Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/79d46e79-78f8-3740-8126-1fa19011d1df.roa
File:                     79d46e79-78f8-3740-8126-1fa19011d1df.roa (raw, json)
Hash identifier:          pDfDD9WnED0VOsZdQukOA6ivvW/Hu687L1a7PQI1nHM=
Subject key identifier:   76:A1:B4:D2:87:04:A2:AE:4D:E6:2B:01:5A:1F:84:58:06:8C:76:AF
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584CDC676AD02A1C54CECFCF5780
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/79d46e79-78f8-3740-8126-1fa19011d1df.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     42
IP address blocks:        66.96.112.0/20 maxlen: 24
                          66.102.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:6a:d0:2a:1c:54:ce:cf:cf:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=4d125e46-a77b-47ce-9670-7592e44483a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:29:03:9c:86:66:e8:b4:4d:7c:f0:d7:da:
                    19:10:0e:8b:02:f5:26:c2:a2:de:48:d0:d2:2c:c2:
                    93:dd:dc:49:af:9a:5e:22:ae:ab:fb:44:bd:7f:4b:
                    11:1d:43:5d:58:a0:2b:a1:6a:c6:bd:fc:c1:42:cc:
                    dc:69:00:7c:85:51:7f:29:ba:a1:fc:ed:d7:33:91:
                    74:f6:9d:54:61:0d:25:73:8b:b1:bd:71:d8:a0:f5:
                    78:52:9d:4e:1b:06:16:1e:49:b9:72:50:7b:0d:1f:
                    4a:b7:03:ec:aa:62:37:ba:3d:bd:33:99:bc:46:f1:
                    3f:ef:ff:eb:39:88:a3:70:d1:97:b9:4e:dd:90:df:
                    ad:23:3b:70:4e:53:7c:d5:ff:ed:ca:dd:84:50:9d:
                    31:6e:1d:4b:76:53:6f:e2:45:7d:d6:8c:25:d1:a5:
                    37:07:e2:90:5c:a4:0d:2f:14:93:29:7c:90:c8:78:
                    c1:c1:83:3a:1f:f1:16:75:d9:74:88:2c:9a:9f:49:
                    65:52:e9:e5:03:0c:45:1e:7e:9e:aa:f9:86:c2:fe:
                    cb:ed:bd:8e:18:0f:86:d4:fc:73:b7:ae:66:27:61:
                    8b:fb:94:e4:2f:46:b9:df:62:15:6a:79:d2:75:14:
                    7b:22:a7:5e:83:9f:51:a2:cc:f7:88:ab:15:48:0a:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A1:B4:D2:87:04:A2:AE:4D:E6:2B:01:5A:1F:84:58:06:8C:76:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/79d46e79-78f8-3740-8126-1fa19011d1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.112.0/20
                  66.102.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:78:77:c7:7e:09:b2:76:83:a6:2d:c4:98:3a:59:d1:93:
         fa:87:8d:85:18:6c:c0:8c:68:85:42:09:26:56:ef:cb:86:07:
         27:7b:af:9e:a3:69:9a:05:e8:5c:c0:6a:cc:92:b5:e7:0c:2a:
         b3:46:4f:33:49:da:57:5f:01:f8:96:73:b1:cc:8c:8e:46:d6:
         f8:af:38:20:ba:80:43:e2:ce:ff:fb:c1:d0:42:aa:7b:34:4b:
         be:b0:e5:27:ef:4b:86:38:6b:c5:11:bc:d1:60:08:99:28:b7:
         dc:51:79:0f:4f:4a:8e:70:de:94:c3:3e:07:48:09:53:cb:b4:
         bf:44:e8:63:bb:8d:91:7c:6b:d1:94:f8:85:28:60:c5:0a:59:
         de:ff:e0:99:17:c1:ea:07:c5:33:11:71:ed:b9:2e:f5:b6:dd:
         4a:c4:31:ce:de:e5:ad:89:88:22:fc:77:dc:70:5e:44:18:c2:
         4f:c7:14:ea:5c:a2:f1:86:1a:43:f2:cf:54:2e:26:ff:a9:18:
         9f:24:b6:e2:cc:c4:69:be:27:61:a0:1c:c0:db:30:6c:4c:c7:
         b4:2b:3a:12:e3:46:37:d9:93:d5:cd:23:d5:c9:8a:0b:43:10:
         95:f0:a1:cb:bc:f7:7f:6b:27:cb:ba:55:98:42:a8:8f:ed:d8:
         bc:ca:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:26 2026 by rpki-client