Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa
File:                     5717c9fc-bf14-3da4-9371-4fc98a870156.roa (raw, json)
Hash identifier:          sU5khWO6qz/r4LOmjp1qFnAYLr95evXY5bk1PAhk3ts=
Subject key identifier:   87:1C:C8:00:44:F8:75:06:59:E6:00:C7:28:BF:EA:F0:93:DF:FE:61
Certificate issuer:       /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial:       010D0C9F4328584EA78738D20162472D52A14B20
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     139648
IP address blocks:        66.118.0.0/22 maxlen: 22
                          66.118.0.0/24 maxlen: 24
                          66.118.1.0/24 maxlen: 24
                          66.118.2.0/24 maxlen: 24
                          66.118.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:38:d2:01:62:47:2d:52:a1:4b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fe36236c-e39c-4df8-a220-8ac33e1622b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:13:33:de:70:75:ae:20:47:2a:94:57:54:
                    5e:24:95:eb:3d:19:cb:f6:43:f5:ca:e7:b1:f4:99:
                    ce:e2:9b:da:cb:5c:ec:71:cc:a9:4a:89:02:ed:fb:
                    a2:c9:c3:b6:9f:55:4c:d4:35:5a:f8:37:36:6e:08:
                    9c:84:6f:69:d3:ed:70:a1:a8:21:20:a7:a1:05:8d:
                    93:f5:f4:04:33:97:c1:2c:a1:85:10:9a:77:ae:c1:
                    f0:58:a7:03:5c:10:d0:44:cd:7f:44:46:f9:41:8f:
                    38:2c:43:a7:ef:53:70:b5:43:98:6a:fd:08:02:ef:
                    02:20:81:62:23:cc:15:97:9a:ab:53:6d:26:c7:d5:
                    f7:da:7d:d7:63:fd:4f:d1:62:2d:77:ac:0e:eb:51:
                    86:3c:01:c8:b5:9e:c2:93:c4:6a:e7:39:7b:41:c5:
                    a0:60:89:b0:d3:16:4f:43:94:80:2f:b1:a7:cd:83:
                    0b:92:d3:d8:09:cf:bb:02:0c:40:04:06:52:89:d9:
                    a1:80:12:13:62:e9:e0:20:23:dc:e8:ae:0c:73:c4:
                    29:8c:60:b3:35:1b:f8:22:54:34:1c:f6:ee:20:bd:
                    14:3b:d5:e0:53:c4:7d:42:62:e0:ef:29:4b:97:3e:
                    c1:86:9c:25:96:42:05:bd:19:43:dd:20:64:86:b5:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1C:C8:00:44:F8:75:06:59:E6:00:C7:28:BF:EA:F0:93:DF:FE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/5717c9fc-bf14-3da4-9371-4fc98a870156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:d9:80:20:7c:e6:a3:91:f7:a0:c5:4a:7f:5c:48:02:25:
         04:8d:97:33:2a:b7:6b:c7:b7:a6:1c:2a:a6:a9:82:dd:1e:28:
         3f:b5:40:bb:37:e9:0a:75:44:f3:44:3c:9a:cd:b4:c3:24:a3:
         fa:cb:d9:ff:db:7f:37:a7:91:ca:45:e3:99:2c:b9:1b:09:f9:
         ab:f8:b7:92:79:75:e4:cf:cc:a0:ac:52:43:64:45:af:93:1a:
         79:6e:9a:69:60:de:b7:54:fd:8d:98:7e:64:21:88:91:21:10:
         20:ea:6e:17:50:7a:e8:72:20:d8:27:a8:2f:f5:7f:db:dd:63:
         9f:00:15:dd:aa:3b:66:29:81:c2:8c:5e:ce:e1:87:a3:a2:cf:
         68:f0:3d:af:69:4d:59:9e:cd:27:a7:92:f0:b6:9a:8e:76:33:
         5a:be:10:d0:ab:46:85:f9:d6:79:4c:65:83:b7:b7:6b:8a:96:
         98:5c:67:2a:71:5d:cc:9a:fa:1f:5f:b4:f1:87:03:a0:a5:1b:
         2f:e1:ad:10:10:62:93:0a:b4:58:27:22:53:3d:19:37:9c:69:
         54:dd:cc:2d:ec:c3:64:98:fc:af:fc:58:c1:c6:1e:ac:07:f4:
         fd:2a:81:28:8d:82:d1:8f:2a:f9:a1:fc:eb:a3:22:f3:83:a9:
         8d:52:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:02 2026 by rpki-client