Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/13a6716d-78f8-37cc-9576-1b71e4ddc0e7.roa
File:                     13a6716d-78f8-37cc-9576-1b71e4ddc0e7.roa (raw, json)
Hash identifier:          5swbM+GuJh/e0W485NbANX1YKIjcqV1qxqaE3QcHns0=
Subject key identifier:   A4:43:7C:CE:3F:47:CD:37:32:60:7B:F7:24:4C:03:C9:09:76:4C:ED
Certificate issuer:       /CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
Certificate serial:       010D0C9F4328584D3B34E19423649BE9D7D76100
Authority key identifier: E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/13a6716d-78f8-37cc-9576-1b71e4ddc0e7.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     400610
IP address blocks:        66.219.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e1:94:23:64:9b:e9:d7:d7:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633577db-b536-4aaf-b9a1-5bcbc598f2e3
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=1c009876-e5e4-4f99-8c31-5e76f14f69e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:b2:6c:9e:b9:2d:ab:56:e5:21:f7:f6:fb:
                    64:a8:c5:f4:18:ef:89:d7:12:f3:c4:4e:39:4b:9a:
                    7b:4b:c4:a5:8f:be:6d:e0:e8:3d:e9:9c:20:ce:f5:
                    b4:ca:44:c9:d7:4d:da:fb:6b:ae:3e:83:18:24:b2:
                    17:d0:a4:a1:7d:db:30:e6:60:10:60:46:73:e1:50:
                    10:80:e2:fc:a6:ab:1e:79:1b:18:e6:7a:dd:ee:40:
                    c0:9a:03:59:f0:c3:6b:30:2f:97:4f:f5:54:14:72:
                    92:11:7d:59:5f:df:b0:77:e5:33:be:1e:ea:a6:b8:
                    73:1b:9f:8f:76:3d:5e:35:62:75:1b:b4:cb:a3:74:
                    af:bf:5d:da:18:40:ce:f8:17:3d:d4:cf:fe:4c:eb:
                    ee:af:37:29:b0:68:bb:31:16:28:e4:52:e1:41:bd:
                    70:1b:fb:75:35:bf:6d:58:a6:90:d8:fa:d2:5b:19:
                    31:a1:05:2e:7b:26:7b:7c:57:f0:32:ae:61:27:a1:
                    3c:3e:df:57:20:f0:2d:51:fc:80:53:c8:8f:26:bc:
                    24:b8:ca:f8:36:be:a4:3c:0e:d8:4b:cf:b1:44:77:
                    33:da:af:5f:ca:8f:8d:9a:c2:fe:dc:81:01:06:e2:
                    9e:7f:c0:a5:16:9f:5c:fd:3c:1e:9a:2b:fb:11:66:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:43:7C:CE:3F:47:CD:37:32:60:7B:F7:24:4C:03:C9:09:76:4C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/13a6716d-78f8-37cc-9576-1b71e4ddc0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3/633577db-b536-4aaf-b9a1-5bcbc598f2e3.crl

            X509v3 Authority Key Identifier:
                keyid:E6:F8:FB:EC:98:60:8A:2A:11:11:66:BA:90:81:E5:E7:7A:AB:9F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/633577db-b536-4aaf-b9a1-5bcbc598f2e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:04:c4:38:10:a7:78:8c:72:7c:b6:e8:2b:c4:e9:b0:d0:38:
         cf:09:0e:a9:a1:45:a4:e8:29:0a:21:b1:17:f9:75:e5:ce:8d:
         94:19:1a:84:8b:59:8c:e0:7d:48:f2:0a:56:52:b4:6c:1d:51:
         1b:3b:af:09:0a:95:3e:96:c1:06:b1:da:ae:c4:ab:74:c5:e1:
         78:b9:86:ae:2c:fa:63:e3:06:c3:17:9d:a5:33:17:cc:d3:a1:
         be:ca:57:9f:22:58:ea:fa:30:21:60:b7:1d:79:25:eb:0f:f7:
         6a:4b:50:81:4f:50:dc:f5:80:91:0a:43:58:71:45:b6:93:75:
         df:ac:6a:9f:d9:3f:c2:a3:19:86:df:e5:4a:6b:a4:ec:9f:df:
         ff:4a:c8:f8:de:5e:a1:47:6e:de:e7:37:5c:59:01:ba:e8:b9:
         b2:25:37:6c:db:a5:85:ec:02:92:ea:a3:2d:2c:52:34:36:9f:
         df:65:fc:56:4d:6d:ec:7a:f4:a4:ba:5c:ff:a9:a4:57:c5:45:
         c4:ec:d0:f5:56:62:75:12:7f:29:3e:8f:a7:c1:ad:fd:4c:91:
         66:16:b7:f2:ea:a7:6a:68:a0:c7:55:fe:df:e0:9e:d8:c3:cd:
         ce:c6:8c:d2:f2:b4:3e:ab:0f:ce:b8:1f:2d:3a:4a:01:4f:f7:
         d1:9f:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:57:03 2026 by rpki-client