Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa
File:                     db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa (raw, json)
Hash identifier:          u8nFCkYxA0XSWj/vy2iuyfoQ5MIOSnzDNs6nOADw+KA=
Subject key identifier:   04:C9:5E:20:0F:A3:9F:7C:6A:00:AA:49:1C:9A:EE:D8:A6:B2:8E:50
Certificate issuer:       /CN=b567f52f-9461-4275-9469-41dce04ed9a1
Certificate serial:       010D0C9F4328584CCD0CA2B18494F7B999C4CB00
Authority key identifier: FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     397361
IP address blocks:        64.33.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a2:b1:84:94:f7:b9:99:c4:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b567f52f-9461-4275-9469-41dce04ed9a1
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=37396fc3-e32a-4a52-a24e-59eadbec4e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:5e:2b:db:04:d4:36:7d:06:d6:5c:49:04:
                    6b:10:52:31:b9:b8:3c:1e:ad:82:51:a4:4f:5c:20:
                    48:f8:19:2b:b1:0e:4d:f6:ab:75:bc:ef:c2:8c:36:
                    db:3e:7b:9d:5f:31:ee:69:9e:67:f0:07:9c:d9:55:
                    3d:26:85:0c:6d:fe:38:e4:94:3e:1d:44:f1:6e:0f:
                    c9:49:57:bd:36:a6:94:eb:54:7e:4f:a3:02:bc:85:
                    07:1b:6d:6a:05:6f:35:a8:27:28:3b:85:65:32:82:
                    b2:a0:d7:16:a7:ee:85:77:b0:cc:b8:b0:47:45:17:
                    32:b9:ad:45:7b:7e:93:13:48:13:c9:8f:4a:1f:0b:
                    02:c2:c5:46:ae:54:6a:c0:59:55:07:e3:22:b3:2a:
                    84:b2:5c:d5:ab:8e:5d:45:d1:54:0c:b1:af:84:6f:
                    6d:f8:36:6a:6f:11:92:58:e7:04:32:2f:c5:02:f3:
                    e2:15:ed:6a:de:12:f9:0b:6c:ce:99:8c:89:8e:f8:
                    ac:65:c0:24:55:1c:e6:09:9a:65:e5:9a:24:10:66:
                    96:02:06:77:10:ac:bc:ca:a7:77:c2:66:c3:bb:b3:
                    9e:25:ef:fb:29:ae:9f:1a:05:d0:0e:8f:5e:3d:2c:
                    1b:22:ff:2e:20:48:df:70:18:53:ee:88:08:ce:e9:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:5E:20:0F:A3:9F:7C:6A:00:AA:49:1C:9A:EE:D8:A6:B2:8E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/db107b41-d5bb-3cf2-bf96-c7fcf663775f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:17:99:cc:71:54:5b:9a:cc:51:5c:35:fb:12:cd:ef:14:7c:
         57:7e:b8:c6:92:aa:49:fa:6f:ad:ca:9c:fc:51:10:9c:61:0a:
         11:49:03:ca:06:85:ef:53:22:36:86:c9:8c:ac:83:a7:90:65:
         2a:63:9b:51:fd:39:94:db:03:38:9a:e7:0d:3a:ed:7e:b4:27:
         f4:b6:31:84:2a:cc:97:d0:ca:d5:9e:98:64:37:06:d1:8e:61:
         e7:ef:4d:f5:b6:ea:aa:b3:82:dc:9a:3e:a0:c7:90:88:0a:e8:
         2c:5b:a2:e6:3a:a4:5f:4c:04:d6:24:ec:38:bf:df:d0:52:58:
         3f:ef:40:51:b7:0c:39:ec:76:16:5d:0e:b4:3b:f4:ac:d4:25:
         36:03:7e:8f:32:37:02:16:6d:9c:83:ea:ae:81:1c:a1:21:47:
         15:96:a6:c5:33:a4:b0:e4:29:1c:50:22:5a:f2:b6:ae:4b:ca:
         95:fa:da:ce:09:d2:ac:b4:8d:d7:b2:6e:61:f2:9f:b9:0d:c0:
         26:24:db:40:d6:54:50:b4:d0:c3:2d:66:53:10:78:b7:82:4d:
         6f:3a:ff:ee:4d:c5:96:b7:d7:36:18:5c:d2:34:85:4c:12:eb:
         7f:3f:33:40:16:16:8e:b1:e5:d8:6f:49:9f:27:d8:21:47:37:
         33:8d:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:34 2026 by rpki-client