Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/516390e8-04f0-3f94-bdb3-0f15181ad62a.roa
File:                     516390e8-04f0-3f94-bdb3-0f15181ad62a.roa (raw, json)
Hash identifier:          ruRlMDvlZybeRGB0qZ30p0VNQiYegKEf3uYmglW4BXs=
Subject key identifier:   84:E3:EA:33:F8:F9:71:CA:B9:AE:D4:C4:7F:D7:91:21:DB:AE:6A:8F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AA5611F38F05B988A4B600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/516390e8-04f0-3f94-bdb3-0f15181ad62a.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        66.249.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:56:11:f3:8f:05:b9:88:a4:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=6c9b7b0a-a63a-48b0-86f2-e758708a7b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:23:44:09:cc:ae:7a:6c:04:ec:3f:8d:76:b2:
                    98:bc:57:27:bf:a2:a2:9a:76:c3:a1:67:90:7d:be:
                    21:f5:cd:5d:fa:47:d6:a9:50:6a:23:1f:d6:da:ce:
                    50:30:46:db:61:16:81:35:1b:dd:a6:88:f3:95:32:
                    1b:f3:bf:d4:6e:9f:ea:fa:8b:2e:d3:a4:9e:b5:76:
                    12:01:2b:3d:c3:25:1c:33:10:62:37:41:3f:23:82:
                    d3:08:7e:4f:8a:9b:19:bc:d0:11:f7:1c:9c:1b:97:
                    90:1c:94:99:16:77:b1:c8:33:7e:8b:d0:1b:fa:26:
                    46:6f:2a:cd:f5:53:04:04:71:5d:ad:55:78:70:b3:
                    29:b7:44:1a:53:1a:bb:42:a4:bd:96:8f:f2:6a:3e:
                    d4:10:d6:af:d4:f8:f6:1a:40:1a:c5:4b:55:00:18:
                    df:cd:ac:f5:5c:22:d7:fa:cc:46:df:38:9a:c6:f9:
                    7d:65:5d:21:49:88:77:e7:8d:a3:f0:13:49:10:fa:
                    58:dc:ba:9b:67:73:ad:7f:31:dd:64:87:37:43:4e:
                    ae:47:65:80:0e:6f:61:0b:0c:76:bf:60:91:d4:dc:
                    04:60:45:e2:e1:ea:a8:22:61:00:e7:dd:59:b7:7a:
                    bf:3e:f3:b3:a6:00:7e:65:64:18:a0:19:a4:b9:05:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:EA:33:F8:F9:71:CA:B9:AE:D4:C4:7F:D7:91:21:DB:AE:6A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/516390e8-04f0-3f94-bdb3-0f15181ad62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.249.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:e9:88:d1:df:a9:f0:59:73:7d:98:9c:11:88:aa:7c:43:
         cb:bb:cf:79:eb:b0:1f:79:c4:2d:dd:91:b3:40:4d:6f:97:0a:
         42:80:f9:f9:3c:38:df:cd:4c:85:26:cf:c7:aa:ea:0d:1d:95:
         86:b2:95:a7:99:88:cc:ce:2e:b1:df:cb:4c:36:10:5d:8f:7c:
         52:e7:f5:60:bf:5f:a8:77:4a:57:55:bb:41:1e:9c:c5:a1:64:
         48:e9:a0:a6:b1:49:00:02:cb:04:82:3e:e0:99:15:4f:fd:2b:
         d2:da:be:dd:91:b2:98:d6:de:93:2d:cc:65:c7:1e:ca:3d:78:
         8d:a9:9f:4e:a7:88:0c:36:9a:4b:9b:39:96:77:de:81:a5:eb:
         b4:f6:d3:a7:dd:b3:50:a3:ae:09:c6:88:b6:84:09:94:6c:53:
         9a:22:6a:03:99:e8:11:d5:f4:ed:2f:45:0c:b6:67:c1:e7:66:
         de:a8:12:57:c5:29:38:82:17:b3:de:49:9d:76:0c:54:44:71:
         aa:e2:50:5f:5d:8a:ab:f8:ad:51:3f:52:59:76:1b:4f:9d:a0:
         f2:59:36:69:ce:c0:b8:89:34:dc:d0:ba:02:1d:f8:ea:6b:c5:
         3c:85:1a:d6:1a:b7:35:0e:a5:1b:ee:67:2b:a6:84:61:5a:77:
         20:17:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:33:19 2026 by rpki-client