Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/82d9812c-3837-3030-b790-8c5bbea8e431.roa
File:                     82d9812c-3837-3030-b790-8c5bbea8e431.roa (raw, json)
Hash identifier:          uHxgvFg86+QGTqa8yd5vXH232XJCzocM/4oxx35ttKk=
Subject key identifier:   91:64:55:E2:05:B6:86:B6:2C:DC:39:64:59:2C:C9:A2:45:EF:FD:AA
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584CFDE7AE8E9027E1BC48E12FA0
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/82d9812c-3837-3030-b790-8c5bbea8e431.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     54113
IP address blocks:        66.211.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:ae:8e:90:27:e1:bc:48:e1:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=9ca3e5ad-ba88-4d85-888b-614d569ba423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:a9:a1:fb:29:9f:0e:9a:a9:32:29:de:e3:
                    f7:34:de:8f:21:55:a6:9c:3e:a3:b5:7b:87:27:8e:
                    e1:ab:1b:ae:a9:07:72:56:9a:42:aa:8c:10:9f:19:
                    43:74:6c:15:0f:71:02:c1:2f:ac:3d:95:1f:07:bd:
                    36:34:3d:9d:06:57:c6:ce:62:f7:f6:34:10:58:ab:
                    2b:f3:35:26:61:78:fa:0f:f1:73:44:be:42:aa:c1:
                    61:05:1e:0a:94:47:e4:e9:20:4d:02:3a:4f:2d:77:
                    e7:a7:4c:3c:99:b7:00:c5:7a:1b:31:79:e1:f1:53:
                    6c:dc:2d:59:a7:30:34:1f:63:6e:9c:b9:d6:1f:14:
                    15:57:02:e1:ea:bf:ea:d9:f7:3c:1a:fa:ee:9e:da:
                    26:04:28:48:78:79:5d:35:5d:cc:a3:19:e6:fc:d8:
                    d9:e7:29:86:f8:ea:26:0b:1b:2c:e4:a4:ff:c5:4d:
                    46:2a:3a:56:3a:c1:49:6d:16:3c:60:c7:5a:46:6f:
                    59:94:ac:91:e2:6f:e0:ed:ff:18:03:66:95:97:6c:
                    ac:6f:bf:d0:11:6f:2b:16:96:84:45:bb:ca:f2:5d:
                    3d:14:61:88:50:a1:50:bc:20:1e:74:38:35:ef:fc:
                    c6:e0:8e:65:b7:8e:6d:ae:01:e4:0d:f2:9d:2c:a1:
                    ac:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:64:55:E2:05:B6:86:B6:2C:DC:39:64:59:2C:C9:A2:45:EF:FD:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/82d9812c-3837-3030-b790-8c5bbea8e431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.211.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d6:8d:1c:6d:5f:d5:4e:fa:3a:0e:8a:7d:6b:2e:fc:a6:41:
         93:a9:4d:93:9d:e0:d1:2c:8a:1f:73:ff:58:ac:04:2f:8f:f2:
         d8:aa:4f:4e:fd:56:0b:37:04:59:0a:82:db:ef:37:b3:13:ff:
         38:16:1a:bf:a2:c5:90:86:1e:3a:38:5a:a9:0f:35:fd:e3:a9:
         ae:a1:50:52:92:7b:6f:fc:14:c4:ea:8b:25:6c:8e:e9:fe:8b:
         46:2b:0a:48:03:24:46:7c:dc:3a:67:56:87:e7:6c:27:2d:67:
         52:48:3a:a7:ed:57:12:df:f5:68:23:73:cd:d4:39:21:0c:8f:
         20:a6:67:a1:5e:fe:21:13:ec:8c:df:f1:29:63:80:be:1b:13:
         fa:7e:fe:a6:cb:0b:ef:a6:07:ad:af:e9:57:c0:f7:5a:0b:94:
         29:75:ca:4d:d8:64:80:6c:e3:8d:3c:e2:61:44:3c:07:c8:09:
         69:29:cf:e8:71:6d:e0:56:d7:40:9d:4c:55:66:68:06:95:96:
         0c:12:18:1f:2c:25:2b:48:84:d2:84:42:68:e7:b5:3f:cc:72:
         fc:b9:0a:ac:44:68:74:1b:97:53:de:2e:51:a4:e5:6e:6a:41:
         da:d5:ec:d8:af:73:ca:bb:fb:98:4c:c1:4f:b3:e1:36:6b:60:
         6a:e5:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:24 2026 by rpki-client