Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a41f09e-8d4f-3c17-aaf4-b355469bf65e.roa
File:                     6a41f09e-8d4f-3c17-aaf4-b355469bf65e.roa (raw, json)
Hash identifier:          Q7NovIgx8iiVUlxOI1Qu1UxAd3dQqNnr49onLt9GfcM=
Subject key identifier:   C4:FC:1B:6E:B5:4C:97:97:62:81:F5:4A:28:96:35:7D:A2:DF:38:D8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DE41B2FDA6EA22D6C8990A180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a41f09e-8d4f-3c17-aaf4-b355469bf65e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     401783
IP address blocks:        66.80.56.0/22 maxlen: 24
                          66.80.100.0/22 maxlen: 24
                          66.92.152.0/22 maxlen: 24
                          66.167.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:2f:da:6e:a2:2d:6c:89:90:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=22582aa3-ad70-4e7a-a171-33c58d29974b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:20:37:24:b6:13:db:3a:38:47:33:24:3b:
                    3c:e6:92:42:60:a6:e5:67:d9:41:b8:c4:a3:48:a1:
                    b3:52:2c:30:f3:0e:ff:d5:74:71:97:43:58:d7:6a:
                    c4:0c:09:29:c2:b1:d2:9f:c8:64:1a:fb:77:61:a4:
                    ce:36:d7:6c:c9:e9:07:bb:71:32:a4:0b:fa:8f:e0:
                    eb:7c:99:0d:fd:72:fd:bb:4e:4f:9c:83:ad:59:f9:
                    a1:d2:66:c2:2e:59:20:fd:90:c2:30:38:01:a5:65:
                    af:1e:93:f1:cc:4e:8a:a1:a5:f7:4d:dc:c8:51:ca:
                    43:e6:7e:3b:9b:e3:f9:c0:96:ee:19:47:54:d0:ea:
                    8b:16:1c:f6:30:6d:97:ee:56:be:14:2e:e4:19:a9:
                    94:5f:83:45:7d:28:21:13:2c:0f:25:74:4a:08:79:
                    ba:3f:11:1c:96:a2:b5:d9:20:0a:40:55:ad:9b:9c:
                    c1:ef:83:e2:b8:1e:cd:42:53:64:82:51:2e:7c:1e:
                    4a:ef:25:89:5b:64:f6:c3:19:8c:8a:ec:cc:59:a7:
                    38:a3:9d:41:db:a1:03:78:51:cc:bc:a3:cc:8a:ac:
                    7d:6a:06:7d:8d:d2:d6:f3:de:d0:cb:59:1e:06:2e:
                    65:f3:ab:9d:b6:23:97:ed:4e:86:82:59:e3:1d:ee:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FC:1B:6E:B5:4C:97:97:62:81:F5:4A:28:96:35:7D:A2:DF:38:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a41f09e-8d4f-3c17-aaf4-b355469bf65e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.80.56.0/22
                  66.80.100.0/22
                  66.92.152.0/22
                  66.167.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:cc:29:0c:5b:5a:53:e9:98:90:aa:0f:2e:63:3b:a6:6c:
         42:2f:a9:5d:e8:88:6a:84:aa:05:95:a4:ab:06:83:e4:6a:96:
         e5:a5:2f:42:fd:8b:f5:40:4c:c2:3a:51:4a:66:30:91:a3:64:
         7c:f6:d0:dd:de:b1:d0:e4:18:e4:72:32:c8:bc:db:99:60:4e:
         da:23:78:b9:b5:e5:64:76:2d:db:13:87:79:18:4c:f8:b7:76:
         d4:b7:a6:31:a1:29:04:88:72:70:76:ce:a6:1e:96:22:a6:e8:
         05:ca:2e:11:ba:cd:ba:5b:ac:cd:82:64:ef:a1:88:2b:56:b5:
         a7:c0:7f:83:36:8d:82:f1:27:db:45:96:a5:e3:78:f2:5e:7f:
         8b:ca:4f:ef:64:03:24:13:89:76:6c:62:89:f6:0e:e5:60:e2:
         4f:f0:ef:28:1e:73:aa:74:5d:a9:7c:8d:2b:4c:cb:da:0c:6b:
         98:2b:d4:bd:74:1e:4b:a3:d9:b2:2a:b1:01:e4:5e:c4:cd:38:
         0f:45:bc:3c:76:a4:db:0e:07:28:a0:d4:8f:ab:90:ef:aa:0f:
         29:39:b2:6c:d4:cc:73:ed:c5:6c:34:89:53:9e:86:16:17:27:
         6f:fb:5a:25:4a:59:a5:d4:1d:a1:2c:5c:6b:50:fd:f6:b4:20:
         7e:d1:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:17:05 2026 by rpki-client