Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa
File:                     3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa (raw, json)
Hash identifier:          iY8k4kJd5YkPuhcoxJ2UTS/5DreMFszVjJUSK1m5AA0=
Subject key identifier:   77:9C:AF:F2:F6:01:21:0C:40:8A:AE:B7:70:3C:80:20:D5:3A:3C:9B
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CE4C7840FCAA55B0BAC219400
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     174
IP address blocks:        66.90.100.0/24 maxlen: 24
                          66.90.103.0/24 maxlen: 24
                          67.159.10.0/24 maxlen: 24
                          198.16.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:84:0f:ca:a5:5b:0b:ac:21:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=68d36d49-c5d8-471b-af77-e46f3fa0fed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:54:a2:78:23:cd:c6:04:08:d0:72:e8:eb:
                    ce:f2:56:3f:8e:4c:9d:3c:69:0e:67:4d:53:40:f7:
                    23:4a:18:a0:5c:d7:1f:5e:b7:24:c4:ad:de:74:24:
                    c8:68:55:e6:cc:ce:69:34:76:b3:e7:45:a6:e4:f5:
                    fb:4c:ac:3e:35:fa:2b:df:3b:98:2d:2e:42:98:e2:
                    d3:73:35:34:bf:2f:18:97:29:c3:7c:e2:ed:96:eb:
                    bb:a6:e7:d9:f2:51:f2:28:69:18:33:8e:00:90:61:
                    41:29:dd:91:34:68:01:40:81:77:0e:33:8a:f7:0c:
                    aa:b5:fd:f3:9a:40:4f:a2:e1:4a:8f:eb:bc:6b:ad:
                    ec:3c:83:d3:b5:cd:01:99:bf:99:6d:73:0a:ac:da:
                    03:c6:85:a8:db:37:5c:0b:fe:c4:a6:25:da:2a:8e:
                    7e:b3:dd:2f:ed:b8:ad:f9:2b:82:99:c3:83:41:ce:
                    6c:9c:cf:fa:3a:e3:d9:5a:d4:e4:7d:0e:63:6f:a9:
                    c3:e8:90:0d:c4:57:16:f6:50:9d:22:d0:e2:dd:2b:
                    c7:1d:aa:70:67:77:d4:f1:05:c4:c7:c9:e6:80:d5:
                    56:58:38:fa:15:52:6e:d3:4c:ad:27:62:08:34:55:
                    c6:3e:d2:59:39:6a:e2:c1:47:b7:35:75:2b:44:7a:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:AF:F2:F6:01:21:0C:40:8A:AE:B7:70:3C:80:20:D5:3A:3C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3ecb49d0-2b15-35af-88a6-ee313bf6ad83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.90.100.0/24
                  66.90.103.0/24
                  67.159.10.0/24
                  198.16.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:32:19:e2:d9:84:35:96:4f:99:44:b1:1e:00:55:b1:d7:e5:
         8e:77:ce:4b:9a:d5:ba:10:46:99:c8:b2:2c:42:2f:8d:ce:c8:
         6b:da:a8:55:6b:f8:e5:04:2e:03:a5:b4:73:9f:62:1f:74:21:
         22:2b:b7:95:2c:21:07:23:2a:85:15:d1:e2:1b:22:88:07:78:
         7c:63:81:ba:8a:23:d3:96:92:e5:33:b8:21:d9:31:8d:bf:07:
         1a:3f:21:8f:19:b0:a0:ae:93:00:ec:66:ea:5c:c7:1c:e8:dd:
         cb:78:9b:09:2a:7d:2c:8f:41:c6:37:a6:aa:89:99:cf:69:25:
         54:b5:71:b9:57:2f:05:3b:61:01:d3:95:55:8e:65:32:ba:e4:
         1c:28:5b:9d:1e:68:96:e4:0a:11:c5:c9:b0:98:d1:2e:49:56:
         34:9a:88:08:8a:88:6f:d7:0b:33:92:9f:23:2e:9a:86:95:4d:
         3b:79:5b:19:04:c9:30:c6:62:d3:2e:26:94:ae:9e:71:de:ec:
         b2:0a:d8:16:05:8e:22:15:4b:56:5c:82:d4:d6:2f:fd:3f:ae:
         b1:e9:15:8c:d9:61:b9:d8:e7:75:86:d8:d5:6f:06:d2:f7:5a:
         9a:ab:8c:22:ad:05:f9:85:6d:94:40:39:24:69:62:0c:96:ba:
         41:4d:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:36 2026 by rpki-client