Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
File:                     a1cd671a-8ea1-3951-bf6e-9116a025de17.roa (raw, json)
Hash identifier:          UozCTcbAR6BOP+VlRGbPl9DV5v6VY/1DUKT+5sKe7FE=
Subject key identifier:   67:13:AF:61:38:98:8B:88:AB:8A:C5:40:98:55:23:8B:B8:39:BD:EF
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F4AEC22369174A7A00D00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        66.190.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:4a:ec:22:36:91:74:a7:a0:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=a4235d53-7bb1-4171-92ba-6ce947520bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:61:c8:80:5f:ed:14:80:f7:f3:94:94:3e:
                    ae:02:2c:2d:eb:34:01:54:ab:a3:eb:0a:fc:e9:b2:
                    ca:6e:d9:79:1c:a7:1f:87:53:18:7e:31:89:8d:9e:
                    22:74:2a:3b:59:43:16:0f:fc:f8:d6:f3:4e:91:88:
                    97:19:5a:b9:ef:4b:79:c7:d7:9c:97:2a:b2:9f:86:
                    c0:9b:3c:30:27:b9:78:b7:9a:df:81:3e:1f:b4:c5:
                    fa:0c:03:48:28:9b:c3:9c:ce:13:ff:db:4c:f4:a5:
                    78:76:f9:fa:9b:fb:67:03:8e:00:4e:a9:a7:41:f9:
                    70:21:3c:0f:32:67:58:37:f7:33:98:ba:cd:18:d9:
                    51:c0:6a:a9:4c:00:94:27:7b:5b:b8:04:2c:03:18:
                    ce:23:95:0c:80:ac:c6:95:09:95:78:fa:25:76:19:
                    58:00:a4:01:c1:b9:4b:ea:51:a2:4c:b3:46:da:d4:
                    2b:9b:18:ee:96:64:f9:38:e4:19:b3:42:52:59:c4:
                    0c:0d:2a:72:0b:f7:f6:1a:dd:a8:ab:f1:34:d2:86:
                    d6:d8:29:b3:66:d7:27:bb:0f:99:af:3d:ef:f5:dc:
                    c6:bb:ae:dc:96:29:04:96:f4:25:82:67:78:d0:21:
                    de:c9:eb:20:ba:72:b9:15:c7:e8:5c:a8:7b:ab:a9:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:13:AF:61:38:98:8B:88:AB:8A:C5:40:98:55:23:8B:B8:39:BD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a1cd671a-8ea1-3951-bf6e-9116a025de17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.190.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:28:8d:4e:34:97:be:5e:85:e2:1f:de:27:ec:1c:15:bd:
         cb:e2:09:a1:2f:18:d6:c5:6d:66:dd:da:d0:cf:fe:8f:69:08:
         0b:6a:eb:8c:6c:c6:b7:9f:e7:05:b3:1c:b2:c5:e2:6c:f8:2d:
         32:ae:37:4a:2e:18:53:a5:19:b0:97:09:46:4a:83:17:92:e2:
         cc:42:9b:4d:a9:fb:98:95:72:cc:44:aa:13:fe:eb:8d:56:3f:
         63:44:aa:b6:a1:43:c7:2b:18:77:99:2a:4b:75:f8:db:03:e1:
         74:25:20:9f:08:3a:db:bf:10:8d:62:2d:ed:2e:86:e7:0f:fd:
         fa:20:7e:e0:c5:97:58:5e:81:52:e4:89:a4:cb:56:30:c7:cc:
         86:23:5c:63:81:b3:cc:79:8a:68:c0:94:d3:c6:39:02:17:9a:
         15:94:e5:79:18:90:83:8c:6d:29:d0:ab:b6:6a:ac:8b:74:5e:
         e4:f1:85:b3:bd:0a:6a:1e:06:4f:87:95:da:10:50:7d:4f:37:
         e7:12:30:16:7c:f0:1f:83:03:cd:40:a0:ca:b2:63:03:ec:e3:
         a1:45:b8:bf:55:e8:34:85:37:64:60:c4:a1:6a:dd:05:b4:54:
         5d:80:7d:f0:8e:e5:ff:fe:e5:df:56:bd:c4:89:85:a7:00:71:
         5d:bd:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:48 2026 by rpki-client