Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/7f2586fe-0698-3218-b413-8495abdd981a.roa
File:                     7f2586fe-0698-3218-b413-8495abdd981a.roa (raw, json)
Hash identifier:          KH1gXzh7oTDHI8t67+G/wK4IK/VomFHn2+ausZejFW8=
Subject key identifier:   4C:AB:35:EC:C0:6D:ED:DE:44:D2:E8:15:CF:6B:A5:D1:D8:16:C8:52
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584EA79811BA5335CE56B21F5240
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/7f2586fe-0698-3218-b413-8495abdd981a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36007
IP address blocks:        66.55.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:11:ba:53:35:ce:56:b2:1f:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69bbfa97-63a9-4a55-b444-e7ef85794f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:2e:cc:56:a9:13:a2:99:20:36:15:9c:b6:
                    9c:18:60:5e:64:55:1d:93:2c:6d:f7:77:3d:e3:9b:
                    13:a5:66:82:c2:d3:75:a0:4c:60:7e:75:77:d6:d3:
                    cd:be:cc:58:17:0d:9d:59:32:e7:b0:0e:5a:40:02:
                    d0:11:e5:32:56:7d:33:23:33:8c:dd:21:45:e5:57:
                    b7:d9:7a:ea:78:ca:4e:dc:9e:c2:87:d3:46:b3:0f:
                    30:12:c1:f5:10:bb:64:85:d7:da:28:6f:1d:ad:74:
                    03:93:9e:a4:15:62:52:67:6e:ba:13:7e:d6:2b:57:
                    e1:91:0e:24:08:5b:ad:50:a8:7e:8a:71:39:5b:a5:
                    8f:f9:bc:a1:ee:16:2c:03:08:ce:14:ff:16:6d:f2:
                    36:43:4b:2a:e3:eb:ab:bb:2d:38:af:d2:83:1c:24:
                    c6:fc:50:a1:39:e6:91:64:aa:fe:b7:32:3d:34:57:
                    c3:2a:c8:e4:b1:e0:ce:ec:34:92:2a:ad:d4:3d:50:
                    53:44:15:ea:4e:b4:ec:af:1c:0f:24:e6:1d:06:18:
                    d9:a6:91:78:96:a4:b5:80:a7:d0:b6:23:8c:2f:b8:
                    59:8e:9f:42:b5:41:e9:d0:a7:f2:f7:11:67:95:c5:
                    9a:cc:f9:29:64:ff:ad:65:04:77:d6:ac:6c:f6:8e:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AB:35:EC:C0:6D:ED:DE:44:D2:E8:15:CF:6B:A5:D1:D8:16:C8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/7f2586fe-0698-3218-b413-8495abdd981a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:95:d1:01:74:4f:8c:30:0e:73:8b:37:45:31:a8:e1:25:32:
         dc:f5:d2:c3:40:f9:4e:55:0b:db:45:c6:67:dc:e1:1f:27:f5:
         23:14:8d:35:f1:84:79:6c:62:dd:d5:40:70:61:92:a0:25:b3:
         56:bc:1a:95:74:b7:cb:de:40:2d:55:c0:3d:56:bc:47:32:74:
         0c:ae:2e:4a:9f:a9:17:6b:33:4c:cd:98:e4:d8:80:de:0c:38:
         da:de:62:1c:63:73:02:58:96:e4:59:fc:f3:4e:92:ca:88:55:
         63:0d:af:ac:f4:f9:b9:e9:28:41:4e:97:11:3e:27:26:21:37:
         22:a9:41:6a:d6:81:a8:cc:e8:92:75:2e:ec:9f:f5:de:84:10:
         a8:ed:e7:9a:f5:e8:be:76:6b:65:84:5b:65:c2:a0:74:68:fd:
         47:2c:ad:40:f8:fb:d1:67:37:b6:b6:3e:e0:15:f2:ea:cf:3a:
         d7:70:0f:21:fc:7b:fb:1a:15:ed:57:47:00:4e:60:f2:d5:51:
         d9:21:21:c5:c4:4f:12:24:f8:4e:8f:85:85:18:d3:b9:45:9a:
         aa:24:01:d6:b6:d2:86:4c:10:7e:2c:23:af:9c:22:34:d7:4d:
         05:2b:84:dc:53:02:25:f7:83:59:aa:78:e2:35:ce:78:40:6d:
         5f:16:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:54:17 2026 by rpki-client