Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa
File:                     2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa (raw, json)
Hash identifier:          LtuPii69TA4pI+0EL0z7diCOOuzGSdaom8HkS4WZYno=
Subject key identifier:   C4:1E:69:91:81:C9:49:3A:B8:53:F8:B2:4A:85:37:F3:0D:68:F6:7E
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F4328584D19B4D6D089F10AB168FBA970
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     394321
IP address blocks:        66.97.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:d6:d0:89:f1:0a:b1:68:fb:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=63000e57-5427-4811-a684-5ac88471f10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:3c:5a:38:76:b5:84:b5:e1:08:1f:e4:91:
                    86:3d:d7:42:54:eb:58:18:4b:14:ef:7f:53:2c:9f:
                    73:49:0b:03:44:88:93:10:83:aa:c6:46:5c:9b:33:
                    02:a4:4f:a5:57:8d:f4:02:84:de:5d:3e:86:91:cc:
                    18:56:18:0c:38:00:96:e5:b3:5c:34:2e:5a:06:52:
                    f4:b5:36:93:7f:21:d3:57:5f:1a:6a:c5:81:30:ee:
                    d1:6c:d4:26:3a:b1:c1:6c:bb:39:65:04:41:43:28:
                    2c:69:5c:48:c8:7a:2b:14:21:69:c1:6a:29:cd:ba:
                    84:e2:16:bd:65:78:84:0c:50:74:7a:a3:ed:08:09:
                    fa:05:98:c7:67:c9:ca:0d:a9:ec:c9:4b:aa:53:66:
                    fc:49:36:8c:35:18:b3:2d:ac:de:db:1f:e5:4a:e3:
                    68:27:c7:ba:91:c5:38:0d:16:4f:c8:2b:32:48:f2:
                    73:79:43:91:35:b8:b3:72:1d:78:36:81:2a:5e:65:
                    c7:0b:5a:8f:51:db:98:e5:2e:a8:28:f3:24:4e:ae:
                    2d:61:ca:a4:f7:31:aa:41:a1:10:93:ac:8d:d5:bf:
                    af:8c:a2:56:ed:e3:50:a6:d8:69:85:c7:c7:1b:dd:
                    26:18:53:06:67:04:84:46:f4:e8:65:c0:da:8a:41:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1E:69:91:81:C9:49:3A:B8:53:F8:B2:4A:85:37:F3:0D:68:F6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:14:cd:5f:30:6f:d2:dd:93:15:24:93:c3:a4:5a:8b:09:f6:
         ad:69:08:b7:04:c4:92:f4:d0:33:88:b9:70:2e:40:cc:73:39:
         87:79:3a:2c:84:05:56:d9:58:18:df:90:80:6e:2c:83:15:e8:
         d7:d7:9f:a7:e5:fa:d0:69:d1:dd:3b:22:9a:d2:a0:be:44:ec:
         ee:d2:f3:26:47:a2:02:e6:40:93:32:4f:7b:9f:69:39:73:f1:
         cb:2c:5d:3c:e2:2b:41:6b:7b:e5:ec:87:07:05:3e:bc:fb:df:
         5d:b4:f4:02:9a:3f:8b:bc:48:3a:27:74:b7:d9:28:42:22:f6:
         52:74:74:7e:04:9b:ca:72:c7:97:5b:b9:e3:bc:d1:b5:76:e5:
         05:63:01:1a:a4:d8:e9:d4:08:f1:7c:e3:f5:b3:26:fc:4c:cf:
         ff:64:8b:6b:7f:35:47:1d:0a:b1:ab:c4:f3:51:24:38:a8:54:
         41:64:0d:25:53:67:50:f2:63:b2:dc:06:30:8a:19:39:98:2b:
         7b:eb:a2:30:11:0f:c6:4d:59:cf:a0:5f:51:43:f9:3c:8c:69:
         ba:3f:d3:69:d2:3a:b8:5f:9f:6c:f2:b4:f2:43:be:14:cc:53:
         09:9f:f9:d2:e5:17:af:b4:76:fd:bd:c1:a0:03:24:ae:90:4e:
         fd:16:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:54 2026 by rpki-client