Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa
File:                     cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa (raw, json)
Hash identifier:          cDS3+VvSni4gNFe9g8udzIjflZUb8eq0zUmD/hMaaEI=
Subject key identifier:   AA:DA:A8:46:D0:FF:75:03:76:1B:65:09:46:37:13:44:BF:BB:82:96
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584E376484428DE46854243AE520
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        66.114.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:84:42:8d:e4:68:54:24:3a:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=683fd37b-480f-4715-9d11-a34bedbae14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:44:f8:03:6b:1e:67:8a:dc:4e:91:14:a2:
                    11:bc:c3:4d:63:74:cb:ce:7d:fe:de:8e:fa:12:9b:
                    ed:17:1f:19:de:5f:40:79:b7:b9:a1:01:1f:e3:34:
                    a1:ed:e5:b5:f7:f7:67:ad:19:73:0e:fc:9e:1f:b3:
                    bb:e2:48:8c:87:52:d2:72:d6:d3:43:92:5e:c2:3a:
                    e1:70:8c:b7:39:ad:50:d6:41:44:62:f8:9f:0d:23:
                    d6:45:f9:2c:8e:ff:b3:43:76:30:42:44:4a:09:41:
                    bc:b1:a7:fe:83:f2:d0:85:ff:60:75:f4:e8:92:93:
                    7c:38:2a:62:c0:aa:23:5f:1d:20:50:84:6a:1f:88:
                    1b:fe:92:8c:57:c2:d5:9b:cb:60:40:de:43:c3:d6:
                    3e:70:0e:d5:77:c2:02:e8:b2:e7:de:0f:08:7d:c9:
                    87:f4:a4:08:4a:b9:74:9f:1d:66:cd:1a:05:f6:85:
                    af:5e:65:f5:91:73:96:77:2d:00:7e:e7:24:5d:27:
                    a3:ed:87:2d:7e:b5:d5:7e:ea:88:cf:7c:7d:07:3e:
                    53:0d:bf:63:2a:47:1a:f9:28:39:85:98:e7:e1:db:
                    4a:2a:1f:ce:91:76:a1:6f:f9:1a:0f:85:f3:a7:de:
                    b3:c7:bf:7d:15:2a:ec:3d:c8:ee:86:3c:fb:70:40:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DA:A8:46:D0:FF:75:03:76:1B:65:09:46:37:13:44:BF:BB:82:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/cba6c04d-ad5f-3290-aca2-2e3d37fdd105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:9c:b6:6f:dc:fc:a3:25:5a:0a:98:05:20:d7:b0:1f:0c:
         b1:c9:c7:7e:d0:bb:aa:bd:70:27:08:e9:8d:9d:7e:a8:bc:59:
         1b:48:ff:10:95:1a:66:82:e3:5c:bd:a2:c3:87:ac:b0:72:08:
         8b:63:88:61:68:40:37:89:ec:80:55:89:ee:e7:94:25:ff:c7:
         3c:ce:21:8b:49:da:a1:7c:eb:18:60:78:f3:5f:d8:cc:08:d7:
         0b:df:2b:b3:a3:18:6a:b9:ba:f2:95:84:18:fe:60:c3:7b:2e:
         fe:de:e0:c6:22:a0:07:dd:0f:23:fa:5a:57:18:d7:92:28:02:
         d1:7d:42:20:06:f6:e3:64:c2:01:4c:2a:44:b6:c0:91:0c:74:
         a4:80:0e:b0:48:21:5c:76:b3:82:79:dd:2b:92:10:1c:1c:af:
         bc:cf:30:a5:ac:d6:3e:d3:a7:04:a0:40:85:7f:8f:78:fb:9e:
         f8:55:24:02:79:4d:a4:9e:c0:97:c6:2d:d5:c6:98:01:94:d9:
         4b:45:06:1a:b6:04:fb:fc:f8:98:e9:e5:2a:1d:51:0f:ad:ab:
         24:43:ec:31:ef:54:ff:b9:d9:5e:df:ef:26:f9:6e:c4:86:72:
         16:ba:86:69:fd:e2:de:15:ac:9e:66:8e:7d:02:cf:bf:63:9a:
         2e:f4:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:19 2026 by rpki-client