Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa
File:                     f44a5685-6251-3800-89b9-4dbe41c0bf52.roa (raw, json)
Hash identifier:          RVQoZvj32Xxz2zkUsbQKRz6WiKARbexbiWlcuFGAKAQ=
Subject key identifier:   A7:17:F4:E0:B4:D8:CF:0C:6F:F9:85:40:75:3C:FC:87:BB:BA:72:DD
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D4D5A78DD53BCA09B64519F00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16696
IP address blocks:        67.221.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:78:dd:53:bc:a0:9b:64:51:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=eb95c300-104b-4503-80d5-f45a4a31325f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:3b:14:ec:d4:3c:f5:6d:85:3e:3a:9b:34:
                    d5:27:80:d1:d9:80:ea:6a:6f:d1:a6:2b:55:e3:02:
                    ed:bc:26:3f:4e:91:05:49:54:ec:e4:6d:17:40:41:
                    f3:c8:e8:61:62:a8:72:21:b2:0a:9d:78:ce:fe:fd:
                    5d:b8:3c:80:47:27:1f:88:28:97:14:a0:a2:56:4b:
                    77:9d:ea:54:0d:fa:b3:60:05:df:f5:fc:22:69:a8:
                    6c:9d:f0:a7:99:3a:19:bb:0b:6e:a0:0d:82:33:8b:
                    e2:f5:4b:0a:01:2c:cb:c2:ce:ed:cd:b9:9d:31:1b:
                    e7:55:d3:a2:6c:39:1d:fe:87:a2:e9:ab:9a:a3:32:
                    f6:02:ab:0e:a4:09:6f:80:98:a9:7c:09:b9:c9:dd:
                    86:ea:04:1c:2f:a7:6e:6a:27:3c:99:e7:50:95:45:
                    2f:29:29:b1:42:23:8c:cb:3f:2d:29:0f:cc:71:78:
                    ba:d2:12:ac:0b:a2:23:cf:02:28:d1:f4:0e:d7:52:
                    80:71:bc:b3:5b:43:fd:cd:d8:fd:ac:4c:50:28:3f:
                    48:32:6a:0f:b5:02:10:0b:20:77:e3:c8:f8:8d:e7:
                    39:1a:66:56:03:9d:91:85:d5:0e:2c:61:1e:d0:cc:
                    52:9d:80:b8:c5:ea:46:76:60:e8:e0:2d:40:46:7d:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:F4:E0:B4:D8:CF:0C:6F:F9:85:40:75:3C:FC:87:BB:BA:72:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f44a5685-6251-3800-89b9-4dbe41c0bf52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1c:0c:05:86:02:d6:4d:ec:15:93:90:c7:05:f0:2d:48:66:
         6b:70:24:19:6b:bb:75:69:cd:9a:98:83:ba:e9:1b:79:84:75:
         66:cb:1c:99:1c:d0:00:bc:ad:30:b1:4d:6d:79:33:48:94:02:
         91:5a:ff:57:1f:39:30:ff:3f:53:57:57:e0:b8:7c:df:f8:bf:
         1f:81:11:b9:e8:8d:07:3a:28:ee:a0:9f:f4:7e:b8:e6:3a:a2:
         57:c7:37:50:aa:2a:ef:8d:dd:64:12:74:92:3c:42:6e:4c:b4:
         71:78:99:cf:fa:c6:0d:3a:ad:7f:28:86:dd:6d:2e:a0:47:f6:
         84:37:d3:64:b4:a2:3f:50:4f:9a:ba:10:5c:e2:1d:22:00:95:
         af:7b:dd:eb:8c:2e:ca:d6:bb:26:c9:cc:d2:e4:d6:b4:7e:17:
         44:6c:1b:e3:01:32:9d:18:18:13:8e:a0:ea:2b:88:c3:bc:14:
         59:da:4a:66:d2:51:24:d9:9b:79:8f:bb:d6:4e:c9:5c:95:a5:
         14:0c:35:6a:19:37:fb:a9:6c:4e:41:c0:29:d6:eb:6c:54:23:
         af:8b:75:d1:da:e9:f4:71:4b:c9:51:f7:ae:44:cb:75:e1:87:
         e2:6e:47:82:c8:9b:3b:82:64:28:cc:e7:c9:ba:1a:86:0e:31:
         40:24:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:36:43 2026 by rpki-client