Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f9a95a49-33a6-39ce-9531-5a7d1b0c64ff.roa
File:                     f9a95a49-33a6-39ce-9531-5a7d1b0c64ff.roa (raw, json)
Hash identifier:          xWRBBDS5lQivxhIVKgELpIxLZGGgSMvdkyAqojqf3r8=
Subject key identifier:   59:86:C1:D1:35:B1:F6:B4:38:FC:BC:AC:F7:41:FA:E1:36:E8:9E:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CF6F312CF876E00C363F775C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f9a95a49-33a6-39ce-9531-5a7d1b0c64ff.roa
Signing time:             Tue 24 Feb 2026 02:13:15 +0000
ROA not before:           Tue 24 Feb 2026 02:13:15 +0000
ROA not after:            Mon 25 May 2026 01:13:15 +0000
asID:                     397067
IP address blocks:        64.83.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:f3:12:cf:87:6e:00:c3:63:f7:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 24 02:13:15 2026 GMT
            Not After : May 25 01:13:15 2026 GMT
        Subject: CN=5138d186-697f-4e90-b540-2ddc4f934a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:c8:8b:bd:a0:f6:49:37:d7:c2:82:8f:70:
                    d8:69:ae:e4:31:bb:cb:21:88:76:80:96:a7:a9:4b:
                    d0:14:42:1c:39:99:37:f2:1f:af:15:3f:21:04:0d:
                    3e:42:eb:aa:3c:6e:5c:5c:2d:87:0f:67:7e:45:de:
                    31:44:37:eb:f3:98:fd:d6:99:4c:af:27:06:9c:de:
                    6d:41:e9:26:f5:f3:3a:10:6a:0b:66:97:1b:8b:d6:
                    73:72:73:04:80:f2:fe:cc:bb:bf:5d:35:cd:93:46:
                    0d:c5:95:61:f2:70:d8:5d:96:46:f1:ef:3f:b8:27:
                    8f:c8:91:2e:e9:32:c2:a8:a2:3a:e4:18:39:ea:dc:
                    81:6e:d6:43:60:56:09:19:75:0d:ed:da:09:e6:c3:
                    3e:e2:6c:fd:8d:c9:47:67:92:27:81:6e:d3:dc:fa:
                    db:97:f5:c5:cc:e8:49:6e:30:ac:36:fd:22:80:d4:
                    e1:ca:ae:31:de:00:2a:31:d5:1f:5c:2b:90:70:58:
                    b8:21:a9:3b:1e:ca:82:00:1e:86:71:cf:b4:5f:ab:
                    2c:9d:ab:7b:41:86:4d:50:60:0b:fa:72:b0:a5:c5:
                    a1:d7:a9:43:17:59:58:c4:c4:01:27:e5:06:c9:41:
                    8a:91:68:35:61:d6:88:bb:ff:9b:9f:b8:e7:69:0f:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:C1:D1:35:B1:F6:B4:38:FC:BC:AC:F7:41:FA:E1:36:E8:9E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f9a95a49-33a6-39ce-9531-5a7d1b0c64ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:69:f3:66:0c:69:e6:6f:cc:68:16:9c:4c:f0:fe:02:73:
         ad:ba:5e:fa:a3:01:c5:b4:a3:05:76:65:26:76:dc:37:51:51:
         c4:0d:66:46:8e:25:0a:df:f4:62:61:e0:d7:bc:be:0d:e5:e0:
         d3:90:47:50:29:50:51:bf:78:8a:6c:e6:e5:95:e1:aa:77:ef:
         28:00:26:ca:b0:8b:bb:5e:cc:58:f6:f8:18:21:f3:8a:98:df:
         3e:70:69:e9:c9:f7:b2:9c:08:14:83:fc:34:71:bc:8c:d9:be:
         6e:b1:cf:c6:df:19:00:52:ed:19:d1:b7:96:81:5b:2f:d8:48:
         61:30:ca:cb:ef:81:2c:01:a8:d1:ae:d7:4e:64:90:78:64:48:
         62:b3:05:39:94:be:8c:17:49:fa:58:2d:c1:ec:d5:3d:da:a7:
         5d:72:d5:5a:fd:92:4e:c4:33:39:13:84:3f:76:c7:b8:d1:81:
         8c:c7:a4:52:11:19:5f:c7:70:7d:3d:0b:8c:9d:67:9f:33:43:
         84:46:23:cf:d3:2f:cf:33:5b:9d:d8:25:7f:74:9b:85:51:e0:
         87:87:d4:3f:6b:34:50:30:f2:87:2c:bf:8a:2e:f7:7d:4a:86:
         59:72:2a:7c:9f:ee:a0:ad:d5:88:0f:83:46:65:a4:d0:11:5b:
         aa:ef:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 05:44:20 2026 by rpki-client