Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa
File:                     f4c01303-cca9-38d9-be17-e90b2354932e.roa (raw, json)
Hash identifier:          pL91y5Pwf2ErNDejbK+SM8mA8dXcx/GzVBr9K1OGvcs=
Subject key identifier:   5B:2D:EF:0B:EF:D5:7E:70:61:2D:6E:0C:26:AF:B0:A2:03:B9:48:D2
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584E6574ACC39DBFCBCC134EA080
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     400072
IP address blocks:        66.43.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:ac:c3:9d:bf:cb:cc:13:4e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=e7fbea5d-5337-4cda-9571-6c7de6481f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:2b:f5:8c:f3:c3:11:3e:89:02:2d:ab:75:
                    e6:a3:25:72:93:a3:b5:4b:e1:eb:30:fb:7b:f6:e4:
                    9f:29:11:f2:27:b0:8f:bd:62:b7:3f:c2:7e:5c:87:
                    df:4b:0a:bd:e4:f7:4d:f1:c9:19:a3:b1:9b:8b:fa:
                    e7:26:73:dd:30:6e:4e:e9:27:1f:43:c7:eb:4a:d5:
                    d5:91:e0:d8:ff:38:64:bb:a5:0f:c2:60:f0:04:b9:
                    ff:07:9c:e9:bb:e8:6f:da:ae:74:23:e1:30:12:97:
                    d1:b7:24:4e:b3:b1:90:ea:3e:c7:33:70:03:20:25:
                    9f:6d:73:fa:e9:4b:3e:5e:6e:45:7a:20:05:da:dc:
                    89:d8:54:76:d6:8c:3c:da:bc:dd:72:94:00:0d:0c:
                    da:8c:09:f0:4e:6f:02:d4:8b:29:2a:0d:60:47:cc:
                    89:8d:61:ef:6e:38:97:3f:2e:fb:04:cd:bd:5a:15:
                    79:66:4a:9e:4a:f1:a3:f5:b0:b6:1b:05:6f:32:76:
                    41:10:8d:5d:9d:f3:6f:58:05:64:f7:b6:fa:a8:a2:
                    35:70:71:06:11:a0:96:f5:8c:14:ea:4e:df:9d:2d:
                    ff:6b:8f:cf:b4:12:f9:b3:4c:6c:a8:d9:53:ea:67:
                    ff:99:90:8c:8a:6f:d3:63:be:51:b5:6f:06:9c:dc:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2D:EF:0B:EF:D5:7E:70:61:2D:6E:0C:26:AF:B0:A2:03:B9:48:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/f4c01303-cca9-38d9-be17-e90b2354932e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:29:04:83:25:c3:ed:81:49:59:bb:b8:93:f0:0a:37:d2:
         a1:0c:31:dd:48:28:8d:fc:19:b5:c1:17:97:8b:22:be:55:69:
         ca:15:41:28:70:77:e4:eb:33:fc:f6:ca:d3:b2:61:c6:02:55:
         e7:53:0a:fa:07:f1:49:b7:69:79:b5:33:5c:5e:ee:3f:55:df:
         20:67:72:cd:9b:52:df:57:9f:31:1e:c9:c1:23:b4:36:96:5f:
         5d:6f:57:a3:8c:61:9f:16:2f:5b:90:4e:1f:b4:b5:2d:05:61:
         13:1d:ac:e3:c5:4a:a9:0d:85:c0:0f:98:82:eb:c8:7c:e0:ce:
         d9:85:d7:96:94:bb:8e:8d:39:af:25:6c:4d:aa:d5:43:a4:21:
         0f:c9:3b:35:ff:d4:ff:b5:71:72:e0:14:fd:a5:79:03:4d:78:
         82:9f:dc:1a:39:59:82:a6:64:01:de:b9:a6:46:72:19:81:12:
         ab:e6:64:4e:ff:42:e5:22:0c:11:94:11:59:1f:a7:e5:a0:d3:
         62:55:68:08:bc:e1:2d:3c:72:91:bb:9c:fb:79:c0:54:7d:65:
         4f:20:4b:ff:1e:de:45:8f:c2:72:35:ca:a9:0c:0e:0a:4c:88:
         ca:1d:b8:e8:57:97:c1:a0:f3:4d:6e:4f:a7:2e:d9:65:36:8e:
         af:ea:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 06:49:36 2026 by rpki-client