Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa
File:                     6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa (raw, json)
Hash identifier:          oZuCPdQKK7E6K2XjcCZKoYt4sFfg49lGbU4ymi89UZg=
Subject key identifier:   AC:3D:07:08:60:DC:1E:8B:53:D2:72:29:BF:02:EC:DA:81:95:7B:52
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EA7934896811EC23E3C5BDD00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        66.54.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:48:96:81:1e:c2:3e:3c:5b:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=01765237-3ec9-4fcb-a27b-10052c484c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:ab:d7:70:da:28:0b:f6:b8:92:10:ee:50:
                    84:29:78:80:70:be:5e:db:a4:f3:b9:38:4a:8c:11:
                    b0:7b:c1:83:f5:d2:62:6e:7f:d7:11:ec:d2:8a:8a:
                    b0:2b:53:e9:1d:59:81:f9:a5:ba:2f:ce:bb:92:eb:
                    da:34:d8:40:aa:87:c1:64:72:fc:7c:d6:fb:cf:d1:
                    2c:3f:41:bd:4d:ba:1e:52:67:eb:10:6d:b9:cb:45:
                    08:ac:aa:aa:8d:2a:9d:6d:59:9d:e5:df:fb:ec:5b:
                    3f:70:bf:25:3c:18:ba:5a:66:aa:cf:f9:ee:c0:a3:
                    a4:76:4d:9a:6a:a7:6d:a4:11:cb:23:80:31:62:88:
                    c8:81:da:85:45:99:f9:d8:45:46:2b:8b:d0:7c:c1:
                    87:9a:40:81:b5:84:bb:d8:c1:5b:c7:49:5f:b8:21:
                    98:83:e3:06:67:6d:c5:ad:cf:74:d2:f8:80:d5:11:
                    0c:d9:4c:71:8c:53:df:51:c4:33:26:a0:de:71:4c:
                    7a:1b:4a:8b:b6:18:4c:be:96:b8:c6:0a:d7:69:05:
                    a3:30:70:07:b7:65:d8:79:84:ff:51:11:4a:01:ea:
                    8b:7f:f7:f6:6b:84:af:d8:97:cd:3c:40:c0:16:d9:
                    87:d5:0f:e8:c3:1d:5f:d7:49:22:00:06:c8:16:23:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3D:07:08:60:DC:1E:8B:53:D2:72:29:BF:02:EC:DA:81:95:7B:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6afa0ff9-5c7e-391b-96ad-53bfea8c8a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.54.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a0:a4:39:a7:ce:82:de:e4:80:86:de:80:1f:c7:31:71:5c:
         f7:14:fe:5c:f7:e5:03:6d:e8:42:7f:b3:60:1e:d4:ff:54:20:
         08:0c:ef:6b:45:d1:c1:23:d4:e0:78:d2:67:e2:7e:5f:8b:46:
         7d:57:11:50:29:29:18:3f:f6:65:32:07:ec:be:12:6a:f2:33:
         17:59:44:7b:32:7d:03:53:1a:a2:98:0f:69:04:b6:79:d2:1d:
         3b:e0:25:af:d0:82:99:30:29:ae:ec:36:30:0b:8c:f8:08:c6:
         18:12:58:a3:d3:e0:48:9b:e1:60:a2:79:ee:bc:a3:40:7e:bd:
         3c:86:b3:b8:45:39:f6:39:f4:88:66:2a:f8:40:e6:e1:7d:67:
         58:6b:34:a9:36:7a:48:4d:e6:f5:0b:5f:b7:be:e0:e2:4e:e4:
         a3:e6:34:de:bc:c1:57:72:d0:a2:21:c0:e5:03:15:d1:9c:92:
         a9:85:1b:58:ff:bf:27:a7:c5:44:97:9b:6f:d3:e5:29:54:bc:
         61:41:14:d7:4b:89:d3:e1:12:ab:96:ef:dc:6c:73:18:9d:35:
         28:d2:7b:22:3c:ea:9a:d4:9d:64:32:2f:d1:02:c4:c2:96:da:
         3e:72:64:8c:d6:d6:a1:19:4d:bf:65:3e:35:df:75:94:b7:1e:
         bf:55:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:22 2026 by rpki-client