Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
File:                     570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa (raw, json)
Hash identifier:          IqsiFmKsmgxTHK8fnVrSx1Pm6/PwKFakQ9+T2vckAPg=
Subject key identifier:   6E:0A:27:F2:76:5D:6C:E4:9D:DD:F6:1A:67:2B:21:74:6B:BF:8B:04
Certificate issuer:       /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
Certificate serial:       010D0C9F4328584CDF3243EFAAD8DC1652A9F0C0
Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     16715
IP address blocks:        67.220.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:43:ef:aa:d8:dc:16:52:a9:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=1cbb39de-fea4-4114-bd76-bd3a4244c9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:29:ba:dc:ce:1c:5b:98:f0:79:fe:1a:33:
                    76:ce:5d:49:50:75:c2:47:78:7f:b4:82:05:16:16:
                    0d:54:0c:cc:49:a3:ea:8f:1f:1d:2e:43:90:b0:27:
                    45:d4:1d:9d:b4:a7:05:68:a8:a5:a6:0b:83:92:0b:
                    ea:8a:45:59:0c:42:97:57:0b:8d:ca:c3:38:c5:85:
                    c3:bb:d1:1c:93:43:b7:f5:aa:2f:10:1f:02:20:9c:
                    37:f4:e3:a5:2b:c9:76:a7:58:93:31:c7:9c:4b:e1:
                    be:d0:a7:75:2e:22:a8:d7:9a:9a:4b:d5:e1:4f:ad:
                    0c:bc:99:50:8c:43:e4:45:51:5f:b6:e8:9e:79:b4:
                    af:4f:3a:62:a3:39:5e:36:8e:35:fd:a1:f3:b1:f5:
                    0b:21:08:0c:db:49:52:79:23:f2:cb:87:2f:5a:99:
                    dc:30:95:c7:b9:36:4b:04:7b:71:07:12:fd:04:21:
                    75:7d:dd:16:60:a9:61:b2:c8:bf:af:36:cf:f9:a3:
                    58:be:66:6d:79:4b:6d:da:fd:dd:df:e8:d4:45:f2:
                    d9:7d:a0:83:7f:4c:0a:5b:fa:ed:07:86:89:78:5d:
                    0b:70:9a:7b:b4:2e:29:b0:0e:04:8f:61:41:e7:ab:
                    cb:89:bc:45:88:a4:8f:16:9f:4d:5f:f9:e0:1e:bb:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0A:27:F2:76:5D:6C:E4:9D:DD:F6:1A:67:2B:21:74:6B:BF:8B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/570da3b2-99e4-30cc-b6f5-ed0f399797fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl

            X509v3 Authority Key Identifier:
                keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ee:53:25:e4:8b:3f:0c:3c:32:89:40:77:3c:f2:a1:d3:b1:
         48:c7:17:35:37:88:d2:7b:96:ac:14:c6:1c:3d:9d:54:7a:ba:
         ab:df:7f:39:39:6c:ee:be:0f:eb:a0:56:f0:3a:7e:a7:c0:65:
         35:70:f8:49:74:50:eb:48:b1:70:80:c3:42:6b:4f:81:d1:fb:
         dd:72:65:9e:77:68:e8:d4:b4:7c:4d:0e:78:5d:46:41:f5:7c:
         03:b6:3f:05:b8:6c:2d:0d:d1:92:68:02:58:88:e5:16:12:9f:
         07:d4:9e:2d:a6:e9:4c:b2:cd:0f:58:dd:6e:b8:93:5d:49:48:
         24:16:e5:ed:dc:fc:df:1d:73:9c:1d:51:43:e4:34:34:a4:89:
         20:aa:94:0f:ff:32:4f:39:8e:89:61:42:4f:35:78:a4:8e:33:
         8b:75:44:9c:09:8c:51:0c:e6:72:13:b6:6a:13:c0:20:7a:aa:
         5e:92:8d:6a:bc:e1:ee:10:79:73:09:55:20:2c:de:29:25:3a:
         cb:ee:45:7e:ad:17:f6:21:2a:7d:76:98:84:69:7d:90:f0:4b:
         7b:48:3e:be:dc:27:75:90:ad:2c:af:4c:39:2c:7c:d1:fb:d3:
         f7:cd:8d:74:0a:f5:e0:65:87:63:06:18:25:f5:a6:9d:6d:be:
         99:3e:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:02 2026 by rpki-client