Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa
File:                     2176ae68-0f60-3e10-87db-4ff9df01701b.roa (raw, json)
Hash identifier:          HkDSPeh/LpHCONtx5ApBaNYoASj0gKo4UTfdVvAsAco=
Subject key identifier:   7D:CE:04:3C:E1:84:46:71:E5:90:D1:50:35:23:C5:3C:AC:08:BF:7D
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584CAE5716BC4C7739C0DDA00B80
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     53828
IP address blocks:        64.237.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:16:bc:4c:77:39:c0:dd:a0:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=5299bc19-4366-4a59-8683-df534524f359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:95:ad:62:73:1b:89:1e:7f:23:d0:2f:36:
                    11:c6:00:26:6d:5c:1a:8c:0d:45:a5:79:3e:72:b3:
                    5e:d8:88:6a:c9:cb:31:fd:06:95:bc:11:0b:da:f1:
                    32:1f:f8:20:1e:04:a4:cc:e6:74:c4:fe:6e:3c:d1:
                    96:42:04:e7:73:54:17:9f:ad:7f:59:3d:10:cb:11:
                    4d:c3:5c:10:17:7d:43:df:bc:99:e0:23:66:3c:5a:
                    13:7a:c7:a9:00:b4:19:25:62:14:7f:f0:fb:a4:55:
                    ad:38:56:7c:e8:7a:e0:8a:53:97:09:00:04:10:37:
                    37:ec:ab:84:54:84:08:bd:22:87:e0:92:79:25:79:
                    94:d9:09:38:60:c6:ef:78:c9:e1:09:50:3c:16:e5:
                    5b:38:85:29:4f:d5:76:45:ef:3b:32:c7:05:15:b9:
                    b7:c7:81:b4:fe:bf:25:73:9d:02:82:22:67:d4:07:
                    eb:bb:80:56:73:6d:d9:9c:50:39:52:24:cb:7b:6e:
                    97:99:58:28:e3:4c:4c:6d:60:1d:0d:b2:c6:18:56:
                    c6:ea:3d:34:ae:60:2f:69:f4:4e:55:71:a9:a6:ce:
                    24:c8:90:d3:52:f4:25:6f:35:26:33:85:aa:de:90:
                    1d:52:d2:dc:6a:bc:eb:17:fd:37:99:60:cf:90:64:
                    83:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:04:3C:E1:84:46:71:E5:90:D1:50:35:23:C5:3C:AC:08:BF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2176ae68-0f60-3e10-87db-4ff9df01701b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:da:19:e5:c2:51:e8:9b:71:63:f9:02:a5:ce:18:28:b3:1a:
         2b:29:31:3d:0a:35:a1:92:20:a8:29:6c:9c:92:70:9c:12:46:
         45:b0:41:8b:6f:48:f8:4e:81:b6:33:1b:82:48:2f:d5:21:4f:
         a8:be:da:36:2e:cb:8a:7a:b3:02:4c:37:04:72:ab:94:cd:43:
         e1:16:0e:bf:fc:70:6c:54:91:fc:f3:d5:56:af:1c:b6:29:68:
         ee:f7:23:12:fe:db:5b:c0:8e:9a:36:79:d7:aa:df:7c:b4:da:
         eb:1e:1d:24:b7:e0:a1:1d:76:02:a1:1c:9c:32:7b:77:0a:71:
         d4:c2:8e:a9:d9:bd:41:91:f3:d0:62:7c:25:7c:91:a0:6e:6c:
         56:82:ad:e9:bf:79:f4:06:7b:a7:fe:c6:9d:84:3c:2b:0d:6c:
         da:ed:8b:02:96:ae:1c:94:9f:35:07:68:00:17:c2:f7:99:6c:
         2f:3c:56:70:e8:0d:12:7e:6f:9e:51:e3:8d:46:db:46:0b:5b:
         8c:d1:31:77:66:a2:5b:d1:92:17:72:5a:c2:9f:ad:70:4c:9a:
         24:1b:7f:55:17:ab:81:ea:c6:73:84:20:79:49:e2:90:6a:65:
         8c:0f:93:df:e4:99:75:55:02:86:44:56:76:47:75:ab:a0:59:
         be:96:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:28:36 2026 by rpki-client