Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/17dec3e9-62de-3000-8839-48d11c382b51.roa
File:                     17dec3e9-62de-3000-8839-48d11c382b51.roa (raw, json)
Hash identifier:          1xAYZZ2tA/yx4d3sNXiUv+SAxpl0mOosi6zRa4odYK4=
Subject key identifier:   46:FA:4C:32:47:12:DD:1D:A8:AF:7F:F6:B3:FD:A7:D5:51:53:40:77
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584D0D428016532650E24A08F6E0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/17dec3e9-62de-3000-8839-48d11c382b51.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     7015
IP address blocks:        208.66.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:80:16:53:26:50:e2:4a:08:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=cf1c5275-6a51-428d-bd4e-6ad35a757c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:0b:bb:89:bb:d8:1e:e8:22:d4:88:f2:14:
                    cc:89:c5:a6:52:22:c4:75:68:da:97:54:8f:e0:2b:
                    1c:26:46:5b:16:ab:20:67:c7:8e:31:dc:44:63:c2:
                    d5:cf:af:39:46:98:09:e7:5c:56:e4:8c:4a:d3:e1:
                    f3:95:18:79:b1:ee:25:fc:61:cf:78:67:23:95:9c:
                    3b:be:83:74:8a:ff:1b:1d:60:64:3c:e3:eb:e7:38:
                    8d:63:6b:09:6c:1e:5d:57:b8:98:84:fe:94:fc:e1:
                    2e:9d:76:9c:af:48:41:7b:e4:9b:cd:a9:d0:1f:8b:
                    52:92:e6:58:b4:f4:e7:2f:21:f5:1c:cb:21:75:64:
                    fc:03:17:5f:5e:8b:58:86:c3:5e:5f:88:8d:c3:a7:
                    58:f1:96:ae:f1:f0:f4:20:b9:73:e7:9a:75:59:19:
                    3b:20:b7:58:63:a2:54:2a:03:4a:5f:22:45:8b:ab:
                    df:76:c3:14:77:f1:ce:7f:20:56:a4:14:9f:d7:0d:
                    c1:1e:e8:95:1c:4d:4b:25:8c:ea:dd:06:83:5b:9c:
                    46:01:16:bf:54:3d:7d:ec:e1:c1:b6:bc:2a:19:72:
                    13:67:22:06:a5:fc:be:9c:1e:30:cf:90:78:e4:d0:
                    88:ea:71:ba:3b:c9:92:89:c8:2f:f2:e7:2c:eb:b8:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:4C:32:47:12:DD:1D:A8:AF:7F:F6:B3:FD:A7:D5:51:53:40:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/17dec3e9-62de-3000-8839-48d11c382b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:76:61:5d:e2:75:fd:0e:d4:97:0f:51:a5:8f:ba:97:e9:28:
         d5:31:93:f2:7e:c6:72:12:5c:80:a9:f5:09:1f:89:63:78:5d:
         90:1a:98:f9:66:5e:d7:e3:1f:63:db:5f:74:cc:0a:01:5a:4a:
         3e:5a:65:bf:e9:e6:87:ab:4b:7f:23:c2:1b:3b:5a:3a:b8:ec:
         b9:d4:eb:9a:57:25:a0:e2:3d:02:62:57:e6:ab:d6:5a:7b:93:
         53:15:8b:00:6d:f7:06:19:fb:dd:8c:4b:0d:d4:0f:41:db:42:
         82:1f:7d:27:72:0e:68:36:2c:57:e3:12:b8:01:0b:28:7f:17:
         71:49:ec:cf:3d:30:36:fc:7b:8b:f1:ec:4f:1c:b7:ec:af:67:
         d9:2a:ec:4d:85:dc:2c:55:38:2a:25:06:ea:6b:d1:e0:80:82:
         cf:5a:6d:e1:a3:9f:2f:03:ea:f9:b3:c0:a6:3b:8e:5f:25:5c:
         85:65:d9:3e:da:7f:6e:10:0e:29:8c:d8:87:ea:4a:4b:7c:1a:
         af:62:7b:15:5f:95:22:b6:bf:c5:dd:f1:74:11:8d:75:2d:8d:
         17:3d:70:c4:af:54:a9:50:40:4a:65:ed:ee:e6:60:04:88:3f:
         eb:c1:d8:dd:e7:18:67:ac:83:7d:85:d3:85:b1:85:6a:1c:de:
         81:fa:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:20:14 2026 by rpki-client