Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
File:                     e3dc55cb-0879-31e8-a693-dfd120efdccb.roa (raw, json)
Hash identifier:          dRjDk04mRjB2jJGTwQvWVdbsBBIZKxv4OHAxfFBsu4A=
Subject key identifier:   AF:3A:F0:77:2A:B2:A1:AD:9E:6C:D6:7E:32:C0:75:9C:6E:04:7C:22
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CED23557F4E04D5F07D5B6000
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
Signing time:             Fri 20 Feb 2026 13:52:25 +0000
ROA not before:           Fri 20 Feb 2026 13:52:25 +0000
ROA not after:            Thu 21 May 2026 12:52:25 +0000
asID:                     4922
IP address blocks:        70.32.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:23:55:7f:4e:04:d5:f0:7d:5b:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb 20 13:52:25 2026 GMT
            Not After : May 21 12:52:25 2026 GMT
        Subject: CN=4e97b7f5-6593-4317-aaf8-2483eda89e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:2a:15:97:d8:aa:a1:02:6b:cc:67:14:63:
                    da:a4:74:20:d0:e5:b0:f8:ba:a6:fa:fe:d5:44:d5:
                    5b:a0:15:33:d7:de:99:c2:83:88:22:47:f0:b0:f1:
                    1b:75:0a:e3:23:51:98:8c:cb:fc:70:a1:e2:12:99:
                    59:e1:0e:6a:6f:43:34:4d:04:fe:e4:b8:06:a1:61:
                    a4:e5:c7:c3:76:1c:82:69:68:be:94:e9:f8:ab:c3:
                    9f:c5:1c:c9:f1:b1:6a:c0:ae:78:5f:1a:6a:5c:e5:
                    9e:cc:f4:15:54:b1:a6:2e:b1:80:16:6e:9c:fa:c8:
                    03:37:68:22:dc:d3:09:3c:6e:3d:3e:16:b0:7e:00:
                    59:d0:0b:d7:21:88:6a:01:e2:12:78:53:0f:ed:03:
                    54:20:9d:49:5e:37:6c:83:d7:b8:aa:d9:4f:d9:3e:
                    19:5b:65:d7:bd:dd:4a:f3:4b:5a:93:fd:1e:25:07:
                    b0:e5:42:1e:56:e1:14:54:83:8f:ce:56:f3:83:f4:
                    05:ad:7e:42:05:00:09:07:99:b4:87:a1:4c:4a:9b:
                    5f:36:ac:a8:06:04:05:b8:a0:fe:3b:6e:7b:e6:97:
                    c6:cc:13:47:9b:b8:18:65:95:7d:d6:d9:15:6d:59:
                    9b:ee:15:eb:af:c9:84:28:a9:67:1b:3e:2c:c2:b8:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3A:F0:77:2A:B2:A1:AD:9E:6C:D6:7E:32:C0:75:9C:6E:04:7C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:65:94:17:fb:25:5d:40:b1:34:5e:8d:3c:31:6c:72:dc:fe:
         40:76:d1:76:a7:0a:73:c0:78:aa:4b:e6:11:0e:87:f3:84:4c:
         3d:de:ae:cc:53:7c:8a:a2:c6:60:b3:cf:42:57:00:08:88:c6:
         f9:c0:2c:50:9f:4c:b4:31:4a:aa:2d:68:11:e3:67:70:a2:ed:
         a3:77:d7:e4:ed:b4:8a:4d:02:0e:58:8a:37:c5:11:b9:53:d1:
         fa:4b:4c:94:56:b4:dc:41:f6:56:af:43:1c:de:12:5a:56:ea:
         d7:19:3c:51:95:e6:60:be:bf:2b:8e:72:f5:53:9e:55:04:1b:
         03:8d:28:c0:a9:75:92:f1:bf:3f:f3:85:9e:8a:f9:0b:3d:bc:
         6a:87:f9:c6:e8:ee:bb:f0:fe:bd:d1:f5:6b:f4:17:40:58:89:
         67:5d:7b:b6:e9:80:4c:3b:af:83:e2:e6:f3:fc:5b:2c:43:45:
         f4:d2:91:47:b4:6c:8d:5a:75:4c:17:ce:6e:5d:db:d7:1f:5a:
         86:fb:7c:f3:a9:5f:89:82:c8:4f:12:7e:0a:bf:15:e4:14:05:
         34:5e:0d:74:7f:73:16:7d:a8:a4:4b:35:61:eb:b8:23:6a:36:
         b0:ba:77:75:68:99:dd:84:05:0d:a3:be:ed:f3:5a:a1:fe:79:
         28:00:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:18:56 2026 by rpki-client