Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
File:                     e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa (raw, json)
Hash identifier:          klDcjkpvQpsBTiCaEfzam0Ui0Ym71dVF3Zsl5rkMHhg=
Subject key identifier:   DA:F7:5E:AF:AD:C9:3D:CE:2B:44:86:B7:6D:C3:B3:3F:D5:33:5A:CA
Certificate issuer:       /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Certificate serial:       010D0C9F4328584CEA5CE11D9161B0D8D7966680
Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     23465
IP address blocks:        66.44.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e1:1d:91:61:b0:d8:d7:96:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=acfb98e9-7556-446a-bbee-a2b9195f1c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:d0:03:12:85:45:bd:c4:2f:74:7c:a3:6b:
                    1a:ab:3c:59:03:d4:56:14:f6:e5:a9:a3:48:1b:29:
                    9e:c9:9e:dd:5d:bc:9d:49:fb:f3:22:a3:f4:51:d5:
                    a0:3c:35:f5:de:29:6d:3f:c2:3b:d5:0c:e3:db:36:
                    00:b7:38:93:3a:8b:df:7c:a2:8c:90:6c:2a:60:81:
                    89:1f:f8:ca:b8:be:ff:eb:41:a3:51:82:b1:68:8f:
                    fe:1e:2e:97:cf:1f:da:26:6d:97:04:fb:a1:3e:a8:
                    43:40:aa:de:c5:43:e9:99:90:b7:66:fc:b1:63:f8:
                    b5:ae:46:c6:05:bc:12:cf:20:aa:5a:4c:ac:2a:f9:
                    ad:30:96:5d:b8:70:70:2a:b6:5e:73:33:cd:84:17:
                    b8:3b:4f:54:a7:93:58:33:17:f0:98:d3:2d:fb:bf:
                    4b:c2:ec:f0:6b:c9:e1:23:c7:98:4f:9a:2a:a4:c3:
                    ed:fa:f7:64:c3:3a:5d:33:ac:c6:b5:2e:ef:65:36:
                    59:4f:b2:74:c7:4d:ef:25:c3:8d:82:3d:a8:00:c3:
                    bc:9c:6c:f6:33:e7:ff:a4:d5:92:ce:b0:ac:42:57:
                    e1:93:9c:11:5d:59:a4:bc:45:e9:17:62:a0:7e:0b:
                    cb:2a:87:c5:d2:ad:5a:3e:56:02:7c:91:c3:8e:07:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:5E:AF:AD:C9:3D:CE:2B:44:86:B7:6D:C3:B3:3F:D5:33:5A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl

            X509v3 Authority Key Identifier:
                keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.44.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1f:d5:85:e1:5c:b6:c5:6d:d4:8c:34:f7:d2:93:69:a7:a5:
         85:ba:6f:c9:57:6f:5e:f2:62:ff:19:db:b8:0e:6b:55:9e:b5:
         26:24:1e:e1:02:95:74:2f:95:5d:8a:b3:76:f9:87:c0:b3:5b:
         94:ac:eb:6b:93:23:5d:82:08:43:a9:47:14:75:fc:03:05:54:
         70:47:3d:ab:57:6c:e8:58:0d:d1:9a:af:30:cd:65:53:8b:24:
         f8:a9:d1:9b:68:02:88:46:81:79:93:86:e1:6d:44:f5:32:1b:
         de:33:a6:c0:a0:b7:2b:53:f8:f5:38:48:e1:95:a4:d3:47:12:
         f3:59:35:02:9e:25:a6:35:98:69:6b:6c:1b:02:32:08:ab:e4:
         c9:17:94:4d:47:ec:59:47:42:18:d3:49:ca:e5:aa:22:28:69:
         14:fd:f6:f3:9f:da:59:dd:b8:66:2d:21:a2:49:49:94:21:f7:
         a3:bc:33:af:8a:d4:36:56:f9:2e:a4:5b:a7:b6:8e:b0:62:96:
         e7:e4:56:02:28:9d:98:1f:19:8e:1e:3e:ef:6e:90:af:72:45:
         ac:f5:ac:15:93:62:f3:86:7e:a9:de:0e:5a:57:a1:53:b4:ca:
         c5:43:0b:19:72:61:00:3a:9e:3a:28:d3:fe:f0:73:d2:ca:5a:
         a5:4a:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:00 2026 by rpki-client