Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/4949026c-d1db-3ee0-ad33-ed991743406d.roa
File:                     4949026c-d1db-3ee0-ad33-ed991743406d.roa (raw, json)
Hash identifier:          CIT4cSNi6/iLswBHaosyghdwVPN0AVSQ6qSGpQDrwkk=
Subject key identifier:   BD:D0:3A:B3:0E:AE:53:36:E8:CF:F3:4D:CC:37:13:30:EE:08:56:A7
Certificate issuer:       /CN=64cf176b-c737-492c-95a5-54695fc5bc2d
Certificate serial:       010D0C9F4328584D8EF5837D0BD6FEEAF5825800
Authority key identifier: 33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/4949026c-d1db-3ee0-ad33-ed991743406d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     32181
IP address blocks:        66.55.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:83:7d:0b:d6:fe:ea:f5:82:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cf176b-c737-492c-95a5-54695fc5bc2d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=7fcabb92-6dae-4c02-9d1c-4a5bceec61a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dd:db:24:6a:80:01:f5:16:ae:05:53:1c:d0:
                    75:aa:03:e4:9c:25:f8:5f:e9:8b:2c:a0:ff:fe:b7:
                    6a:aa:3e:13:d6:72:a3:00:ad:ca:45:c1:2d:78:9d:
                    f6:73:9a:aa:0f:4c:60:ce:8c:25:97:f6:db:60:06:
                    1c:cf:5b:be:d1:5e:4e:07:73:41:33:91:77:c9:8f:
                    8f:31:c1:76:a3:a0:2c:97:45:bd:eb:79:70:c2:8e:
                    36:b9:c2:44:29:d7:e2:62:bb:51:79:00:62:f7:2a:
                    d3:4c:20:f8:50:8b:9c:e6:70:48:8a:9f:e4:c3:01:
                    25:4b:52:b5:22:4e:67:72:8d:cd:d0:da:20:a1:07:
                    69:92:cd:43:ed:62:e9:1a:f7:80:13:d5:dd:51:58:
                    cd:d9:76:fe:98:ec:4e:c7:65:9d:56:a9:43:de:55:
                    04:84:19:e3:0e:2a:3e:38:5d:6d:41:71:df:9e:80:
                    40:61:02:e4:c5:5b:41:fc:8a:9a:d5:b9:1c:ba:8d:
                    67:1a:fc:7e:c5:36:24:a5:18:b9:d4:12:38:7e:a7:
                    6a:71:42:7e:79:bf:67:b2:ab:ed:d3:b3:19:23:c3:
                    b2:7c:62:1f:b8:ae:15:7a:d5:3d:24:e5:34:22:40:
                    20:9b:90:de:29:7b:9d:f4:d2:73:2f:38:29:dd:fd:
                    46:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:3A:B3:0E:AE:53:36:E8:CF:F3:4D:CC:37:13:30:EE:08:56:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/4949026c-d1db-3ee0-ad33-ed991743406d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl

            X509v3 Authority Key Identifier:
                keyid:33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2a:f9:97:4d:0c:e7:56:e2:bd:b6:ec:da:60:83:58:84:fb:
         76:ca:e2:c9:e3:34:d2:73:71:34:9a:89:64:5a:6d:d4:61:6b:
         2c:d0:97:3c:33:66:ca:50:e3:5b:01:ca:58:7b:3e:d9:aa:41:
         0d:8a:ab:ce:0f:33:a2:f3:d0:ab:c9:10:14:4f:dd:e8:91:23:
         ce:53:df:3b:3c:34:35:4a:65:33:b8:74:62:d9:f1:e4:1b:d6:
         9b:87:2c:d1:fa:0a:8a:18:6d:9f:45:a3:a5:09:fe:38:60:2d:
         94:cc:f2:b6:1c:97:71:63:76:70:72:5a:8e:ae:f0:05:84:41:
         c7:74:8f:58:31:5e:a2:de:8b:15:62:20:28:15:ff:57:5f:62:
         e0:01:92:c3:d0:b8:ba:70:cd:18:44:ab:ba:74:ef:06:e6:14:
         c9:0b:e0:42:d2:bf:6c:a6:b8:e9:43:63:6e:46:5d:0b:d2:58:
         58:c8:29:71:ef:04:2d:a3:e8:24:4d:9c:d3:82:04:e7:00:00:
         b3:13:fc:b1:d9:69:6b:bf:57:ec:e4:cb:23:c7:89:0a:5d:96:
         76:19:6d:4a:34:7e:ba:42:43:74:50:25:0a:1e:2a:ca:07:57:
         50:4a:eb:e5:0c:90:e5:dd:11:1c:2d:66:d9:4b:47:24:51:f5:
         8d:e4:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:16:10 2026 by rpki-client