Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/893d9b51-f83d-3208-a0d0-b8cf0bbde99a.roa
File:                     893d9b51-f83d-3208-a0d0-b8cf0bbde99a.roa (raw, json)
Hash identifier:          Rjxhq+sxPMHKBpgMkMe+QNVF5j9aRQIHN0TWpgpAQfc=
Subject key identifier:   F2:CE:E1:5E:EB:61:6F:0C:55:77:BC:2C:A5:93:2A:45:E6:B2:BC:36
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584D0C6FD01752314A06C3A3F96E
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/893d9b51-f83d-3208-a0d0-b8cf0bbde99a.roa
Signing time:             Tue 03 Mar 2026 18:56:34 +0000
ROA not before:           Tue 03 Mar 2026 18:56:34 +0000
ROA not after:            Mon 01 Jun 2026 17:56:34 +0000
asID:                     26337
IP address blocks:        66.235.204.0/23 maxlen: 24
                          66.235.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:6f:d0:17:52:31:4a:06:c3:a3:f9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Mar  3 18:56:34 2026 GMT
            Not After : Jun  1 17:56:34 2026 GMT
        Subject: CN=7ce6479b-cc5d-4fbd-b8f6-071a4617cbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:ea:ea:36:66:f7:29:79:b8:d2:c2:0e:c7:
                    a4:fd:94:ef:b7:47:8f:39:65:5e:b2:4d:2f:41:f1:
                    bd:80:23:13:b1:59:75:3d:64:40:ba:06:f0:a7:60:
                    9d:90:f2:a1:2a:e9:54:93:4e:70:9f:74:f6:5e:51:
                    77:df:d0:6c:c3:3f:9b:3f:4d:b6:5b:ca:a4:23:3b:
                    f5:0f:74:52:4b:4b:a0:a7:fe:d6:32:d3:9a:3c:14:
                    27:c9:c0:16:57:0c:6c:29:ce:2b:ef:85:21:0e:d3:
                    07:56:25:0a:4a:f8:a4:d5:5d:4e:b7:74:09:7f:c1:
                    5c:6c:20:6c:b8:bf:b3:ce:38:24:68:78:27:78:14:
                    04:c8:e9:29:8c:a0:3e:ff:b9:04:60:ff:44:46:01:
                    fc:b8:2c:40:c1:42:1d:9e:22:2c:1f:b1:20:c6:a5:
                    34:21:0d:e0:20:b4:6c:f0:04:68:55:0a:90:1b:a5:
                    40:20:17:ba:6c:4e:0e:14:60:d6:bf:40:8e:8b:8f:
                    b9:66:67:ad:19:84:fa:c3:50:71:cf:06:97:17:6d:
                    e6:57:a6:f5:13:9c:9e:62:44:77:c6:1b:22:a0:de:
                    a9:df:88:a2:0a:ff:a3:b7:ae:cd:d3:8b:21:46:e1:
                    f5:3c:45:f0:44:20:59:a9:73:1a:39:c9:a3:bb:6c:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:E1:5E:EB:61:6F:0C:55:77:BC:2C:A5:93:2A:45:E6:B2:BC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/893d9b51-f83d-3208-a0d0-b8cf0bbde99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.204.0-66.235.206.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:e9:53:ee:8e:9a:ff:24:df:1f:72:38:ab:3c:b6:f5:ce:
         ce:43:43:cb:6e:dc:0d:33:c2:28:dd:25:4c:35:d0:04:8b:3a:
         cc:fe:2b:83:a2:ee:a5:0a:a6:8c:e9:44:30:3a:ef:96:b6:84:
         63:21:99:bc:66:24:fc:ba:39:25:af:36:db:c5:a1:14:c7:6d:
         3e:53:1a:ea:78:8d:6e:cb:22:4a:ce:54:51:8e:ac:72:10:62:
         6d:69:e2:76:27:8c:e5:a8:8c:5a:f4:6b:98:6e:22:c3:c6:86:
         3e:9e:3b:5a:d8:80:5e:00:b0:0e:89:0b:43:f1:22:2d:e2:a3:
         fe:ad:51:d3:70:e8:46:b5:1d:3a:df:58:45:d7:70:bd:be:fa:
         23:a7:1e:26:3b:57:9a:1d:c3:6a:aa:d5:15:74:99:48:75:30:
         56:88:d9:e5:b8:42:a1:f2:a8:6c:20:7d:00:4a:d3:fb:cb:ef:
         35:e9:1c:d7:44:14:0f:d5:e7:79:63:6b:e6:36:50:07:16:0d:
         5f:28:12:6a:17:ee:0f:66:c7:b9:27:15:7a:16:ed:1f:a6:f3:
         d2:95:26:e2:48:9c:86:83:5a:d4:21:5c:2b:ba:07:fd:65:40:
         13:7e:0c:44:52:9a:71:a8:10:de:ca:3c:f7:4e:58:08:1c:ea:
         10:f5:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:31:15 2026 by rpki-client