Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f02a3544-cd41-3a27-a2fd-df85d72098d7.roa
File:                     f02a3544-cd41-3a27-a2fd-df85d72098d7.roa (raw, json)
Hash identifier:          DwfvrLFRBhcg7tHKFRb+lgE9wi4uEkw4TLppCANs2/c=
Subject key identifier:   FE:56:41:D4:46:48:2C:A0:85:F8:0A:1B:44:26:5D:DF:30:1B:E2:0F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E210FBA7FF999B5685742CA40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f02a3544-cd41-3a27-a2fd-df85d72098d7.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     20115
IP address blocks:        66.189.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:ba:7f:f9:99:b5:68:57:42:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=d9498b7e-6185-479a-ab33-efd449d1d9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:27:3a:e0:32:2f:fb:01:b2:45:16:0e:54:
                    80:58:4c:08:f4:62:04:bd:12:cf:f3:a3:51:c8:08:
                    8f:bb:10:85:e8:be:18:03:e8:12:db:e3:d7:0a:85:
                    20:ed:77:5e:1b:c8:4f:e5:90:90:6b:10:da:e6:29:
                    cb:7d:87:0c:c6:d1:7f:a5:77:d2:aa:18:d1:3c:d0:
                    17:d9:56:1f:cc:ab:af:00:cc:40:6f:a4:c3:ef:63:
                    0e:47:0d:79:9b:fe:1e:0f:4c:99:c7:f4:40:df:37:
                    bc:ec:06:2f:2b:76:bd:32:4a:f6:6b:36:fd:84:36:
                    f9:1a:2e:e3:c1:18:50:30:9d:90:cd:d6:cd:06:e8:
                    21:eb:77:ac:03:de:80:df:9c:e3:80:dd:06:b9:bf:
                    76:f8:39:0e:3d:0c:26:16:28:0c:b0:af:8d:10:c5:
                    5f:83:28:3f:bc:99:12:c4:5e:61:72:1f:b6:20:59:
                    31:d0:7c:2a:c2:5f:98:fb:a4:c1:dd:e0:4b:fd:ab:
                    28:8e:d5:0f:15:75:de:27:e3:9d:77:1d:18:ac:a8:
                    9c:b8:18:b2:78:44:3a:a4:de:54:87:57:fd:1d:37:
                    2c:eb:e4:00:c8:0e:41:2c:2b:e3:c3:8e:09:3f:c9:
                    90:c4:57:74:06:0d:a4:9a:fd:42:97:b7:6a:5e:30:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:41:D4:46:48:2C:A0:85:F8:0A:1B:44:26:5D:DF:30:1B:E2:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f02a3544-cd41-3a27-a2fd-df85d72098d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.189.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:02:fc:3c:28:13:88:37:07:6d:76:e8:32:7d:ac:d0:b8:
         0a:f3:f0:49:2e:63:a5:35:62:04:4c:c1:4b:aa:b0:09:a0:df:
         11:03:18:00:24:f8:e9:78:4b:55:17:e8:bb:3d:f0:6a:8a:fe:
         a9:76:fe:46:6f:35:c9:b7:ba:72:be:2d:9a:e0:69:e1:91:ba:
         ae:84:72:4c:94:53:2a:f8:f4:3f:9b:03:21:d1:b5:95:92:d8:
         e1:9b:a8:26:74:d5:2b:2d:9e:6a:49:dd:2c:15:10:bf:6a:f3:
         3b:61:83:9f:1d:df:a1:8f:9b:b2:dc:ba:cc:92:1d:97:45:50:
         33:dd:b2:11:61:8b:29:86:4f:db:fb:21:67:ed:cd:1e:1c:3f:
         7a:93:f9:df:28:56:b6:69:4f:11:76:a4:93:55:a6:0b:5d:42:
         98:c5:32:0e:bf:ce:6a:f0:c4:e3:42:2f:6c:9b:4a:da:23:2a:
         9c:24:a7:42:ba:25:21:45:81:f7:90:68:d3:fe:24:bf:91:e2:
         2e:5e:ec:fd:13:50:00:0d:5b:d5:60:bf:09:cb:8c:ea:e6:ef:
         1e:a5:01:b1:e0:6a:3c:92:f0:25:7a:dc:0c:ae:fa:cf:5e:12:
         dd:5f:09:80:1f:32:2c:98:7b:67:50:6c:00:ac:64:8c:16:78:
         ec:c6:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:13 2026 by rpki-client