Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa
File:                     624ff661-6f73-31bb-813f-b64dbeff8dea.roa (raw, json)
Hash identifier:          2/1wyIVJ27q47XPoki7jZ/UH7E5Ziz0Ah+ObUppILRs=
Subject key identifier:   10:66:7B:E9:BD:69:1E:6D:F7:80:2F:95:47:5D:70:0B:D7:62:1C:B5
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F4328584D524354ABFA434C3ED658FDA0
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     611
IP address blocks:        67.210.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:54:ab:fa:43:4c:3e:d6:58:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=9f316066-e21f-463b-bc59-36ef84320482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:41:15:cb:51:69:3e:55:bd:39:f4:65:f1:
                    70:75:bc:e0:2c:76:cf:56:9a:57:9d:e1:4c:0c:0e:
                    52:92:5c:24:f8:c3:d8:74:dc:07:f7:a9:9c:dc:12:
                    3e:4f:8c:2b:79:ae:46:16:b9:3c:c7:bf:4c:6e:77:
                    c4:09:b1:ae:08:17:6f:f7:64:bf:ef:4c:7a:51:c3:
                    3a:fe:0e:b7:6f:a1:4b:93:2e:27:3c:e8:37:84:88:
                    27:45:8b:ef:82:2b:09:ea:f9:19:a1:ba:58:74:ae:
                    39:dd:12:75:bf:b8:d9:52:c8:6e:96:ef:fa:19:71:
                    c5:65:b5:99:24:29:9f:55:a8:8e:16:e2:39:50:ee:
                    c5:31:fa:48:42:f4:a1:c7:8e:57:c0:e7:b6:88:dd:
                    9b:84:71:48:b2:bb:15:7e:6b:65:19:d1:d3:59:2f:
                    86:41:4d:66:7c:18:25:20:c6:07:33:f9:7a:72:8f:
                    61:63:83:07:c1:37:68:e0:48:2d:bd:96:32:28:15:
                    73:5b:0d:e4:62:12:8a:f1:4b:fb:dd:3e:b3:cc:71:
                    ba:22:28:2d:64:f0:36:86:c3:80:9f:26:ae:2f:58:
                    da:b3:bb:fc:13:b1:e1:72:13:9b:da:16:22:4f:19:
                    90:c5:c3:1d:4c:8a:b0:a5:58:82:de:17:86:33:ab:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:7B:E9:BD:69:1E:6D:F7:80:2F:95:47:5D:70:0B:D7:62:1C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/624ff661-6f73-31bb-813f-b64dbeff8dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:57:73:82:32:88:78:20:56:4f:9b:b1:5f:29:0c:13:09:9e:
         e5:82:d7:ce:ae:64:40:55:37:47:19:47:42:48:ac:22:32:f5:
         e2:83:d0:de:0a:6d:5e:da:07:4f:1f:a2:ff:16:d0:40:f8:31:
         6a:c0:aa:16:a5:d4:31:4f:4b:f1:eb:fd:2e:12:48:99:01:ee:
         6c:f6:a1:4e:1d:63:73:3c:2b:69:5e:0a:3f:0e:45:1a:04:80:
         12:b4:f0:4d:75:c7:a7:27:8f:1b:28:e6:26:c8:93:18:0c:73:
         e7:e9:06:06:af:1a:ce:f5:f6:da:5b:d3:d6:28:41:7d:31:ba:
         42:71:a8:5d:e3:ad:77:db:3c:07:ea:57:72:9e:19:2c:58:18:
         de:13:0e:91:1c:dc:96:35:9c:9f:d8:d4:c5:8f:14:57:89:94:
         11:6f:c2:f2:e6:f4:de:98:f2:61:3f:09:64:3d:c8:09:2a:33:
         bc:4c:0a:72:3f:6b:e1:16:7f:dd:87:6e:bd:75:cb:0e:24:3c:
         a3:a4:b5:89:81:ac:8d:37:de:a8:98:83:41:2f:80:64:b1:fe:
         62:d5:7f:8b:f3:e1:8e:e3:1a:58:3c:68:5d:64:42:e0:8b:2d:
         63:36:64:a3:03:28:8e:d2:f3:00:47:e1:0e:38:6e:99:d5:c4:
         7c:43:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:30 2026 by rpki-client