Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa
File:                     d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa (raw, json)
Hash identifier:          tUwS7AZoscRaMnp/WMNoxjWGSsb+NcKDvHMz6agPUTc=
Subject key identifier:   76:82:75:18:E1:F6:E8:68:B6:6E:5C:63:30:C6:50:67:78:61:0B:BF
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D8EF58B5692DB40999EAFD260
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     30058
IP address blocks:        66.90.72.0/23 maxlen: 24
                          66.90.74.0/24 maxlen: 24
                          66.90.123.0/24 maxlen: 24
                          2001:49f0:d0fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:8b:56:92:db:40:99:9e:af:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1e219666-5220-4b73-a4f8-fedf0aa32605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:4a:fb:7b:77:1c:25:44:ba:8d:59:53:44:
                    ea:09:75:fa:a3:58:7b:3c:39:50:78:3b:2b:53:43:
                    f3:5a:13:03:d9:33:4d:1c:8f:c8:32:1c:0f:d2:9f:
                    21:fb:2c:86:31:ea:d3:dd:aa:81:0c:54:d2:ad:eb:
                    1f:71:85:e4:dc:83:68:07:07:91:2e:42:c9:f5:83:
                    54:bf:27:4e:e3:6a:f3:03:2c:51:68:d6:5b:da:4c:
                    50:e0:55:02:fc:39:17:3b:d5:8b:e1:68:12:f1:86:
                    de:b1:4f:fa:03:f4:f7:9f:d1:18:e5:62:eb:a0:ee:
                    af:24:ff:c2:da:be:4b:3d:1a:dd:f8:d8:3e:f9:f4:
                    3e:70:50:55:3a:1a:c6:91:d4:07:2f:58:6c:f8:be:
                    55:c9:de:5e:da:3f:c0:d0:c4:e0:97:48:bd:ec:8a:
                    f1:5e:bb:e7:00:bd:30:d2:2e:0b:50:55:22:69:c0:
                    c2:9d:b3:7c:be:b1:90:ef:2d:dd:16:4e:78:b5:cb:
                    ad:95:1f:eb:29:8a:32:d7:e9:74:60:e9:7c:3f:ce:
                    a4:af:75:a3:05:c8:37:66:30:d1:3b:f2:68:24:bf:
                    04:19:b9:9a:15:bc:e9:49:4d:49:09:a0:54:d4:ce:
                    af:69:66:9d:4d:aa:76:95:27:6f:84:f6:85:09:92:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:82:75:18:E1:F6:E8:68:B6:6E:5C:63:30:C6:50:67:78:61:0B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d36def7b-fb4b-33cb-bdb0-7195e2abab08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.72.0-66.90.74.255
                  66.90.123.0/24
                IPv6:
                  2001:49f0:d0fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:d2:01:5b:7d:f3:e9:ef:65:a8:4c:0d:92:db:00:c9:44:
         e2:57:98:2f:6d:af:ce:3a:2e:5d:2f:68:48:de:f1:70:2a:bd:
         d3:40:a7:bb:95:d8:d3:5e:94:a1:38:88:09:f0:bd:25:f3:1e:
         02:e6:88:59:f4:83:07:3f:b6:89:c4:64:a4:6f:43:a3:1c:74:
         b7:f0:59:42:22:ee:49:5e:9b:a1:35:fc:62:66:ce:30:8a:55:
         c0:72:59:2b:f0:64:49:96:f9:1d:97:68:9a:99:14:90:91:dc:
         9e:7f:63:85:a0:a4:3f:4a:d4:01:7c:40:1f:f6:27:99:af:5e:
         20:1b:01:78:09:26:3b:fc:43:cb:d9:bd:10:de:6a:ac:33:d9:
         9c:69:dd:a4:d8:7b:b3:42:da:ba:1c:96:50:cb:eb:04:e0:6c:
         49:17:0f:fa:f8:a3:c6:4d:60:1c:6e:78:33:f0:71:6b:9a:27:
         eb:2d:09:a2:ac:44:52:b8:f5:1c:8b:df:5c:5f:60:b6:a3:ae:
         0d:9a:4d:f7:09:6a:dd:1d:22:54:64:aa:6d:f5:27:a3:41:57:
         d2:c2:71:53:6b:51:ac:8e:43:90:24:03:3a:79:c6:fe:38:7b:
         f8:28:86:98:41:de:13:6a:19:75:13:73:ad:ed:33:50:43:c2:
         1a:6e:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:21:22 2026 by rpki-client