Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa
File:                     80500266-8498-3e87-8f03-0ab380bfd9ee.roa (raw, json)
Hash identifier:          99grxQL3b+xTRoquysuT6jPG9BLiahuI535iekgUoOw=
Subject key identifier:   BD:93:02:30:BC:10:00:37:0D:FC:40:D3:B8:A3:9A:52:94:48:06:D1
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584D20AF574546265C498E4CE040
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     213122
IP address blocks:        66.118.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:57:45:46:26:5c:49:8e:4c:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=c9807270-c70f-4f67-a78e-503b15f07a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:b8:74:2b:f2:52:4d:8d:5a:72:a9:a6:b1:
                    d1:28:78:5b:b9:73:9e:65:9c:49:4f:2a:47:b6:1c:
                    e5:c7:73:dd:04:a7:73:99:78:d1:f7:15:8c:cf:45:
                    1e:40:38:c1:f1:4b:5b:52:d9:82:5a:6e:08:62:e5:
                    46:32:0c:ff:11:1b:9f:74:ce:3a:53:1f:32:4e:4e:
                    25:23:4a:ec:9e:87:32:ad:fe:f8:a7:28:60:10:70:
                    29:a1:d3:0c:99:39:15:6b:75:28:0d:8f:5f:9a:7e:
                    4c:22:14:01:b9:88:a8:88:32:6f:13:ef:20:68:d1:
                    a4:5b:fe:76:4f:07:da:7f:d8:3b:c3:bd:77:d3:a2:
                    b4:95:31:b8:fe:d2:39:0a:bf:4e:31:4d:46:ad:51:
                    65:83:9a:bd:36:e5:24:8d:76:8d:41:70:15:23:98:
                    97:63:e8:dc:88:ec:2c:09:38:71:89:d8:c3:49:2c:
                    dc:41:78:73:d3:b1:45:5c:a7:69:d3:b8:df:d8:91:
                    3e:80:8a:8d:ab:1f:75:aa:75:15:f5:eb:4b:e8:db:
                    cb:f6:fd:da:34:a3:8f:10:0d:d1:aa:b2:d3:53:39:
                    6e:e0:0b:76:47:da:41:42:80:7b:57:58:8b:b5:52:
                    5e:ee:e7:3b:de:51:32:bd:63:17:91:13:42:12:0a:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:93:02:30:BC:10:00:37:0D:FC:40:D3:B8:A3:9A:52:94:48:06:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/80500266-8498-3e87-8f03-0ab380bfd9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:e9:4f:d6:56:5c:de:a6:d3:9b:17:f9:b9:46:5f:de:7d:
         d0:b7:64:61:eb:78:9d:91:88:0f:99:87:92:c0:70:ce:6c:2d:
         37:6d:8d:0c:0f:2e:97:30:76:dc:9a:d0:b1:a4:56:96:eb:d0:
         7a:e0:62:38:e4:99:27:cc:9f:bb:91:64:17:66:61:ef:e6:45:
         23:a3:c3:6f:31:05:37:b0:01:ae:e6:4b:3e:0b:e7:fc:d3:58:
         dc:1e:f7:fe:72:0e:2c:d1:c7:da:37:c3:51:f2:17:36:39:e2:
         4c:2d:1c:13:f8:d2:fc:65:f5:41:25:92:55:12:b5:4f:75:aa:
         92:fc:7a:8c:10:68:00:7a:db:a7:34:b7:cf:ee:78:da:be:8c:
         85:b2:f2:11:d2:84:e1:34:ef:61:14:51:4e:a7:4f:87:57:23:
         40:8f:e4:a8:0a:82:1b:3a:f6:46:31:3a:d0:ce:24:40:d6:d9:
         4a:37:72:b9:70:8f:75:e5:1e:57:eb:e5:07:ab:a7:6b:66:0f:
         66:49:f9:5e:96:ff:dc:77:b6:3f:a1:ec:06:b5:32:8c:0c:f0:
         fb:be:e0:00:92:98:0e:b4:b5:89:d1:e7:46:47:b5:9f:7e:8d:
         34:22:75:8d:bd:83:2f:81:70:eb:9a:dd:b1:86:d4:a5:18:23:
         11:d6:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:35:13 2026 by rpki-client