Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa
File:                     1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa (raw, json)
Hash identifier:          nz9RoWwgC71d1gOnFwSRmrsnm4CpbnY4agio0nxVOFM=
Subject key identifier:   B7:4C:F0:7D:DE:47:2E:9A:D4:44:8D:80:8F:6E:82:9B:F5:B8:50:A1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF1577D7CC81A8739599B45C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        66.253.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:7d:7c:c8:1a:87:39:59:9b:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=7930ebf8-9c77-43e7-96dc-2e091079a88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:e7:94:db:88:ae:61:b4:90:19:ac:93:a6:
                    f6:54:35:d4:1c:c7:bd:a1:84:c3:38:ac:ab:28:7c:
                    cd:ea:9a:41:87:57:f8:1e:11:3b:ad:78:fe:74:f5:
                    bc:03:94:6e:69:ed:b1:33:ce:03:ea:bd:f9:71:19:
                    b7:de:70:c9:b4:91:0f:ce:e6:a5:02:71:cc:76:c3:
                    10:31:5a:4a:0f:27:9c:10:8d:33:93:68:7f:9e:b9:
                    cb:5d:d2:ed:db:0c:82:b4:94:4a:7f:36:90:ad:8b:
                    6f:99:7c:f1:5e:97:c3:d3:e0:ac:6b:e1:85:73:9e:
                    16:3b:cb:2d:0a:f5:e7:b3:32:0b:79:45:cf:51:64:
                    af:85:71:2e:11:9a:f2:42:98:be:26:cc:3d:22:3e:
                    80:59:01:83:cf:dc:f4:fe:5a:a5:71:25:1b:9b:ee:
                    6a:86:91:ba:7e:d0:84:b5:73:94:f2:c2:22:65:f2:
                    54:d4:b1:2c:f4:7f:a5:1f:5e:7a:3b:fe:f2:05:0c:
                    b6:77:86:17:e8:97:9b:61:7d:9a:5d:1c:dc:fd:2c:
                    f7:36:7b:85:f1:f7:11:bb:ad:06:34:12:17:27:9c:
                    cb:3b:96:a2:3a:af:fe:37:a7:86:16:22:84:c2:c9:
                    e2:72:87:17:55:4d:13:07:32:af:b1:76:23:c6:f2:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4C:F0:7D:DE:47:2E:9A:D4:44:8D:80:8F:6E:82:9B:F5:B8:50:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1248a108-6a6f-3b7b-bc71-f09a94b39b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.253.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:d4:3b:7d:e7:3b:5d:94:47:d3:48:ee:4e:e7:3d:e3:5c:
         b1:f9:07:0e:44:49:f0:ba:c5:be:f1:e6:5b:57:46:90:bb:95:
         36:dc:3d:91:f0:a6:3c:d0:8a:c0:36:58:a1:9c:c2:14:55:0d:
         2c:5f:07:3b:94:52:66:4f:ba:ff:50:6c:04:75:e9:6c:b1:d0:
         90:11:a5:aa:45:03:44:f4:27:b4:a6:10:80:cb:44:30:a1:36:
         8c:cf:c4:43:cc:81:da:fe:bf:ae:9b:41:49:f0:5c:3c:1b:da:
         14:e0:56:af:40:8d:0e:af:e4:77:1d:b2:9f:45:00:b2:7a:b8:
         9c:e4:e2:45:fe:df:18:c6:47:4f:08:1e:94:54:ca:56:83:fc:
         6d:31:62:0e:1d:bb:f2:11:44:fa:b3:97:a3:3f:04:e5:b1:68:
         d2:28:63:88:0e:45:fb:8d:95:79:9f:a6:ac:13:d5:43:19:f1:
         73:c9:e7:12:9f:d5:8f:18:49:be:45:f5:eb:a6:f5:0e:7d:f1:
         c8:53:e6:5a:88:80:ee:2f:d7:b2:41:c5:50:9e:47:4b:29:99:
         7e:2a:2e:fe:1b:d0:51:c1:5c:42:00:3c:07:a5:e4:e5:af:68:
         17:8a:c1:2d:e2:c4:e6:1a:e7:29:f1:b3:0c:d0:43:36:49:8c:
         7d:55:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:17 2026 by rpki-client