Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f726481b-274a-313e-9b01-214590e1ed7e.roa
File:                     f726481b-274a-313e-9b01-214590e1ed7e.roa (raw, json)
Hash identifier:          dXw+odAnJzMUfgaPd6YSVBO1aATHTpifpSvb71xSh6o=
Subject key identifier:   C0:A1:82:59:A3:8E:73:5B:46:39:38:B7:6A:0A:D6:28:89:61:6C:10
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF4AB58BB1A2A91B90C275F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f726481b-274a-313e-9b01-214590e1ed7e.roa
Signing time:             Mon 23 Feb 2026 06:37:07 +0000
ROA not before:           Mon 23 Feb 2026 06:37:07 +0000
ROA not after:            Sun 24 May 2026 05:37:07 +0000
asID:                     11611
IP address blocks:        64.51.240.0/20 maxlen: 24
                          66.167.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:ab:58:bb:1a:2a:91:b9:0c:27:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 23 06:37:07 2026 GMT
            Not After : May 24 05:37:07 2026 GMT
        Subject: CN=6d071659-3465-4492-a15a-f1d949dbbaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:ed:7d:4b:4d:7f:f0:9a:2d:d6:9a:5f:1e:
                    fb:c5:db:bd:39:03:6b:2d:6c:e5:2e:ad:4b:32:60:
                    55:07:a0:e9:c0:76:99:92:33:a4:2b:73:25:36:c9:
                    7b:f3:a6:dc:fe:9f:72:4b:db:e7:c6:e7:33:27:3a:
                    8b:34:25:91:43:e7:7a:b0:89:20:0a:6f:19:1b:fd:
                    97:52:36:d0:8a:94:92:b4:04:fa:45:04:be:b6:cd:
                    af:71:0c:07:c0:a1:f6:00:5e:67:7b:48:69:86:b2:
                    e0:e3:0c:75:72:9e:13:30:9e:9d:7a:f4:7a:63:97:
                    1a:62:7e:89:96:45:34:09:5a:67:93:54:ef:e4:cb:
                    d3:d1:93:47:45:8e:1d:fe:1b:89:71:6d:ab:dd:53:
                    8d:2b:8b:05:28:bb:45:4a:a9:0f:9e:32:c6:00:34:
                    41:52:78:01:62:d2:49:0e:13:c1:45:7c:a3:7d:a0:
                    5e:8f:3e:62:96:b1:ae:9e:39:c3:6d:1e:f0:85:ff:
                    99:0b:aa:88:8f:74:7e:2f:04:09:29:88:e0:be:43:
                    39:d1:0a:01:f1:72:0e:e3:52:ca:e8:86:fa:1f:98:
                    82:37:cb:77:5b:c2:df:8a:d5:92:66:a9:e4:a7:6d:
                    46:5a:00:d8:ea:98:aa:38:99:8c:29:09:04:41:76:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A1:82:59:A3:8E:73:5B:46:39:38:B7:6A:0A:D6:28:89:61:6C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f726481b-274a-313e-9b01-214590e1ed7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.51.240.0/20
                  66.167.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:d8:aa:f7:77:8b:ab:80:40:6b:9f:cf:17:6d:fc:35:5e:ef:
         f3:2a:b6:97:48:b2:98:7b:d8:dd:ed:5b:43:9a:54:cd:13:9a:
         a8:6d:2b:41:8b:19:37:b6:39:55:de:62:09:32:73:2b:44:39:
         2c:18:0e:0a:83:cd:db:2c:5d:01:70:d6:2c:b0:04:14:e6:d3:
         23:95:f9:9a:2d:91:d4:65:cf:1e:d0:2f:d9:9d:bc:03:9c:f6:
         32:4c:17:6f:c3:bc:73:d1:db:ac:43:cd:ea:4a:29:87:30:5a:
         45:62:75:18:0a:37:52:7a:ea:b9:2a:13:c7:6c:33:ef:e1:35:
         78:db:c9:91:d3:21:e4:ea:79:57:19:d0:d8:5d:2e:ce:36:e7:
         fc:67:e8:f1:75:1a:66:be:81:f3:70:6e:45:86:04:66:a0:ec:
         7c:1f:3b:1a:b1:e9:a8:c2:ed:55:7c:f5:03:e2:c0:8a:78:24:
         1e:bf:24:2e:28:3a:2a:88:25:45:69:7a:b2:20:7b:76:cd:d4:
         93:1a:27:e4:77:28:9d:e2:ca:d2:78:40:99:7c:1d:49:c7:2d:
         77:42:9c:87:bc:ee:48:ab:49:e3:93:ef:2d:ae:ce:b4:d5:48:
         6f:a0:9f:41:65:f4:f6:92:cd:05:e6:52:80:fd:ed:33:57:28:
         83:84:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:29:07 2026 by rpki-client