Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa
File:                     c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa (raw, json)
Hash identifier:          TgnKR+7XZqpX/ZNvub0T+FXSLsjBtgc4Fpr0IX+UGKo=
Subject key identifier:   C4:DA:2E:EB:4D:AD:96:E5:27:DE:92:6E:75:23:02:EA:01:07:21:CE
Certificate issuer:       /CN=c3a36226-716b-451a-a34c-4a9038599291
Certificate serial:       010D0C9F4328584EAE819A407252CC17CFBF5D00
Authority key identifier: F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     400516
IP address blocks:        66.220.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:9a:40:72:52:cc:17:cf:bf:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a36226-716b-451a-a34c-4a9038599291
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=60b95bbb-458e-48b2-86c2-5917ea3081cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:ee:d1:43:f3:48:93:3f:c0:cd:a8:9e:db:
                    06:89:f3:ed:86:af:23:71:8e:a4:3e:79:29:f0:99:
                    be:2c:77:6a:53:b9:26:11:1d:d3:c0:d6:53:22:19:
                    a7:c1:92:87:bb:65:6b:4c:42:a2:6a:c7:ea:e4:fe:
                    3f:f2:05:71:7e:44:b7:0e:54:b1:37:48:39:c9:32:
                    db:43:57:ce:ee:0e:32:a6:c5:89:cb:6d:55:cd:df:
                    f0:0e:db:d1:4d:0b:9c:4b:65:c3:25:12:7d:27:6c:
                    44:d8:55:09:b2:a1:fe:39:45:b7:fc:b0:bb:af:39:
                    0d:ab:39:a4:d0:23:a7:b2:f8:3d:f9:0a:8d:68:96:
                    cd:02:09:4a:b4:bc:59:8f:da:6c:17:01:0b:4b:50:
                    ec:d1:60:66:d2:17:e9:38:26:0c:78:7a:de:56:3f:
                    9e:84:73:07:07:c2:0c:cb:63:2a:f8:1d:ca:87:dd:
                    b4:57:38:02:86:25:26:73:8c:a3:e4:7d:8c:b9:f8:
                    84:a1:51:43:34:01:30:55:b9:83:dd:ce:c5:36:84:
                    6d:17:9f:45:c1:35:91:38:f3:4e:b4:81:fb:69:8c:
                    a2:e5:d0:1c:3a:ab:b7:3b:e2:8a:e1:0a:69:ea:5f:
                    03:ef:0a:9c:fd:3a:7b:35:9b:66:32:c2:74:ac:2e:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DA:2E:EB:4D:AD:96:E5:27:DE:92:6E:75:23:02:EA:01:07:21:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c73f39ea-7ec1-3285-b8bd-b03e76b825cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291/c3a36226-716b-451a-a34c-4a9038599291.crl

            X509v3 Authority Key Identifier:
                keyid:F7:92:28:39:E5:D4:95:39:97:0C:B8:B2:14:90:97:65:29:F1:92:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3a36226-716b-451a-a34c-4a9038599291.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:47:63:96:47:27:68:ac:db:50:5e:db:a7:89:70:db:28:
         de:d0:e9:89:5f:7d:35:c2:e8:92:4e:d3:3b:b7:6f:74:fe:84:
         26:ac:aa:3b:09:b9:5f:1b:24:67:ef:f4:a6:5d:2a:c5:4e:10:
         94:ed:d3:64:dd:cc:2b:f6:36:64:09:dd:eb:15:a3:ec:43:cd:
         76:b1:db:1e:20:03:dd:a0:58:84:66:93:9b:40:5c:71:e3:ea:
         13:f0:f7:91:90:86:f0:1a:88:f9:01:41:c7:14:a1:9e:c1:a3:
         51:78:96:b1:31:41:80:49:5c:3f:4d:33:5b:54:fe:2a:d4:e5:
         2a:6c:ed:a4:51:06:d5:57:29:b4:0a:ba:df:51:77:00:b9:09:
         38:c3:2f:b6:11:c0:16:b3:53:bd:81:fc:73:03:f9:86:94:be:
         1e:9b:16:0c:93:49:db:96:d0:0f:30:7b:c1:26:6f:f8:67:1c:
         4f:37:67:81:c6:df:b2:5d:5d:07:19:a2:58:63:2b:ac:9d:37:
         c8:41:8b:13:7a:cc:19:c2:08:e9:4a:bd:7f:d1:a0:06:9a:f5:
         a0:ab:43:b5:70:f1:85:cf:33:10:c8:64:13:3d:b6:44:47:30:
         bc:bc:a7:4e:a2:44:3c:e5:0d:24:a9:48:ad:4e:c9:db:9c:b5:
         fa:a5:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:13:48 2026 by rpki-client