F:73
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584E31CF0AD4A9CE9B7196B11800
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     6453
IP address blocks:        66.198.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0a:d4:a9:ce:9b:71:96:b1:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=4bab13d4-9387-4d91-8bee-18637921618d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ee:4f:5a:4c:fa:c8:bd:8a:33:14:65:b0:1c:
                    d5:d7:0f:7d:e0:68:03:e8:dc:8c:46:58:79:3c:1c:
                    cb:f3:37:9c:b4:85:ef:96:6f:fe:fd:d0:eb:70:3e:
                    10:f6:04:55:a3:06:78:ab:c6:54:10:26:0c:eb:05:
                    1e:d9:19:ee:8e:c3:3d:45:91:c9:df:4b:1a:91:0a:
                    25:47:a9:6a:0b:2d:1e:d7:49:48:7b:ea:cf:3f:5e:
                    87:9e:ef:19:86:ef:33:79:11:e7:2a:d8:b0:80:c2:
                    54:c4:71:01:c0:50:e4:be:00:ef:b0:ca:7a:90:d4:
                    f6:56:f2:9a:c4:6b:66:c7:59:6c:40:d9:35:76:84:
                    a3:30:e7:fb:cd:58:1e:b3:22:d7:3b:c4:64:9e:6f:
                    96:61:02:6d:f1:f5:e3:09:44:e0:f4:ab:8f:df:31:
                    01:86:3c:e0:0c:40:06:c5:b2:16:0b:53:2a:0d:09:
                    2a:db:17:08:ab:a8:26:d9:0d:d7:2b:ef:f9:a1:b5:
                    d0:f5:35:83:48:96:9d:e6:1f:38:94:c1:a3:09:b8:
                    dd:2a:63:42:4c:ef:e9:b2:af:21:c9:28:f3:cb:5f:
                    8a:bb:ce:56:a4:a6:55:fa:0b:43:04:0e:ee:36:4e:
                    c6:bd:90:e3:94:92:c4:e5:a6:23:fd:e0:0e:0b:27:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:C0:34:15:BA:68:66:9F:2F:3A:DD:B9:65:B6:F3:4D:93:6F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a720f5ee-1934-3836-8139-bfc8bb9a6c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.198.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:ef:52:1b:bd:d3:2e:e0:cb:71:73:03:4f:2c:10:1e:74:
         2f:45:b1:d8:71:bb:ee:b7:e9:74:7f:38:db:1a:a4:6a:7a:5d:
         d4:ca:1e:b6:fa:09:6e:ea:cb:e9:d3:7f:b3:0a:a5:b0:6e:2a:
         a6:1a:d1:1e:04:36:9a:bb:72:dd:83:b8:9a:31:f9:04:eb:4b:
         92:af:eb:6b:cc:49:6e:7b:b0:65:64:53:59:89:8a:62:c7:cb:
         78:ab:de:b3:6e:2e:e6:02:3e:55:e3:29:fd:79:2a:1a:6d:5f:
         d7:bb:76:75:32:4d:35:4d:12:77:35:83:8b:d3:77:ac:c2:50:
         d0:53:54:79:e1:b2:62:ef:eb:7d:50:22:32:7a:df:cf:13:67:
         ed:55:bb:72:4c:89:d7:fb:9e:a9:37:a7:99:a6:a3:5e:9a:46:
         b2:0e:9c:5f:cd:56:83:03:a1:1a:8c:22:da:df:97:76:0b:b0:
         e1:02:53:0f:bf:45:41:eb:af:3f:1d:0d:27:80:0e:3b:51:2b:
         fd:e4:07:9c:42:fe:4e:02:23:69:c9:f6:fd:9f:55:a4:4a:77:
         8e:ca:5b:7a:fb:8d:87:d8:04:26:ed:42:94:93:83:98:b9:30:
         f9:49:03:f3:ae:c2:d2:00:54:b3:df:5c:ec:76:ef:0d:3e:50:
         23:38:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:23:03 2026 by rpki-client