Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/c21ec598-4eee-36b3-892b-96082647c51d.roa
File:                     c21ec598-4eee-36b3-892b-96082647c51d.roa (raw, json)
Hash identifier:          GXzhgR8kum1eY82XcHRFl+FN8kK8iPJSkoiuiyG0GlE=
Subject key identifier:   67:77:A8:93:8A:88:47:78:09:37:26:3E:9E:30:47:68:44:14:E3:0A
Certificate issuer:       /CN=0af55262-eca7-4517-9ccb-1a0296435eaa
Certificate serial:       010D0C9F4328584D0EA7EBD522D2D38DA4C0A080
Authority key identifier: BD:69:18:99:02:C4:51:38:94:2D:5F:E2:77:19:AA:02:2A:18:E3:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/c21ec598-4eee-36b3-892b-96082647c51d.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     399700
IP address blocks:        66.97.168.0/24 maxlen: 24
                          162.33.184.0/22 maxlen: 24
                          185.212.5.0/24 maxlen: 24
                          2602:fc73::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:eb:d5:22:d2:d3:8d:a4:c0:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af55262-eca7-4517-9ccb-1a0296435eaa
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=3ce11860-f909-4fd9-bea4-a4310f086448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:c9:da:f5:3a:56:1f:67:27:95:6f:1d:60:
                    1f:de:0a:05:c5:85:53:06:c9:fe:2b:4b:01:a3:2b:
                    40:51:ee:0e:ee:7f:b7:36:c5:86:95:6d:b1:77:23:
                    08:60:d7:93:e0:96:4f:82:79:14:5a:b4:da:3b:2c:
                    38:cd:d8:b0:f0:7f:62:68:4c:38:5e:ec:6c:e9:b2:
                    4d:2b:7f:1f:d5:93:1c:4e:e4:8b:68:5a:f5:a1:a2:
                    70:11:44:12:c5:cc:eb:0e:15:b9:5f:3a:d7:ea:2e:
                    da:01:b6:dd:7e:8e:c5:5a:e1:81:3b:b0:b2:c6:55:
                    e0:a4:40:0d:f0:0c:0a:d6:cf:9a:cc:04:1d:e5:55:
                    b8:93:42:e9:3f:2a:04:79:3f:54:45:68:19:b1:5d:
                    04:61:5e:af:44:a6:96:8d:30:71:b7:d3:9f:92:4b:
                    06:4d:30:c3:88:1f:44:52:ec:fa:60:7d:fe:1a:ca:
                    06:41:03:8e:6b:c5:60:fa:03:59:f8:c1:a1:b1:89:
                    6d:7f:02:46:b9:23:43:5b:84:08:a5:81:11:96:31:
                    b2:3c:32:be:b5:6c:72:18:e8:85:f5:58:ee:d2:f3:
                    76:a9:1a:da:6d:c1:bd:0d:42:4a:2c:77:fc:fc:df:
                    e7:3a:53:73:91:9f:b2:61:cd:81:b5:f7:62:10:b5:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:A8:93:8A:88:47:78:09:37:26:3E:9E:30:47:68:44:14:E3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/c21ec598-4eee-36b3-892b-96082647c51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.crl

            X509v3 Authority Key Identifier:
                keyid:BD:69:18:99:02:C4:51:38:94:2D:5F:E2:77:19:AA:02:2A:18:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.168.0/24
                  162.33.184.0/22
                  185.212.5.0/24
                IPv6:
                  2602:fc73::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3f:fc:67:8b:e9:a5:8e:95:3e:84:4b:c6:08:98:7a:ae:5b:
         65:a8:95:fd:25:ed:a2:d5:52:54:7b:db:64:3b:87:6f:c5:d9:
         6e:be:08:e2:a1:4a:fc:51:3c:e8:5e:da:ef:35:9a:98:b3:ec:
         87:49:61:f3:71:f5:cb:58:29:b3:e1:8a:1a:fb:10:c7:8d:19:
         f1:0d:f7:fe:91:38:f8:87:20:20:b8:d0:7b:d1:e4:b8:8e:54:
         d1:7c:8e:97:5d:5a:d2:21:45:c3:48:61:43:b7:22:d2:1b:36:
         4a:ab:45:f8:b2:63:59:fb:25:05:33:7f:b6:ee:f8:ef:e0:e9:
         bd:53:a2:4a:cd:8e:06:bf:23:06:72:68:b7:ed:1f:39:96:37:
         b2:7c:6a:3a:ba:87:e7:bf:2e:21:39:d0:62:5a:fd:70:fc:d5:
         34:53:d5:e1:f2:cd:9d:87:e1:76:4d:95:99:31:72:0e:00:80:
         ca:99:cd:7c:80:3f:0b:7c:97:fa:65:a8:20:36:ca:74:5e:c8:
         33:fe:78:c8:6e:eb:e0:6c:d7:71:ac:bb:75:6b:86:87:bc:65:
         4b:4c:db:53:ce:79:d6:2e:f3:06:dc:12:81:95:66:ef:61:78:
         67:b7:ad:3c:b3:a4:cf:b8:4f:a3:31:19:fa:b0:f8:20:6a:7e:
         2c:82:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:34 2026 by rpki-client