Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/970307fd-238f-30ee-a1e5-898cb0b4ca7e.roa
File:                     970307fd-238f-30ee-a1e5-898cb0b4ca7e.roa (raw, json)
Hash identifier:          zp6JzzyItfbmqkYaK0DVtKxZgFIPTh1zuhuhQgxzW0w=
Subject key identifier:   D8:A5:F4:42:44:68:F1:DF:0B:46:A8:B4:6E:A2:DB:4E:F6:DE:F1:3F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D0A77A57B5FC1C95443987780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/970307fd-238f-30ee-a1e5-898cb0b4ca7e.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     202
IP address blocks:        66.54.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a5:7b:5f:c1:c9:54:43:98:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=c40e0e1d-67b7-46c6-afd5-d5cb84f5a1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:a8:1f:9b:85:b7:9c:64:69:11:4d:85:38:
                    dd:9b:17:d7:3f:66:1d:2d:f9:e3:ea:ad:ca:ac:d8:
                    ab:ee:1c:a3:50:0a:06:f6:c3:fd:87:2f:ff:96:f6:
                    30:4f:e7:5d:88:56:a8:9d:15:d3:d9:e2:0d:05:49:
                    ff:4e:3a:12:c2:13:34:e6:a8:23:76:da:5b:1b:15:
                    3b:a0:5e:3f:7a:65:4b:42:cd:8e:18:68:bf:2d:0a:
                    57:72:7f:35:61:90:ef:52:61:85:9a:35:3c:4c:3c:
                    cc:8f:3e:25:9a:72:c8:ff:d3:4f:61:32:67:b6:ed:
                    1b:ba:6a:82:7a:46:8c:58:86:b8:26:54:dc:f1:b3:
                    95:c8:4e:dd:37:2d:31:77:25:2d:6e:b6:be:d6:fb:
                    bb:7e:39:f2:13:12:5b:ce:e9:ce:29:7c:4b:bf:1f:
                    16:4a:c3:4a:72:2e:9a:4b:46:df:73:1a:15:48:10:
                    b0:ff:c2:6b:37:18:29:71:9c:6f:85:73:5d:e7:00:
                    b4:c6:36:8f:4d:d2:64:a3:83:5d:0f:4d:6c:66:8a:
                    06:bb:4e:4c:f1:9e:38:58:6d:1f:33:46:87:a1:c3:
                    0b:81:09:5d:8b:82:9c:1e:de:51:1d:c4:01:dd:b4:
                    c6:58:22:16:ae:f9:d4:9a:22:92:67:4f:4d:8c:02:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A5:F4:42:44:68:F1:DF:0B:46:A8:B4:6E:A2:DB:4E:F6:DE:F1:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/970307fd-238f-30ee-a1e5-898cb0b4ca7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:1c:50:3f:a9:22:0c:e2:0a:d8:4a:0c:f5:d7:77:33:b6:
         09:00:c6:cf:4b:40:83:4f:7d:2d:c5:c1:80:d3:d6:f8:67:c4:
         59:ff:18:c4:13:62:61:6e:b3:1f:e4:d1:8f:75:1f:cd:6b:f6:
         ee:d6:c7:fa:fc:29:10:6e:5a:71:f4:51:b2:36:86:7c:1f:e5:
         aa:3f:b8:70:7d:4a:d9:54:6b:46:64:40:81:c0:38:db:9c:94:
         0a:16:30:c1:60:6b:0c:4d:c2:1f:0e:8e:72:fa:a8:bd:79:8c:
         c9:19:1e:d6:13:26:41:a7:a0:a6:95:42:d2:bb:e5:a5:e8:6e:
         53:27:81:45:18:5f:62:00:0b:3b:35:a6:b6:c9:1c:72:27:c8:
         34:69:80:4a:59:64:27:81:ee:29:24:3b:78:bf:41:83:4c:fc:
         24:aa:e3:c6:64:11:75:6a:9b:9e:bb:a4:db:84:52:f6:0c:15:
         70:ca:96:21:0e:61:c8:a9:ac:f3:7f:46:86:9f:72:97:07:3d:
         6b:ab:16:c5:a2:28:c5:d8:08:ac:80:7a:05:da:a3:df:55:d5:
         d9:43:86:12:6d:0a:9a:45:26:78:29:d1:e1:95:1f:e9:ce:5f:
         28:13:b0:34:bd:d3:6d:57:40:5a:4d:67:18:52:bb:2c:f4:5e:
         10:0b:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 20:54:40 2026 by rpki-client