Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b46c4cd2-ad50-39e7-9018-9704388f04e1.roa
File:                     b46c4cd2-ad50-39e7-9018-9704388f04e1.roa (raw, json)
Hash identifier:          AwfersLKlJZz9YUbCj0G+S3zBiF1gxxSFeb+dD2/hWQ=
Subject key identifier:   8E:43:C8:E5:87:E5:A8:82:05:BD:3C:ED:4A:58:FC:1C:82:EA:F7:2C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A2573E755BC52D07008100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b46c4cd2-ad50-39e7-9018-9704388f04e1.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        66.203.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:57:3e:75:5b:c5:2d:07:00:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=1f6851d1-4777-41a8-b95c-024524db8d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:58:d6:48:e7:cc:74:43:9d:90:fd:6c:6e:
                    61:1f:43:0c:38:c0:e9:2e:c1:cd:b0:77:98:36:14:
                    65:16:9b:05:01:7f:ff:d5:54:1c:54:85:f8:d4:68:
                    35:05:25:ea:90:3f:77:ed:a8:f0:08:22:99:bd:61:
                    97:9e:fb:a8:87:6d:ff:26:31:d3:cd:ea:38:e9:9b:
                    7c:c3:2f:f8:98:da:c6:59:9f:50:7a:8e:3f:34:ff:
                    b3:ff:83:4e:20:2d:5f:f4:c4:eb:45:38:3d:08:db:
                    53:39:d3:d9:85:c2:78:1e:65:6b:21:fa:6b:31:f9:
                    71:95:7e:55:c2:4d:cd:ee:39:10:ec:c6:cc:3f:d1:
                    92:ea:7b:3f:3b:48:91:f7:76:9d:0e:72:4f:8c:7f:
                    92:12:69:c2:90:92:3b:f3:59:5e:8f:d2:69:ac:eb:
                    ae:d3:7c:f1:3e:bc:0d:0d:29:9e:31:c6:c4:b5:22:
                    c8:b1:42:00:a0:71:64:e7:f6:e9:4e:25:af:0e:e8:
                    fb:e5:1f:93:98:e3:33:c4:83:d1:0b:2b:b4:89:e2:
                    d1:17:47:4d:ea:57:99:c2:6b:d0:ac:b9:45:50:60:
                    36:80:de:d9:d1:c2:6d:b4:fe:e9:fc:a5:09:a3:87:
                    59:3b:94:58:13:ea:cb:0d:3d:c5:d3:6b:f4:d5:b1:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:43:C8:E5:87:E5:A8:82:05:BD:3C:ED:4A:58:FC:1C:82:EA:F7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b46c4cd2-ad50-39e7-9018-9704388f04e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:0f:af:1a:80:19:d9:98:3a:4f:f5:92:6b:bd:55:cb:e1:fc:
         45:41:ea:0d:ca:90:cc:9b:2f:7e:41:3b:f9:5e:d5:29:3a:39:
         a2:8d:cb:31:44:ce:92:28:4e:1a:94:e3:03:6f:8d:59:bb:fc:
         49:11:5a:9f:89:f5:e3:5d:e8:af:43:0a:60:01:83:14:9f:f5:
         bb:f0:4e:76:ca:1c:9f:0e:2d:47:1c:dd:b2:a2:75:3e:21:21:
         c7:bb:19:2b:73:60:aa:42:b4:8f:23:69:a7:93:da:7d:c4:40:
         7e:c7:04:5c:6e:b4:13:86:52:9f:a3:3e:da:75:c0:7b:3d:0e:
         f3:b8:bd:a0:96:28:19:64:a2:26:65:b5:ff:0d:49:76:e8:6f:
         15:50:c2:70:08:97:68:08:37:63:e6:1b:c8:93:bf:ce:75:62:
         c3:6c:3e:ad:8d:c5:81:cf:4f:9b:84:cb:ba:5d:f1:23:2c:88:
         39:69:b8:65:14:79:19:3b:f1:f4:cc:c3:14:b0:a9:46:13:3e:
         ce:29:00:96:5b:5e:56:3d:48:56:bd:db:82:a2:95:60:a3:9d:
         6f:26:78:be:86:41:e3:50:49:ec:57:6e:b8:45:8e:35:58:a9:
         29:00:5c:8b:ac:bb:31:51:92:ca:ca:db:72:2b:03:21:4f:fd:
         2c:3f:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:15 2026 by rpki-client