Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa
File:                     4950d9b3-8566-33f1-8c08-18c21931d55c.roa (raw, json)
Hash identifier:          DR0KQo0X2ROkS73FmW18QghqObxPsREtMYmoTJcTjvY=
Subject key identifier:   9A:62:22:EB:F3:88:65:EC:A9:BA:7F:94:99:3A:72:3C:FE:B7:59:06
Certificate issuer:       /CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
Certificate serial:       010D0C9F4328584E43F4756BC46B366A7AD56F80
Authority key identifier: B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa
Signing time:             Tue 23 Jun 2026 09:00:12 +0000
ROA not before:           Tue 23 Jun 2026 09:00:12 +0000
ROA not after:            Mon 21 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        66.242.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:f4:75:6b:c4:6b:36:6a:7a:d5:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
        Validity
            Not Before: Jun 23 09:00:12 2026 GMT
            Not After : Sep 21 09:00:12 2026 GMT
        Subject: CN=47a2501a-9387-448b-874d-f748eecc62d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:26:05:5f:49:cb:08:b2:6e:d2:d8:d5:84:
                    03:d8:51:bf:a7:23:c9:ec:d5:3d:46:8a:58:ee:5b:
                    bb:a9:43:c9:2e:8e:6c:90:78:a5:32:1c:aa:8f:d4:
                    61:47:52:5c:dd:c5:e8:a9:ca:bc:ef:ab:74:19:3a:
                    43:c3:8c:cb:6d:c8:18:23:ae:85:32:79:cd:4d:2f:
                    fd:86:4b:0f:c6:91:3d:7a:f9:e3:f1:91:6d:2e:b9:
                    cf:b4:fe:07:4f:fe:03:45:e5:d7:6b:b8:f5:49:c6:
                    8e:47:51:9e:2b:66:df:f6:c5:a9:94:6b:5d:1b:f3:
                    60:21:e1:af:e8:c0:55:c6:89:f2:26:7d:4f:bb:b5:
                    4e:d3:75:0c:84:1e:43:24:bd:32:83:0a:23:1c:37:
                    e1:f5:32:d5:2b:ff:63:79:87:13:99:50:d1:9c:31:
                    ee:3e:66:79:d5:e5:01:63:11:08:04:ec:23:19:af:
                    93:c6:a1:88:0b:8b:14:ff:92:64:d1:ed:55:e5:fd:
                    4f:09:03:14:29:ef:fd:30:e1:31:2a:05:06:6d:22:
                    08:f9:3a:57:b5:7d:8b:bd:bc:3a:8b:47:3f:db:04:
                    e7:28:2f:08:fb:a8:26:11:ca:11:87:16:e3:6a:ae:
                    2d:b5:a7:82:93:d8:e6:0c:26:c1:6e:66:9e:9a:cd:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:62:22:EB:F3:88:65:EC:A9:BA:7F:94:99:3A:72:3C:FE:B7:59:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:f6:fb:0e:ff:da:a6:2f:c2:cb:d0:27:1a:27:b7:f6:36:
         2b:f7:d5:e5:86:2b:69:15:8a:cd:1c:c6:5b:1b:15:6a:79:f4:
         22:2a:87:73:de:7e:40:56:13:ad:60:c0:59:6f:4f:62:3e:a8:
         6d:1b:f4:69:48:58:be:3b:a8:7c:ac:19:fb:ac:9b:55:3a:ba:
         b8:f6:51:2a:a8:3c:d0:39:e3:01:c3:03:26:41:4f:2e:61:68:
         8f:91:5a:4f:ec:ae:ee:e7:f5:6e:d3:a9:f4:a7:92:1c:20:f3:
         87:f0:8f:38:fe:97:b3:00:bd:25:6d:1d:00:0a:a9:a0:64:60:
         5a:8d:37:de:aa:c5:fc:a9:2b:6e:7d:92:2c:ea:19:3c:3a:3f:
         6d:39:b8:56:f1:ec:44:34:a8:7f:38:f7:7a:ca:ea:f1:10:48:
         18:40:5d:cc:18:71:b5:bf:09:d0:52:db:90:08:30:1a:e3:10:
         7f:7d:3d:28:13:95:fe:ba:04:c9:2e:5f:4e:39:00:0c:06:c2:
         aa:21:a3:48:d7:44:71:ca:42:d1:0e:0a:6e:20:d6:77:b4:94:
         db:04:b4:c5:7e:27:db:67:7a:ce:12:5b:97:dc:17:69:9e:0f:
         49:e1:9f:32:ac:4a:84:22:10:f4:8c:c9:cb:9d:d6:b3:e1:b4:
         8c:93:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:52 2026 by rpki-client