Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/a549df24-0424-3989-b7a9-ea4ca078c33f.roa
File:                     a549df24-0424-3989-b7a9-ea4ca078c33f.roa (raw, json)
Hash identifier:          31F1Z8r1fvSrdGNOoMiLQAXbHKKXpiYchwN7//9nKVM=
Subject key identifier:   67:87:FB:FD:81:78:C8:2A:08:B7:BF:39:3A:BB:39:3F:9A:9D:46:A9
Certificate issuer:       /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
Certificate serial:       010D0C9F4328584D5024DEA63A78EAC688CE0000
Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/a549df24-0424-3989-b7a9-ea4ca078c33f.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     398152
IP address blocks:        204.154.244.0/24 maxlen: 24
                          204.154.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:de:a6:3a:78:ea:c6:88:ce:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=3cc91c26-47b6-4bf7-b932-cc87c4782cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:6c:16:ed:54:37:03:96:b0:55:c9:f4:98:
                    d6:89:35:ed:ce:32:7e:cd:cf:60:04:88:19:77:5e:
                    70:50:61:4f:44:64:1c:54:55:b2:50:a4:95:46:80:
                    7e:44:aa:ee:f3:6a:45:de:bc:13:1b:96:94:32:96:
                    47:69:b6:2f:51:52:f6:24:8e:52:03:50:71:38:54:
                    32:39:b9:b6:0a:44:7e:2f:cc:d3:65:33:bd:75:6c:
                    dc:b8:6f:db:16:a4:2c:72:e8:68:a5:0a:57:f1:dd:
                    9a:e9:e3:f6:d7:0f:2a:25:39:1d:61:68:da:cd:24:
                    96:04:38:d9:52:b6:53:87:54:6d:94:74:36:9a:b1:
                    d3:68:d8:f1:f0:87:2f:7c:c1:11:7b:ff:ed:28:a1:
                    91:d7:32:20:3c:23:7a:bf:41:df:05:0c:6e:b6:79:
                    58:3d:e4:c6:71:2b:95:c5:59:65:4e:34:d5:0d:2b:
                    f7:24:4e:48:5e:a8:e6:ec:66:94:84:e0:a0:9b:c3:
                    92:c6:e3:39:ef:91:1a:86:49:51:00:18:39:b4:19:
                    18:6c:9d:36:ce:40:c2:a9:7b:76:59:42:d0:aa:6c:
                    31:d9:4f:f7:4b:66:c1:08:08:c1:5a:a7:5d:f6:02:
                    aa:b7:3a:1e:aa:8a:2f:9e:75:78:65:3c:4a:6d:14:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:FB:FD:81:78:C8:2A:08:B7:BF:39:3A:BB:39:3F:9A:9D:46:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/a549df24-0424-3989-b7a9-ea4ca078c33f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl

            X509v3 Authority Key Identifier:
                keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.244.0/24
                  204.154.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:dc:bb:e8:19:2e:a3:83:91:38:45:76:85:3d:68:f7:00:
         c5:8c:ce:7d:09:20:19:e3:09:1d:bb:46:7a:3b:36:db:d3:3b:
         d6:f8:73:5b:85:44:05:68:b1:99:cd:6a:b4:08:73:c8:bb:7e:
         90:21:62:33:2e:46:78:e7:61:f1:06:0d:69:93:51:b2:e7:40:
         85:d2:14:fd:05:c9:e5:c1:bb:4a:b7:54:3f:e0:2c:19:09:07:
         c8:90:09:6b:96:19:a8:04:b6:c3:80:67:c7:c4:27:22:d2:1e:
         90:b5:d7:72:06:0e:fd:19:ac:8d:73:b9:ad:29:4e:3c:63:2f:
         12:b8:37:4c:f2:0f:03:92:63:59:9c:bc:19:a0:49:27:1a:1c:
         17:6c:07:0e:bd:e4:58:b5:ea:e7:11:19:4d:f7:10:f5:dc:f1:
         ac:0c:3c:61:8e:73:09:dd:66:30:31:1c:d4:37:17:d2:95:46:
         70:4d:c4:74:b5:c6:a4:43:f4:fd:b8:2d:84:90:e1:e1:4e:f5:
         44:54:b2:7a:e3:0b:4e:aa:c4:c3:8d:e9:cf:85:62:ba:80:fc:
         97:5f:bb:9e:af:f4:5c:d6:48:c9:b9:3a:d2:7c:bc:4e:1d:c2:
         33:91:8d:94:d8:ee:7c:8a:ab:dd:2f:2c:8c:ba:ae:78:7b:b3:
         79:7b:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:17:06 2026 by rpki-client