Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa
File:                     f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa (raw, json)
Hash identifier:          JByxT4I+BAha8ecpb+48hy47Lp4X+8Xh0RJE+ZGiInI=
Subject key identifier:   77:6B:81:C9:69:3E:9D:B8:E4:43:71:42:88:53:8E:6E:DB:42:04:89
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584D20AF52810AA64139A6A13680
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     394161
IP address blocks:        66.17.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:52:81:0a:a6:41:39:a6:a1:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=854378ca-8005-4b3c-ac7b-9ffa8f84317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:69:22:95:35:5a:b5:f3:d2:06:46:f7:c4:
                    3f:d7:ad:12:a3:b3:49:8b:e4:d9:7b:97:0b:47:01:
                    1a:eb:44:71:e3:23:48:01:d6:db:fa:44:27:aa:b3:
                    c2:48:d4:89:c7:9e:af:2d:94:40:dc:44:b5:bd:d4:
                    70:62:bc:dd:43:bf:06:ab:2a:63:fe:2d:96:c4:b5:
                    b6:de:96:9d:fd:91:a6:d9:5a:ff:bd:f8:2a:f0:1d:
                    a5:72:7a:48:f5:72:04:29:be:30:63:e7:11:9d:e5:
                    20:99:ca:e1:87:70:12:9f:74:82:60:94:90:9c:37:
                    60:ee:5e:b1:f2:40:00:05:8d:37:0f:f0:e0:b9:ae:
                    89:e4:94:b5:f2:d6:be:e2:fe:9c:fc:04:7c:1f:73:
                    ab:30:16:fe:88:fa:fa:38:8c:1d:04:87:4f:12:ca:
                    6f:1a:3b:1a:76:26:44:8f:bd:7e:36:e5:dd:7b:1d:
                    c7:b2:f4:d7:0c:16:1d:0e:03:e5:bb:79:44:21:91:
                    4d:bf:20:74:f9:29:76:9f:b0:18:36:26:81:2b:fb:
                    f8:47:c1:cc:6f:33:8e:30:58:b6:25:ff:15:ab:4c:
                    3f:64:bb:b9:44:83:b5:bb:6b:c0:b1:f1:d6:89:96:
                    14:6f:e9:6d:e1:24:85:ec:52:b1:b1:0b:ed:3a:a4:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:81:C9:69:3E:9D:B8:E4:43:71:42:88:53:8E:6E:DB:42:04:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/f559caa1-3a42-3c18-8d9e-23368bbdf22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.17.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:56:72:bd:b8:b4:3c:44:19:df:2a:51:e1:92:45:c5:08:18:
         98:d6:58:cf:8f:34:68:96:0a:8b:66:14:9e:07:12:b4:5d:2c:
         65:81:3a:4b:99:47:b3:7b:2a:de:45:01:4f:38:88:b2:9c:04:
         cd:9f:4c:5e:07:ef:e5:38:d0:26:3d:c4:6d:6b:70:14:71:37:
         4d:c0:b0:83:c0:12:4d:97:77:8a:9b:b1:84:80:f5:55:3f:ad:
         7a:7f:43:cd:a5:87:57:f6:86:90:8e:3d:e0:cd:03:89:da:cd:
         6e:49:02:f7:41:2c:e7:77:c7:f3:d2:d2:0a:ee:e2:6e:2f:be:
         55:46:27:12:86:ea:00:76:e2:4b:ed:bd:3c:5c:81:5d:e7:a9:
         a2:52:4c:98:58:52:c7:6a:fc:dd:a3:33:96:7b:42:19:43:32:
         55:74:96:bc:20:a9:74:15:cc:bc:17:9f:b0:23:91:0f:b4:3b:
         47:8d:de:69:d5:54:dd:17:a0:de:26:6e:15:5d:f5:af:07:8e:
         51:d4:02:6b:48:dd:1a:f2:5c:43:bd:57:91:a7:ef:ce:f1:81:
         59:b7:3a:71:ca:f8:65:bc:ca:7a:cd:f9:df:61:87:14:6b:aa:
         bc:b8:41:31:0f:99:57:1f:7e:25:e0:5f:64:c5:06:be:80:8e:
         a0:a5:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 16:19:40 2026 by rpki-client