Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a6e8f306-f866-3ed0-99b6-fcf5b8e0d844.roa
File:                     a6e8f306-f866-3ed0-99b6-fcf5b8e0d844.roa (raw, json)
Hash identifier:          S8ZsjapVwU7VLhbpOubqzuODMzU70YRdFSglOAWTuVU=
Subject key identifier:   65:E3:19:A5:39:A0:20:45:B7:93:30:DA:25:B8:0C:3D:25:97:9F:B3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37287A7BA12F8CDBE972AD0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a6e8f306-f866-3ed0-99b6-fcf5b8e0d844.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        66.190.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:87:a7:ba:12:f8:cd:be:97:2a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=10cb54b0-118c-4b49-8a4e-be6976d39a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:0d:5b:a0:7b:2d:5f:64:78:fb:84:86:a2:
                    43:12:99:17:8a:af:6b:ab:68:eb:b3:54:65:8d:99:
                    7f:8d:9a:71:58:2e:8f:90:cf:8e:37:a8:3f:ee:2b:
                    30:d0:0a:82:77:40:37:96:a2:6d:b3:6d:cd:66:c0:
                    b5:52:e0:6e:7a:05:42:30:b2:e9:95:9b:65:3d:3d:
                    d4:7e:02:50:1f:96:4f:42:b2:86:3d:80:7d:fb:01:
                    5c:01:bc:10:0e:da:41:53:0d:02:a6:37:b4:b8:f9:
                    c2:4e:4a:dd:80:10:24:a3:cf:2c:67:5f:e9:ae:80:
                    2f:05:82:be:ba:bd:70:0d:a2:08:e4:84:2e:76:02:
                    19:3d:59:57:09:2f:69:a1:36:a2:5b:93:09:e8:7f:
                    41:84:21:e0:59:7a:e0:a7:81:f6:48:94:50:e4:fe:
                    2c:1e:ec:d6:ec:77:4d:0d:ec:ec:42:22:37:a3:97:
                    cc:1d:fe:b3:ae:96:ed:1f:5e:75:77:13:cc:e9:80:
                    38:ec:0b:c1:76:e1:9b:66:17:81:72:07:fe:3d:6b:
                    f7:48:46:90:8e:77:7c:ff:a6:2f:d3:ed:1a:25:dc:
                    38:84:0a:da:4e:c7:22:d1:86:a9:b1:b5:dd:00:e4:
                    55:db:38:50:e3:bc:f3:92:8c:92:25:28:a4:e3:4d:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E3:19:A5:39:A0:20:45:B7:93:30:DA:25:B8:0C:3D:25:97:9F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a6e8f306-f866-3ed0-99b6-fcf5b8e0d844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:91:f8:07:1e:d3:30:81:b9:3a:d3:f3:03:ce:cc:2a:1e:
         51:98:ed:0f:fe:3e:6a:30:36:d6:df:0b:c2:4a:45:d6:2a:3f:
         57:69:b7:e7:25:db:4e:6e:fd:b3:dd:d4:5f:6a:f8:26:07:41:
         94:ae:6b:be:0e:1c:b3:45:1b:8f:86:4f:3d:e8:b3:ba:48:4d:
         6a:fe:65:f3:95:39:c1:16:d8:9f:ca:5e:bf:73:8d:8d:3e:a0:
         b2:3c:17:52:c8:17:ef:e0:f6:67:3e:7e:aa:46:19:58:14:03:
         cc:bf:48:2a:d7:b6:e1:ae:f6:30:25:44:e5:71:63:a1:1a:a9:
         9f:a5:e2:7d:ec:d8:8f:5d:27:62:a4:30:bc:98:dc:c9:e1:04:
         3c:0f:74:22:31:49:04:dd:1f:45:f6:23:6d:df:e5:1c:3a:4a:
         7e:ef:9d:8a:9f:b5:1a:2e:b9:2b:d1:ae:58:48:c9:8a:39:7f:
         98:64:bf:40:94:b0:cb:99:84:ef:49:c2:02:90:2c:99:f1:17:
         32:ee:a9:3c:8d:82:11:4a:e7:7a:46:31:5d:a7:f5:cf:b3:9a:
         8d:17:4f:65:25:ce:df:36:5a:9a:34:c5:c7:9b:69:8f:c6:01:
         5e:88:cd:a3:0a:2b:06:07:30:4a:c7:37:d0:2b:72:8b:e0:c3:
         2f:19:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:18 2026 by rpki-client