Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b33524e9-0082-3463-8795-8c5fb806556b.roa
File:                     b33524e9-0082-3463-8795-8c5fb806556b.roa (raw, json)
Hash identifier:          hZQ+cz6qPMKbLpG+0+qHLgdYVNrSRhry51HXkbw8K1s=
Subject key identifier:   75:A0:24:33:A6:EE:3E:2A:4A:A7:56:58:B7:D8:CD:14:39:DF:4D:3A
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584D86955872A57EEEB138DDB314
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b33524e9-0082-3463-8795-8c5fb806556b.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     3855
IP address blocks:        66.55.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:58:72:a5:7e:ee:b1:38:dd:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=169f8d97-2e82-4573-a007-30e8197920bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:91:c2:bb:58:77:8c:69:cb:56:6f:c8:ab:
                    96:e6:ff:f3:5a:d2:85:e5:d5:26:d3:a3:2e:a3:0d:
                    3e:12:0b:15:95:8b:16:e1:17:5c:99:da:2e:94:3b:
                    c0:bb:67:53:9d:fa:2f:19:56:80:55:0e:f4:f3:2b:
                    18:fb:be:c6:7e:45:a1:e8:11:91:5f:5e:b9:b3:81:
                    78:64:f7:1e:32:4c:f5:b7:38:ff:3e:e4:c7:80:d2:
                    43:95:04:09:f7:44:94:a5:d6:e9:a0:5e:8a:0a:1b:
                    2c:e6:fc:e8:3d:f7:59:c4:a4:b4:9c:8b:c0:ff:55:
                    c8:99:8b:88:b9:5d:c4:82:35:3b:15:27:2d:88:7f:
                    e9:4d:1a:90:91:86:11:79:49:97:bb:15:cf:2f:22:
                    38:f0:3e:03:a1:ce:4c:46:48:bc:f0:95:74:ab:ff:
                    fa:55:e1:03:9b:dd:e3:70:60:c3:9f:03:f1:00:34:
                    a6:34:cb:52:30:5c:a4:95:29:eb:f4:9b:a3:30:f1:
                    d2:70:74:af:1f:1b:42:8c:63:fc:b1:f9:33:a9:0f:
                    70:b2:48:0e:e3:76:67:0e:80:c4:6a:bb:49:33:9f:
                    c2:e5:c1:67:6b:2a:c5:51:28:1f:b8:ff:2f:87:3d:
                    0d:4d:53:14:a6:63:d1:23:14:42:85:4b:d4:be:aa:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:24:33:A6:EE:3E:2A:4A:A7:56:58:B7:D8:CD:14:39:DF:4D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/b33524e9-0082-3463-8795-8c5fb806556b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:b5:44:9b:38:91:0f:22:c7:0b:b6:1b:4e:d0:8f:1e:eb:
         6f:46:4a:ec:17:25:44:fa:10:4c:5f:c4:e3:a2:98:83:96:52:
         1a:ba:51:3d:d4:34:58:1f:b7:21:0c:ea:97:1f:98:b0:51:af:
         36:29:7a:1d:8f:fe:8b:9e:40:a1:e0:96:5e:64:1f:6a:28:60:
         e5:c6:c0:43:53:3a:c5:df:e1:77:d4:10:5b:4f:c6:75:a1:43:
         a2:af:57:ec:0f:0e:b3:f0:09:ec:df:dd:db:d7:75:e9:0e:97:
         ff:1b:fb:ba:d6:23:01:f8:09:44:19:df:4d:85:84:88:ad:49:
         13:8e:c3:43:97:a1:56:f2:1c:e2:5c:0c:79:f4:4d:01:95:af:
         9f:48:e3:95:d5:c0:bb:f9:dd:79:f0:ec:c0:1e:42:95:82:41:
         de:d9:da:af:3c:80:ae:9a:52:7a:4d:d5:70:e0:d4:b6:c9:06:
         27:04:f4:3e:a2:78:2f:18:e5:bd:6a:c3:f7:d4:56:66:64:80:
         b3:1d:e9:02:fe:0f:b3:df:2d:7c:b5:9a:95:a4:8c:f2:f2:2f:
         4b:d1:48:fe:d1:61:3d:d5:fa:91:ea:c7:72:69:db:29:6e:1f:
         b8:5f:df:a8:16:3c:f3:e4:5d:35:b0:29:3c:94:b3:14:c6:7f:
         e9:21:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:23 2026 by rpki-client