Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/cc57c2e5-21b4-3a94-a9a0-82b33e3e7b68.roa
File:                     cc57c2e5-21b4-3a94-a9a0-82b33e3e7b68.roa (raw, json)
Hash identifier:          NtZaU2Z3gjEATxsTjp8uL0cAJm2S6E9aD5obOBFFoSc=
Subject key identifier:   64:E8:F6:D4:25:40:57:A3:43:4E:21:76:AF:19:82:4A:36:28:8E:F7
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584CFAF51572F1FDB2D640266100
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/cc57c2e5-21b4-3a94-a9a0-82b33e3e7b68.roa
Signing time:             Wed 25 Feb 2026 12:40:32 +0000
ROA not before:           Wed 25 Feb 2026 12:40:32 +0000
ROA not after:            Tue 26 May 2026 11:40:32 +0000
asID:                     7201
IP address blocks:        67.214.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fa:f5:15:72:f1:fd:b2:d6:40:26:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Feb 25 12:40:32 2026 GMT
            Not After : May 26 11:40:32 2026 GMT
        Subject: CN=f57626da-de97-4b27-8b6a-2ef09a5a11b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:63:8c:2d:43:29:11:fd:5f:32:fa:d5:81:d9:
                    df:fa:14:d5:8e:64:1b:df:6e:82:94:05:d7:87:cf:
                    a1:20:6a:4c:0c:5d:ef:d6:01:92:e0:69:98:e9:2e:
                    a9:ad:72:d1:4b:1b:40:69:8d:2b:4c:ad:cf:e0:77:
                    e5:bc:95:80:dd:b1:2a:43:9f:01:fa:a7:61:7a:6f:
                    e2:0b:4e:c5:24:e2:dc:33:c9:28:f2:17:85:7b:41:
                    6d:bf:35:d4:46:cd:d9:24:ba:1c:16:9b:6c:6a:eb:
                    1e:55:44:bf:23:6c:1e:37:99:ce:6b:db:71:cd:57:
                    3f:93:aa:51:10:fc:06:79:3e:90:68:15:09:a5:19:
                    0b:fa:5c:c9:03:08:68:6d:f4:36:48:8b:94:a4:ec:
                    ea:89:6c:9b:56:be:eb:dc:79:98:4b:5c:ca:d2:1a:
                    d5:66:70:fe:1f:32:03:d9:40:88:2a:16:b0:bf:9e:
                    63:39:be:5c:87:b4:ad:28:9a:8b:bc:6b:b6:2c:79:
                    12:a1:e7:6a:de:d7:12:5f:8f:8a:69:60:da:f6:97:
                    9f:c2:79:7e:26:0e:ce:d7:a3:5e:23:b7:5c:29:af:
                    a5:04:44:a0:31:70:d9:fd:d7:79:bb:65:1b:95:3f:
                    2f:a7:2c:36:8a:31:dc:81:10:30:e1:80:8a:5f:5a:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E8:F6:D4:25:40:57:A3:43:4E:21:76:AF:19:82:4A:36:28:8E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/cc57c2e5-21b4-3a94-a9a0-82b33e3e7b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b8:88:ef:83:ff:53:6e:57:66:ad:67:43:35:2a:d0:e5:7d:
         b5:3b:d8:2a:73:fa:02:54:e8:0b:55:84:f1:85:0a:df:9a:1e:
         07:1c:96:5f:9d:d5:57:0c:6c:c2:71:64:f8:3a:c9:27:53:14:
         1a:21:ee:36:5f:27:d7:db:c2:30:e9:5e:59:93:0f:60:61:61:
         fc:93:0d:76:a5:27:a7:38:ba:78:b2:36:84:6d:3b:37:8c:48:
         35:f2:27:2c:b0:46:92:30:d0:ac:26:70:77:59:59:3f:f0:de:
         6c:cb:f1:6c:9f:97:cd:9a:3e:ad:15:c6:74:d2:cd:13:af:fc:
         1e:2b:04:1b:2c:b4:67:21:92:f8:8a:c2:81:31:74:70:50:42:
         ec:83:c2:85:6a:e1:1a:ba:3b:d3:2c:12:1e:50:14:70:af:63:
         70:b8:03:59:3a:4e:df:da:f4:6b:f0:a7:30:2a:e9:cd:c8:ef:
         49:44:c7:6c:65:c4:fa:48:ee:8f:8b:91:c3:16:f7:1f:fa:3b:
         aa:23:30:17:a1:11:ec:ea:5d:6b:b5:c8:dc:16:4a:91:78:8b:
         69:76:0d:9e:73:04:f7:2e:5a:d8:d2:d5:c8:ef:07:4b:9b:59:
         3c:56:7c:dc:e3:cb:ea:cc:1a:d5:53:22:17:5d:90:3a:4f:d6:
         20:5c:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 11:12:31 2026 by rpki-client