Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa
File:                     db4643c8-62dc-3411-a667-146682d9742b.roa (raw, json)
Hash identifier:          cemqhshHHBmjpXaWLm9tQen/eU/ylb7RJEjVYznIjKU=
Subject key identifier:   E6:CD:D2:8D:51:7F:2E:00:5E:25:55:F0:D8:E8:60:21:76:9B:CB:C3
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F4328584ED431E442722488478ABCA3C0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     62537
IP address blocks:        66.85.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e4:42:72:24:88:47:8a:bc:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=73e1252e-8ab3-4d62-9812-9a3106027f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:a2:23:cd:1a:1f:a4:80:2f:fe:a6:a7:91:
                    6c:a0:dc:b6:bb:f6:1b:a9:79:d6:7b:c2:61:07:24:
                    cf:7b:98:6c:65:f6:a5:37:58:6e:5b:db:2b:cf:f2:
                    02:e0:64:14:b6:37:84:f0:a2:1a:f1:29:c4:e4:85:
                    c4:2c:b4:1b:65:1a:c9:ec:06:e1:3f:64:fb:67:78:
                    39:fb:79:47:7b:57:16:c6:f6:8f:13:b0:01:ef:f5:
                    3b:ae:c9:f8:2e:0a:27:f8:f3:07:f5:42:cd:ff:3a:
                    35:c4:30:55:63:16:f5:e0:a2:34:45:21:a7:57:fd:
                    fe:e6:6c:92:9f:69:8a:09:b1:df:45:a7:78:d3:f2:
                    8e:ee:11:cb:e0:91:d2:6c:bc:bd:1e:93:50:7f:b2:
                    27:38:5c:31:cb:2e:ef:f6:96:7b:8c:6f:85:08:43:
                    be:6e:2d:c9:f6:83:75:fb:a6:25:c8:9e:62:f5:db:
                    54:7f:09:28:c1:f5:3a:7d:62:33:70:25:70:1a:73:
                    2f:62:4c:f8:79:27:ee:78:4d:57:b2:3c:86:66:40:
                    da:11:7c:da:67:5a:4f:88:90:00:22:32:a3:53:a0:
                    b5:24:04:3c:86:d5:25:c0:af:6f:55:c4:52:5d:3d:
                    2c:20:af:50:f1:b0:2e:4f:43:35:0e:a4:22:4c:a2:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:D2:8D:51:7F:2E:00:5E:25:55:F0:D8:E8:60:21:76:9B:CB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/db4643c8-62dc-3411-a667-146682d9742b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:2f:40:16:1e:30:8f:b2:93:41:f4:dc:0f:48:ee:a6:e7:
         5d:5c:8d:c5:04:9e:8b:0e:fb:60:9b:4e:b9:ca:ad:7f:41:7b:
         3b:51:84:6c:ba:24:39:86:fe:38:67:3c:c9:26:b1:05:29:6a:
         2f:1b:f3:93:70:d3:3d:97:21:79:68:04:3c:6d:92:7e:4d:26:
         d0:3f:86:3a:2b:94:7f:b5:9b:0f:35:22:3c:77:1e:80:c6:3a:
         29:dc:7e:41:12:14:b4:39:65:d1:87:c6:6e:b0:bc:a3:ae:77:
         7d:1b:00:42:c4:0e:49:db:3b:b7:a6:d3:ee:c7:97:59:f8:82:
         f5:8f:43:6f:ba:02:de:b8:36:fa:e9:ec:62:41:9f:ac:2f:c9:
         ca:33:a4:b8:2c:fa:db:35:d6:e9:d5:23:87:33:5c:83:15:79:
         e0:e1:b6:49:6c:f5:c1:e5:71:73:84:bc:45:0c:4e:b3:a9:98:
         fe:8c:c5:ea:f2:f3:a7:a6:eb:45:88:b7:70:81:12:bd:eb:b7:
         b5:d3:26:85:c6:48:7b:22:5e:19:dd:3d:ce:1f:a3:b8:70:52:
         44:2e:27:44:a7:4c:25:f8:32:c7:3e:95:2a:25:a6:ce:9d:01:
         23:a3:9f:52:db:a2:9e:ce:24:c9:86:a0:90:76:12:cd:d3:50:
         80:a7:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:18:21 2026 by rpki-client