Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/343450ed-1527-3cd3-a6ef-128cf87c4b37.roa
File:                     343450ed-1527-3cd3-a6ef-128cf87c4b37.roa (raw, json)
Hash identifier:          IxMoh/XJpcbdGR8Z8hLEIAvvMc6CSrduhAQUWfri+dI=
Subject key identifier:   43:E7:B7:CF:EE:AB:63:F3:90:6E:90:29:1F:CE:6D:91:8B:96:24:AA
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584E50849168ED29D0EB39D95F80
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/343450ed-1527-3cd3-a6ef-128cf87c4b37.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     36321
IP address blocks:        66.187.0.0/23 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:91:68:ed:29:d0:eb:39:d9:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f6ac0748-04eb-4542-ba97-d64ec4addfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:43:08:cf:5f:98:31:a2:18:3b:b9:a6:ac:
                    63:30:ed:bb:42:6e:71:29:b5:b1:94:50:d5:f5:09:
                    fc:06:d9:f1:e5:e9:38:94:97:cd:66:3e:99:b4:8f:
                    25:ff:9a:c4:28:01:28:e7:18:bd:24:5c:72:b1:e8:
                    46:66:b7:62:ce:ce:d0:83:b1:5f:cf:3d:9f:9e:5a:
                    b6:96:09:a4:c4:a6:84:11:a0:12:47:e5:23:fe:d9:
                    34:5d:c2:7d:66:d4:fa:6b:4d:d7:ed:3d:0a:40:c5:
                    c5:65:ed:46:de:4b:17:42:6a:08:06:40:e7:87:51:
                    cd:97:b4:93:e5:4e:76:de:e4:9a:51:c2:04:a1:d5:
                    ec:2e:c3:44:ed:a2:39:5d:65:29:6b:ba:41:16:44:
                    fa:19:c4:31:58:e0:0d:45:0b:eb:b1:5e:38:43:87:
                    eb:1f:c4:69:1a:9a:98:1b:9a:23:55:53:09:c8:96:
                    6d:07:21:24:14:ea:47:3f:bb:13:26:df:fc:b2:a7:
                    14:d7:8c:a0:5f:80:d3:e2:c9:d6:56:aa:e4:04:d2:
                    8d:df:8a:c6:7f:28:a9:b6:d2:ec:63:93:bb:78:30:
                    73:5d:af:6b:94:6f:ab:28:00:33:77:75:43:36:92:
                    05:ea:99:b2:23:ca:bb:bf:9d:42:89:e8:f6:3e:f2:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:B7:CF:EE:AB:63:F3:90:6E:90:29:1F:CE:6D:91:8B:96:24:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/343450ed-1527-3cd3-a6ef-128cf87c4b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:96:d7:18:00:d1:bb:65:76:65:7c:d7:01:56:b3:35:b7:d4:
         9d:71:01:72:e4:da:df:d5:b6:95:b3:07:ac:30:ab:88:1f:e0:
         88:1c:51:c9:ea:db:f5:fd:81:c5:7a:e5:55:62:31:b0:3b:90:
         52:78:37:fd:b6:01:3e:98:68:00:c8:cd:48:3a:ee:d6:67:ce:
         af:ef:45:ba:42:f2:65:67:ca:0b:15:47:53:de:f3:64:e6:6d:
         ba:0a:64:94:40:8b:0f:fc:3c:a7:93:6a:a4:5d:f7:36:1d:c6:
         3a:63:53:53:94:ed:2a:6d:78:66:79:4b:0e:35:62:52:f3:a9:
         91:a9:fb:15:0e:06:ce:f8:bf:5e:0f:ab:c4:4e:a3:23:b4:d9:
         ad:13:da:87:d6:0f:ab:e5:a6:3f:da:bf:02:37:b9:61:e6:7e:
         3c:5c:36:96:ad:87:02:99:38:b9:b5:bf:96:bc:2a:1d:15:6a:
         c5:b6:a4:15:20:77:a5:6e:b9:a5:0f:63:5d:b3:8a:49:b2:07:
         49:5c:99:42:c5:f8:13:03:53:76:a9:7d:af:0f:70:e7:04:d9:
         74:86:b1:f7:52:33:e7:c4:ff:a0:76:cf:a1:c0:72:08:53:73:
         de:65:be:38:d9:47:64:bf:46:8d:ce:bf:50:79:30:6f:3a:50:
         2b:be:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:15:47 2026 by rpki-client