Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa
File:                     f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa (raw, json)
Hash identifier:          /eF7+xv47DyvJF2AgYNNcg3jAB+Nts3+anoDAuBFKtg=
Subject key identifier:   33:AA:71:3F:2C:4C:E2:62:EB:09:94:E7:07:44:1A:A0:99:E3:8F:00
Certificate issuer:       /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Certificate serial:       010D0C9F4328584D00B26DC4F48AE0C5FCF61680
Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        64.207.222.0/24 maxlen: 24
                          64.207.223.0/24 maxlen: 24
                          67.222.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6d:c4:f4:8a:e0:c5:fc:f6:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=66f72d39-a7e8-4c62-a22a-1272c1ad45df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:91:1a:86:0e:c0:4c:25:09:99:79:b4:3a:
                    3d:15:85:b3:7a:1c:e4:55:c8:ff:fd:0c:3f:c1:b5:
                    2f:b3:0f:a5:96:67:52:f6:8b:46:39:cd:53:a4:d4:
                    5d:35:17:74:e6:2c:ff:7c:ac:ec:85:cd:31:e1:3e:
                    84:17:c5:c7:6d:76:d9:b2:01:e3:bc:6b:88:88:52:
                    f3:f4:23:15:28:41:d6:10:14:a0:bc:03:10:9e:41:
                    75:5c:79:84:a2:a5:42:08:56:46:48:d4:93:4a:dd:
                    6d:cd:07:e8:e2:08:5f:e7:71:3a:1d:45:99:5a:67:
                    56:dd:93:28:82:66:e0:27:60:de:85:e6:92:fe:fe:
                    6f:55:a5:23:69:a5:48:de:bc:f5:9e:55:7e:50:ee:
                    45:bb:e5:c0:bb:4b:25:6f:19:61:ad:b8:40:33:be:
                    6d:36:f8:4e:1e:5f:7d:6e:8e:4f:4a:50:14:c4:20:
                    fc:40:2b:4a:64:12:cf:db:b6:86:2f:63:c5:f5:8d:
                    45:31:95:eb:5c:a8:c1:21:f3:a4:9f:72:a1:fc:9e:
                    ed:a8:2b:5e:b3:bd:36:36:95:b0:ff:1c:9c:97:00:
                    a0:fe:d7:d3:3e:f0:87:af:3c:2a:d6:c4:47:7b:3c:
                    1b:c3:5f:63:f9:25:28:af:b1:37:c9:17:25:1d:37:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AA:71:3F:2C:4C:E2:62:EB:09:94:E7:07:44:1A:A0:99:E3:8F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/f6c7183a-9eeb-3b17-b61a-846dbb4c9b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.207.222.0/23
                  67.222.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:88:d1:c5:56:a6:c9:ed:82:c4:4b:db:92:52:7e:b9:bb:6c:
         71:44:25:56:7c:27:16:d4:92:f0:14:46:2a:27:a4:e0:ad:df:
         4e:c5:da:83:23:96:30:70:2b:8f:0a:6b:c1:a6:d5:12:89:ad:
         e3:f3:f9:5d:76:2c:39:6a:fd:de:b8:dc:b0:ab:d9:a6:b8:69:
         67:d6:69:30:a5:f2:85:10:a1:df:10:3d:b9:8a:c7:09:3e:a5:
         2f:9e:e2:2e:9e:99:32:39:8b:5d:eb:20:c9:98:84:de:db:3e:
         68:f1:d3:0a:19:b6:02:20:b4:f9:02:dd:97:79:9e:d4:ae:05:
         79:e9:3f:e1:9a:d1:6b:ca:1d:68:55:6f:48:02:15:8a:9b:27:
         39:63:dd:4b:ee:e3:d6:8f:55:a1:94:5d:0b:c1:58:4c:b5:2a:
         d2:27:0f:85:1a:56:85:3a:4c:a9:02:1f:49:f2:78:d9:3e:99:
         27:90:c3:78:05:a1:5b:94:e9:00:cb:7b:1a:d5:24:6b:a6:8a:
         a0:1e:d0:43:02:51:0d:97:fc:c0:73:df:dc:cf:2c:74:92:a9:
         1d:23:4f:0a:d4:8c:c0:89:5b:45:d6:b2:31:79:48:59:df:c1:
         0a:a8:65:6f:40:d1:9d:69:47:48:45:40:d9:aa:28:9a:e8:ff:
         6d:50:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:06 2026 by rpki-client