Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/4f361209-4193-3d30-ba16-1af4a0e331df.roa
File:                     4f361209-4193-3d30-ba16-1af4a0e331df.roa (raw, json)
Hash identifier:          9QxYCTrMIn4KTPXMyWF+De0RrEBwGTMm95KPssiAPsM=
Subject key identifier:   23:B5:D7:E5:64:42:D2:6B:D7:00:8F:05:A4:59:0F:D1:85:F2:DD:0D
Certificate issuer:       /CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
Certificate serial:       010D0C9F4328584D19B4AD81C8BE693383D0A480
Authority key identifier: 3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/4f361209-4193-3d30-ba16-1af4a0e331df.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        66.207.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ad:81:c8:be:69:33:83:d0:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5a53c2-ad3d-4826-8c49-84857dd4db60
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=c414ce5d-24ab-4a2f-891f-77a425c2a902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:7d:e3:66:db:28:f6:5d:62:24:46:e3:b3:
                    d8:57:2d:c6:11:d0:38:84:aa:df:47:34:16:46:00:
                    04:dc:5f:6a:1e:c0:a1:c8:d9:a4:18:9c:11:df:31:
                    49:1e:68:94:ad:2a:ca:35:0a:23:f6:3e:36:81:cb:
                    b6:4f:ff:db:ec:60:b5:31:bd:b9:f3:cd:cb:b0:c3:
                    a1:99:3f:95:df:d5:fc:60:5c:d5:76:e9:0d:a2:2f:
                    8d:2b:a1:4b:ed:d9:b2:bc:f1:3e:c4:35:3b:62:9d:
                    9c:a1:db:02:e3:1f:a7:b9:83:71:c9:b7:50:20:58:
                    a9:3e:45:15:4a:7c:3a:9d:39:d7:78:35:82:44:5d:
                    7a:51:ad:1c:57:df:44:5d:57:45:78:24:69:1a:4e:
                    12:d9:4d:89:c2:75:fd:c8:38:ee:af:f2:1a:92:26:
                    71:8b:95:17:41:2b:2d:e4:04:9c:5b:2d:e8:a3:b1:
                    9c:18:7e:b8:35:f6:20:81:9d:08:a4:7a:b5:78:70:
                    ed:86:a1:53:c5:21:c8:86:22:57:e5:40:e6:e1:19:
                    9d:65:4e:22:8c:9b:11:64:e4:0e:43:d9:da:f3:e5:
                    9b:39:f0:30:0d:0e:1c:93:23:58:5d:cc:60:9e:41:
                    23:7b:d0:db:9f:4b:f4:97:0c:ae:0f:52:3e:7d:f4:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B5:D7:E5:64:42:D2:6B:D7:00:8F:05:A4:59:0F:D1:85:F2:DD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/4f361209-4193-3d30-ba16-1af4a0e331df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60/5c5a53c2-ad3d-4826-8c49-84857dd4db60.crl

            X509v3 Authority Key Identifier:
                keyid:3A:93:6D:0C:60:26:B8:C1:02:0E:75:F8:E5:9B:4A:B4:C5:E2:37:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5a53c2-ad3d-4826-8c49-84857dd4db60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.207.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:c1:9e:d8:b4:96:94:02:06:2c:a7:41:d1:d2:00:b8:ac:
         77:1a:75:24:dc:d5:b2:8f:ab:f0:e5:b1:90:8d:cb:a0:24:ef:
         d2:f4:a3:e2:c0:f5:39:38:2a:69:63:ca:a3:b7:b3:df:f0:44:
         b9:8d:5f:60:b3:fd:ff:f6:4d:79:86:e0:a3:d0:1c:99:a8:f2:
         6d:e7:aa:75:cc:bd:2b:4a:38:82:2a:98:8e:a6:e4:3a:f9:6f:
         7a:d0:79:20:e2:b6:92:27:01:1f:20:6a:d4:d3:8c:2b:af:eb:
         56:fb:11:2a:d9:0b:af:e5:1a:ec:53:ce:8a:8d:19:8b:9a:6d:
         19:04:d6:b6:89:3c:10:0e:0e:d7:06:d2:7d:80:28:8b:a2:22:
         77:24:36:e5:7f:e7:50:cc:19:f9:b4:c8:a3:13:4e:5e:15:27:
         66:45:e1:a8:5b:c0:8e:61:29:49:fd:a5:7c:2f:83:e7:30:54:
         28:34:78:32:57:2f:5d:34:59:63:12:ad:13:da:f9:34:9d:b6:
         2a:8b:9b:80:9e:1d:6d:6e:aa:d9:4c:60:b2:bb:81:e1:39:50:
         50:aa:98:53:71:0e:f5:17:bb:db:99:71:aa:62:4f:fc:80:80:
         9f:1b:91:29:8c:ba:49:79:53:8d:2d:44:22:8e:df:3d:78:d9:
         48:d5:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 18:37:40 2026 by rpki-client