Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/67c91dca-68fc-3935-b17a-b67161e0661f.roa
File:                     67c91dca-68fc-3935-b17a-b67161e0661f.roa (raw, json)
Hash identifier:          ff9soNUfdvvhCuXGgG1qz6NXfP9Zs43L1ctuAWHhVAA=
Subject key identifier:   E7:E1:B3:67:C1:24:CD:1C:EE:0A:05:C8:C3:03:23:8B:9F:7D:30:96
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584E376483FAFF8006057F459300
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/67c91dca-68fc-3935-b17a-b67161e0661f.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        66.114.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:83:fa:ff:80:06:05:7f:45:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=1ed48863-6670-47f1-92d1-f538c3aa184d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:2a:42:62:be:58:4b:2f:53:e9:84:94:71:
                    12:dd:5f:ab:bc:4d:c3:3a:77:32:87:d7:9f:b1:e1:
                    bc:66:25:02:70:94:b4:e1:d9:82:28:f1:32:03:7f:
                    d9:3b:e2:5e:a5:7f:10:62:2f:74:32:89:a2:ab:c5:
                    95:62:29:c0:f3:2d:2f:06:65:7e:3b:6a:7e:e8:26:
                    55:53:1c:fa:07:4b:1b:c5:36:56:cf:da:04:6d:d0:
                    15:67:6f:2e:03:ef:6e:b7:7a:53:fd:26:4b:eb:95:
                    57:ac:9a:93:61:ca:14:6e:88:b3:fa:41:db:d4:36:
                    88:4e:01:56:6d:85:01:ca:f8:53:43:90:ca:69:bd:
                    2e:14:bf:4e:6e:c4:ec:90:d3:d6:69:1e:a9:64:d5:
                    95:0c:85:10:fb:1b:33:b1:3a:bf:a9:99:f7:6e:48:
                    f4:8f:42:07:6c:17:1f:ed:9b:1a:cc:19:46:e6:d1:
                    bc:10:55:58:21:ef:23:9e:9d:46:5e:fa:aa:48:93:
                    b2:20:89:5a:77:a2:65:71:b9:d9:23:bc:36:50:71:
                    6a:92:34:67:4b:08:b3:c7:71:b4:37:6f:67:71:d9:
                    fb:ca:75:94:71:55:ff:78:7c:7a:e9:1e:fb:8a:8e:
                    6a:ef:7a:47:45:63:02:43:e0:77:00:a6:78:4e:e3:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E1:B3:67:C1:24:CD:1C:EE:0A:05:C8:C3:03:23:8B:9F:7D:30:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/67c91dca-68fc-3935-b17a-b67161e0661f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:38:98:ea:37:38:ac:e3:9b:eb:50:ce:3b:0e:be:3e:7f:
         df:03:3a:dc:e3:e3:d1:7d:48:0e:a4:9d:91:05:26:bf:c3:ae:
         bb:86:34:ad:2d:0f:fa:c9:dc:80:e2:08:57:76:33:f4:8d:ba:
         27:d2:ca:54:a9:b7:cb:da:64:fb:03:3d:bc:7d:9a:cd:80:0a:
         51:fc:e0:8a:6e:5c:ea:2f:27:b0:d9:cd:b5:11:fa:1c:ae:40:
         ad:b3:40:d7:3e:c9:01:78:0c:71:31:91:9d:e6:5f:9c:4b:36:
         2a:f3:a8:ff:40:e6:dd:60:1f:21:0d:a5:ae:85:54:df:b0:45:
         8d:68:90:6f:77:7c:51:50:e1:dc:45:55:0d:fe:f2:f2:2b:da:
         ae:87:95:27:39:aa:78:6b:5e:e9:9e:7c:5a:25:75:09:24:bf:
         4a:40:27:d6:f5:61:43:ab:3d:b7:4a:90:bd:1a:4d:c0:35:fd:
         89:fc:d7:d6:75:dc:8f:b3:57:d8:a0:3e:d9:ee:c2:18:13:71:
         54:75:d1:b7:81:4e:60:d3:1c:2f:e4:55:26:91:17:bf:29:07:
         b0:bf:a2:90:9e:74:d9:af:9f:50:97:37:32:ab:eb:fd:60:c5:
         01:75:c2:93:58:b0:98:fd:00:04:a0:f8:02:47:44:7e:73:b0:
         14:6e:79:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:13 2026 by rpki-client