Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa
File:                     1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa (raw, json)
Hash identifier:          wPKMgWgHf2w2lVvHuryeOtK8WbuZngCdUpqH/B+NO+o=
Subject key identifier:   EA:94:CE:E2:64:14:83:33:4A:A2:17:26:70:23:8C:ED:D4:29:66:6B
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584CF58783477F50045C8CC2C360
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     1403
IP address blocks:        66.254.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:83:47:7f:50:04:5c:8c:c2:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=df976d5e-a4ff-4beb-9d08-20fd525f5c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:61:a0:d8:f2:60:f2:08:db:c6:f7:6f:23:
                    11:fa:b1:ae:5e:bd:59:97:2a:e7:54:55:b6:f9:b1:
                    76:4c:c6:79:66:36:34:ef:41:47:c5:ca:08:da:3f:
                    a6:4f:1f:6e:fb:0b:47:b6:4a:4b:f4:97:97:ac:6e:
                    54:5e:9d:25:74:68:4f:00:7d:ac:71:21:b3:0f:4a:
                    28:e4:ee:a8:37:cc:b6:66:13:81:e3:b4:e4:a6:56:
                    c5:2c:6b:54:7d:d3:ad:7d:9e:97:d8:2d:10:fb:2d:
                    70:c5:4b:7d:4b:be:cf:88:f0:8f:b7:c1:7e:52:c2:
                    3a:af:9e:c2:c5:93:3e:52:07:3a:60:4b:f0:a3:8a:
                    b3:2d:3c:38:29:2c:92:5f:c2:cb:11:b1:ce:c8:ec:
                    22:85:98:67:81:1a:e6:a1:92:9c:55:5f:31:24:82:
                    e8:76:d4:36:5a:a1:32:ff:32:9a:02:71:d0:82:7f:
                    89:4a:01:e1:be:6e:60:da:da:57:81:b5:45:d0:94:
                    ae:b6:c8:64:b4:9a:9a:bd:38:51:bd:68:a3:0a:07:
                    43:ab:d7:d0:1f:4e:18:3e:8b:c4:e4:84:5e:94:ab:
                    56:14:99:de:da:4b:f5:c2:ed:f4:52:c5:38:13:5f:
                    da:30:6f:39:a7:4f:6c:72:ce:8a:f2:bc:36:b8:10:
                    a1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:94:CE:E2:64:14:83:33:4A:A2:17:26:70:23:8C:ED:D4:29:66:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1ac6d3e9-5050-3e2c-a324-0899e3c52397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.254.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:55:01:4f:4d:90:dd:80:be:ed:a4:c6:df:f0:07:5a:e0:c1:
         22:41:dc:14:de:8e:7a:38:a5:ce:69:b4:8c:51:67:ce:b3:14:
         1a:3e:0f:d2:c7:88:7d:52:89:ca:ce:b8:ae:46:ee:af:53:a4:
         bf:7f:f4:d5:f7:16:1f:b1:f8:dc:8b:54:6c:cb:af:a3:7d:df:
         b4:2d:3d:e7:89:7f:48:c8:fc:c7:8d:7f:6f:1a:36:73:7a:23:
         77:1a:cc:f2:91:32:1b:ce:a3:b8:48:0b:99:00:4a:eb:11:a4:
         d6:5b:47:a0:2a:ff:fd:af:66:0d:da:fe:5d:ee:d0:69:cd:48:
         4e:29:c9:de:ed:52:59:22:f4:f9:b2:61:68:d4:56:83:e0:47:
         9e:6d:4a:9f:ed:1d:3e:59:d6:3d:d2:ab:55:16:a9:d8:d0:75:
         fc:bf:fc:88:1f:e8:2d:f0:26:5a:11:88:7a:53:3f:7c:bc:0d:
         d9:d3:61:fc:ee:93:32:6c:55:28:89:e2:b3:5b:c0:64:e4:7a:
         6e:01:e3:70:1c:12:cb:26:9a:6f:45:e1:3b:46:8f:5b:d3:9f:
         04:0e:02:3a:71:5a:73:1d:db:e0:4d:34:ca:be:71:6f:db:52:
         99:16:b0:b9:10:ff:42:53:1c:f3:06:e5:f8:13:7a:43:53:64:
         52:62:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:04:19 2026 by rpki-client