Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa
File:                     a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa (raw, json)
Hash identifier:          O5u/b/S7wd0txRaXF3Ppz4s3VW1klEYaI6we40h7x7g=
Subject key identifier:   1B:ED:96:18:00:6D:51:B8:5C:8A:3A:6F:07:13:A8:31:81:99:8E:08
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210F451B83CD979AA7143920
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        66.168.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:45:1b:83:cd:97:9a:a7:14:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ab563501-a16f-4b01-bc58-eb6c109b2494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:69:8c:45:04:98:bf:2c:5a:75:74:6d:fd:
                    44:04:33:89:96:d2:0d:1a:df:45:14:75:c9:6a:02:
                    80:ba:29:08:55:54:e9:b7:1c:11:c7:70:ff:0a:bd:
                    45:0a:40:59:25:04:5a:54:75:c5:a9:ee:24:b3:b5:
                    12:c5:c7:a6:29:0f:9f:9b:e2:00:bb:a7:47:ea:e2:
                    93:59:11:2f:50:e6:9f:80:ab:d0:b5:c4:69:a0:ca:
                    98:13:a7:af:1b:d3:f4:ec:b6:21:92:89:d6:c1:56:
                    29:79:a1:db:48:e4:bc:07:d4:b9:13:fd:43:ad:51:
                    59:01:3c:ec:73:06:7f:99:9e:b4:2c:56:cc:18:70:
                    39:cc:dc:d9:cf:9f:39:ac:87:bd:00:59:74:44:fc:
                    1d:1e:7c:f4:13:9b:11:65:3a:31:11:45:fd:ca:e9:
                    e8:f9:df:99:36:18:49:4b:15:25:84:fc:d4:35:8a:
                    56:02:b8:7c:4a:d6:d0:c4:f5:94:05:eb:d0:d1:4a:
                    2d:23:21:53:be:6e:f9:2b:5e:66:08:2a:20:d7:aa:
                    cc:43:7f:40:17:54:9e:d4:79:1b:f9:e6:76:bd:0a:
                    70:71:b4:b0:15:83:64:81:f0:8e:d7:ce:ca:8d:b9:
                    77:06:54:00:2b:09:00:e3:15:bf:b5:ff:0e:06:60:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:ED:96:18:00:6D:51:B8:5C:8A:3A:6F:07:13:A8:31:81:99:8E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a5afaa3f-9eda-3890-ab03-e10c20ba74d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.168.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:11:9f:21:94:40:30:1e:83:61:e0:84:1e:41:a0:9e:42:ec:
         9a:36:14:41:10:71:ee:d1:bf:6a:41:b5:3e:e2:aa:07:fc:64:
         b7:03:79:59:40:56:f7:4e:cc:c6:88:7b:77:3c:f5:96:70:f3:
         95:c4:38:ec:ac:a1:b6:e1:03:c9:0b:56:f5:5e:79:00:29:e7:
         79:14:cb:4f:68:94:74:a0:f8:e9:6c:2e:63:d6:75:f8:f1:38:
         b6:75:c4:ac:2b:bb:c3:b3:d7:1f:f4:f2:10:3d:e2:e2:74:32:
         b0:54:7f:09:25:7a:ea:88:5b:8e:90:8f:1e:2d:3b:46:2a:4f:
         39:2c:e7:4b:a2:a9:00:02:27:bc:5c:5e:f8:ef:75:b7:d6:e1:
         28:e2:9e:d8:61:14:0f:91:83:a0:f4:b0:27:fc:50:13:f9:75:
         78:60:2b:b2:04:49:a4:8e:c7:21:f7:79:0e:7c:82:74:c3:ce:
         1f:06:3b:e0:48:80:26:54:01:80:7a:a6:3c:86:ec:55:6e:74:
         c7:d8:05:79:08:af:ed:e2:a7:fc:cd:3e:f9:94:97:72:55:57:
         3d:04:d5:50:ce:0d:13:46:fe:27:8f:d1:1a:1e:b0:02:da:c7:
         3a:24:12:5e:20:03:fb:40:cc:cd:49:5c:4b:4f:de:12:31:3b:
         d4:bb:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:33 2026 by rpki-client