Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/660081f5-9704-3b8b-bd46-7e76ed60b426.roa
File:                     660081f5-9704-3b8b-bd46-7e76ed60b426.roa (raw, json)
Hash identifier:          ihe7DVW5rqdhVh/cehJbsiwMF05qczrvPZTaGvjfW/8=
Subject key identifier:   EE:38:1B:45:B9:2D:B9:FC:8E:D7:E4:78:E3:CC:AF:EE:CC:FD:1C:1B
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584EA788C498B583AA1CF248E540
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/660081f5-9704-3b8b-bd46-7e76ed60b426.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11377
IP address blocks:        216.20.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c4:98:b5:83:aa:1c:f2:48:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5f9f63d8-d948-4790-a087-964599e24c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:de:75:04:c8:2c:fb:fb:2a:72:1b:e5:4d:
                    a8:e2:20:6e:45:32:60:04:00:51:62:00:40:95:f2:
                    6b:bd:5d:d6:3c:de:a9:59:a9:14:a2:df:86:ab:0a:
                    6a:9e:12:a7:94:bd:5a:9b:ce:da:dc:75:05:b8:ac:
                    e7:3b:79:b3:27:12:4c:f9:9b:fb:fe:39:0d:bd:ab:
                    4e:4d:d2:32:a6:5e:d5:fe:e3:14:1f:bf:85:66:c7:
                    2e:54:ed:b3:e1:cd:5c:7f:4f:af:40:d7:c9:b0:b5:
                    10:99:90:59:de:10:db:71:d0:13:96:a4:f0:5e:15:
                    e8:f5:47:0d:3f:b4:d2:61:cc:95:30:26:ad:d1:3e:
                    ea:46:1f:1b:67:51:6b:c9:b3:ad:db:d9:9f:c1:fe:
                    6e:c4:0a:f8:a5:d5:77:3c:b3:d1:a8:f9:4f:a1:53:
                    c4:0e:69:72:6f:d5:65:ef:2a:57:4f:36:fb:87:6e:
                    3f:4c:7f:96:fd:a0:d1:b9:6a:ac:3d:6c:23:64:5a:
                    12:fa:f4:62:5d:55:af:39:14:79:b8:e0:50:f7:60:
                    1b:28:b8:d4:fa:37:d0:ff:d8:5a:08:2f:58:8b:24:
                    5c:f9:23:6f:cc:01:d7:0d:ce:b4:cb:8e:fb:9b:3a:
                    30:34:3f:c0:43:90:0b:80:ac:52:fc:3b:de:8d:dd:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:1B:45:B9:2D:B9:FC:8E:D7:E4:78:E3:CC:AF:EE:CC:FD:1C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/660081f5-9704-3b8b-bd46-7e76ed60b426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:5d:81:1c:54:1b:c2:77:86:fe:21:29:1f:c0:32:95:18:
         b9:8e:c4:e3:d0:3f:d0:45:13:16:23:9c:f8:ea:fb:81:ba:d7:
         b7:1e:be:cc:d5:5f:d4:2d:98:10:e4:b5:15:71:77:ab:3d:e9:
         23:68:88:fe:1e:75:48:0d:61:07:3c:d0:94:95:81:93:77:ee:
         0d:e9:7d:98:a1:87:8b:d3:ae:de:b0:c2:86:31:a3:f9:13:10:
         af:ec:fe:10:6c:53:55:00:19:e4:30:3d:06:db:78:84:ff:2e:
         3b:2d:8e:22:ef:49:37:e5:cd:13:9e:e0:99:12:2e:1a:60:b6:
         20:93:20:e7:d6:e2:fc:c5:73:94:03:af:67:f0:f4:ac:0d:1a:
         63:76:12:70:a3:fb:0f:d2:2d:4e:71:88:09:19:c7:1e:1d:16:
         45:72:e8:0c:58:29:93:b4:42:a5:f5:3c:c2:f8:d3:4d:3a:0c:
         01:9b:c5:f7:0e:38:3f:21:e9:99:78:c0:77:51:af:ab:de:50:
         af:34:38:68:9e:7d:cc:72:8d:9a:6d:70:e3:e2:34:c8:cc:94:
         00:34:dc:38:10:6c:aa:74:f5:6b:d9:73:a8:1d:44:3b:f4:b7:
         74:3b:19:a7:d0:97:bf:63:43:0a:5f:43:ce:51:90:2c:5a:c0:
         8a:14:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:36 2026 by rpki-client