Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7ac067d9-790a-3b6c-9c08-34b9f12fd286.roa
File:                     7ac067d9-790a-3b6c-9c08-34b9f12fd286.roa (raw, json)
Hash identifier:          9czENHUcrqmQCINEF7vOmM3son1ieDgwXuI6pA61erI=
Subject key identifier:   97:A8:07:B3:0F:EE:9F:C1:C7:59:83:84:0B:9F:27:67:7B:CE:81:23
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA79175DB9FC17166AAAB2100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7ac067d9-790a-3b6c-9c08-34b9f12fd286.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2914
IP address blocks:        66.80.56.0/22 maxlen: 22
                          66.80.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:75:db:9f:c1:71:66:aa:ab:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4cfaddee-0ca3-4a33-a84f-85727cd149d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:b1:53:75:7d:60:c7:79:c3:34:64:ad:06:
                    10:7e:4f:93:31:64:bd:52:53:14:6f:73:a2:aa:f3:
                    f9:e7:15:6d:9f:ca:18:5f:3a:6c:14:bb:54:97:2d:
                    79:da:6e:27:27:6f:18:fc:ec:11:83:3d:69:c4:14:
                    bc:b6:a0:b3:e4:60:8c:12:42:49:7c:09:ff:cb:6a:
                    1a:9c:d2:12:ad:73:29:59:ce:e8:36:dd:fe:f5:8b:
                    57:17:74:2d:b6:cf:20:72:18:c2:c3:cc:42:94:6b:
                    c6:34:3e:21:17:27:c4:c2:2b:a4:bc:72:f7:09:42:
                    78:74:e2:2b:c0:01:a7:5f:52:08:1a:cb:35:ee:9f:
                    47:83:0e:d4:f0:a0:03:cf:0d:a4:3c:4e:47:d8:5b:
                    c2:eb:84:bb:d2:9d:39:5c:af:78:e5:ea:13:09:2d:
                    ed:c0:f9:7f:2c:01:41:6d:db:82:40:08:3e:f2:7b:
                    fa:15:96:8f:a3:af:58:86:49:7f:30:79:92:24:9c:
                    d8:0b:a1:23:c6:69:56:ce:13:f4:9d:98:84:fb:64:
                    27:cc:03:f4:f9:80:9d:4d:41:61:2a:ac:c5:56:65:
                    14:d3:ff:14:4f:5d:b7:0c:a6:5f:cc:da:57:b2:cf:
                    60:16:75:17:91:07:3c:83:be:d6:d3:b6:7a:be:d5:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A8:07:B3:0F:EE:9F:C1:C7:59:83:84:0B:9F:27:67:7B:CE:81:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7ac067d9-790a-3b6c-9c08-34b9f12fd286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.80.56.0/22
                  66.80.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:94:be:e4:1e:0a:80:7b:24:d6:35:dc:5e:2f:c8:e9:9c:8a:
         ab:7c:77:0f:8e:1b:7d:d2:f4:65:71:74:54:46:91:8f:3d:e3:
         23:a9:94:75:4a:be:88:d6:f6:4f:8b:c7:ed:9f:9e:08:d9:ff:
         ac:7c:c7:48:20:49:8c:08:dc:cd:87:75:75:96:fc:47:a2:64:
         97:46:e6:12:e0:8d:62:47:b0:6a:c1:c0:0e:32:be:0a:eb:9e:
         3c:3e:d0:1d:e8:2b:f2:23:64:c5:28:53:9f:4b:25:3d:e8:8c:
         d1:0e:18:29:ed:83:95:55:4f:ad:4d:25:d0:40:5a:7b:94:3f:
         d9:77:7a:17:7d:3c:a6:4a:97:c8:24:0d:68:c8:e2:60:07:24:
         7b:a0:13:55:fd:9d:17:fa:67:e0:a0:93:97:9f:8b:8e:78:c2:
         f9:3c:1c:df:1e:65:7c:26:55:46:22:4f:19:8e:7b:1c:4c:f5:
         ff:a6:ac:00:c0:f7:3e:14:29:09:01:b1:57:b4:1f:4a:af:88:
         14:03:d6:4c:67:19:bf:3d:b3:b5:6f:e6:dd:cd:84:86:4a:fa:
         86:b2:98:79:dc:bb:d5:66:7d:90:fc:76:30:f8:0e:81:2b:8e:
         64:06:b5:a6:18:63:49:4e:72:93:80:2c:4b:c8:bd:b2:58:3e:
         d0:8f:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:41 2026 by rpki-client