Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a20827d-f061-3f14-ba24-a4c39255cf44.roa
File:                     9a20827d-f061-3f14-ba24-a4c39255cf44.roa (raw, json)
Hash identifier:          gDtgE6/Bvh/ttWWAS5uvPmt2otlrHsSj1TGu+awsPaw=
Subject key identifier:   49:C3:20:7D:84:67:FD:2C:B6:2E:C2:5B:56:BD:7C:87:DA:3E:54:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86235E86EB17E806A68500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a20827d-f061-3f14-ba24-a4c39255cf44.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     22258
IP address blocks:        75.66.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:23:5e:86:eb:17:e8:06:a6:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=0bedafe3-6e4b-4d95-a40b-4ed194b52681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e9:20:8e:28:a4:ca:34:e1:bc:59:8f:34:de:
                    47:93:cd:52:e9:d3:da:6c:06:1a:7d:2b:7a:53:dd:
                    ec:4f:b5:3c:67:16:d7:4b:06:12:02:65:d3:f7:1e:
                    14:c3:c5:fa:f9:1f:36:6e:1a:71:df:00:88:d2:e2:
                    eb:a6:71:d5:ed:13:08:46:ba:d2:fa:ee:45:03:c2:
                    02:c2:f2:46:25:9c:5b:62:8d:20:68:ee:1a:52:e2:
                    0e:80:2b:0a:db:72:0e:cf:1f:31:36:71:f6:a1:b2:
                    f8:49:3c:77:f2:0c:7d:69:f7:7d:83:23:22:ad:28:
                    43:58:7a:de:70:90:cc:d0:07:8a:f2:59:b2:b7:36:
                    f0:7b:ab:f3:d2:88:ef:4c:7d:c1:54:67:dc:ff:73:
                    52:3a:7c:76:20:ab:7f:a4:0e:5e:93:45:7a:29:8f:
                    de:ed:f7:54:79:84:a8:6d:f1:e7:dd:aa:58:4f:e2:
                    92:c9:29:da:1b:e4:ab:2c:11:f9:42:a1:fe:a9:ee:
                    fd:3a:0f:e7:99:bd:cf:03:bf:c1:65:27:bb:6e:d6:
                    32:c2:47:f6:5b:53:bb:80:c1:42:fd:53:c3:bf:b2:
                    1b:ac:8a:b9:9b:a2:42:fb:dd:bb:c5:61:dd:cb:28:
                    47:32:eb:66:4c:e2:6c:a4:ed:a6:67:57:9b:6c:78:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C3:20:7D:84:67:FD:2C:B6:2E:C2:5B:56:BD:7C:87:DA:3E:54:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a20827d-f061-3f14-ba24-a4c39255cf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.66.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:d9:0c:aa:06:dd:db:1a:ed:8c:68:ae:97:cc:c2:79:97:4e:
         b4:fc:c8:1c:9a:20:da:05:1b:f1:a0:c8:ff:7e:49:18:5f:15:
         7a:b4:cb:b7:a8:41:21:7e:40:bb:35:b6:cf:be:a2:a9:f6:64:
         69:cb:69:43:c8:4c:a3:75:34:0e:af:07:8d:a5:a4:4e:8b:65:
         ca:19:3a:10:ed:eb:d7:95:7c:b3:55:2b:f1:4d:79:0c:ef:b8:
         11:6b:1c:91:68:ea:2a:f9:65:ba:f0:58:78:9b:a4:c9:26:50:
         ec:d7:02:36:b0:14:6b:c3:11:df:79:87:bf:a1:23:fb:ba:52:
         16:cd:95:57:49:af:e3:bc:1c:c3:8f:bf:60:50:83:f1:d3:f1:
         4d:c0:05:b5:43:ff:03:c4:29:55:a7:a9:a0:7d:92:2d:54:b6:
         cd:71:c4:e8:6e:9a:f7:37:53:db:17:7d:b9:fc:dc:05:32:80:
         16:6e:37:e2:1b:83:79:7a:cb:9b:3c:76:2c:25:93:12:41:85:
         b3:b2:c3:78:0c:85:ba:1c:b4:5e:df:a6:db:76:cb:95:c2:5b:
         ae:d6:8b:99:75:4c:95:3f:ff:69:34:3e:bb:77:a0:50:4c:48:
         54:b2:22:54:e3:a6:21:cc:d8:77:f9:24:70:7b:a9:c9:13:10:
         1a:67:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:22 2026 by rpki-client