Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
File:                     34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json)
Hash identifier:          zCB3BUVY6svBVDCzGXOxWrSXk2+Tj7Kqj4OOdQE4k0w=
Subject key identifier:   26:D3:BD:64:13:EA:20:D9:DF:F9:48:D1:FC:7C:35:77:88:FF:9A:FA
Certificate issuer:       /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19
Certificate serial:       010D0C9F4328584CDF3278CE5593237E9849A300
Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     63208
IP address blocks:        66.33.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:78:ce:55:93:23:7e:98:49:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=b295db16-7e23-4334-9024-9cc5670df050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:ed:f3:09:b7:49:96:ae:46:9c:0b:e8:ab:
                    77:be:ad:7f:54:3e:4d:29:c3:36:36:01:cc:2c:33:
                    cd:5e:c6:8e:2b:ed:cd:37:ba:05:6f:af:c0:43:81:
                    9e:25:4a:1e:ab:e5:9c:c3:43:7b:d5:33:9e:45:26:
                    69:df:06:f8:dc:58:6f:4a:7e:bf:6a:7d:37:f2:04:
                    9e:aa:fc:82:b3:97:da:60:a0:97:13:7e:0f:45:6d:
                    2f:35:81:6d:00:25:0f:cf:ce:45:0a:43:ae:90:03:
                    a7:0d:cc:3a:89:3f:24:e8:e9:93:ea:1f:a1:3f:4e:
                    ac:f7:68:5b:cd:84:3d:bb:62:fd:53:dd:68:c6:40:
                    8f:83:49:77:99:88:ec:c9:49:77:4a:d1:6c:2d:91:
                    5d:ed:9c:2a:56:52:7d:a8:46:bb:69:fc:f0:7e:86:
                    ba:db:e7:14:ba:89:6f:ed:b8:d3:d2:45:2b:99:67:
                    26:eb:1b:cc:f6:17:4b:71:4f:45:31:95:72:a3:d7:
                    ec:6c:47:03:7d:3d:3c:56:f9:40:88:a9:df:65:24:
                    3a:f6:d7:1c:49:9b:2c:3b:a5:66:67:4a:a4:b3:83:
                    f0:fc:d9:ba:c6:a3:c9:1c:6f:9e:f7:0e:66:d2:97:
                    d0:87:84:bb:4a:e7:93:d6:bb:f1:d6:a1:05:91:e5:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D3:BD:64:13:EA:20:D9:DF:F9:48:D1:FC:7C:35:77:88:FF:9A:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl

            X509v3 Authority Key Identifier:
                keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.33.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:14:ee:60:ae:da:6b:5a:25:e4:48:26:ca:f4:24:30:f0:
         37:7e:51:72:95:5b:9b:cb:12:89:24:25:95:58:9a:a4:6a:a4:
         0e:96:1c:14:cb:1e:a0:2a:23:c9:80:54:4e:58:1c:0d:d4:82:
         0b:bc:c6:bd:f7:c6:d0:d4:af:07:87:05:6b:fe:3e:00:c1:e6:
         04:17:f8:39:80:c8:bd:28:e9:57:92:71:29:22:35:2c:37:48:
         4a:70:40:3a:7e:2e:41:e6:0e:ff:92:4f:08:15:32:65:af:0d:
         5c:93:79:fd:94:6a:68:ee:7b:0e:6c:32:d0:1d:44:27:c1:6c:
         7f:e2:3c:06:fc:dd:a8:e7:8c:63:f6:2b:ae:97:fe:13:aa:02:
         94:f1:0d:a5:fe:bc:60:d7:9b:8b:a8:31:6c:c0:1e:a1:d3:d8:
         54:e8:45:8a:fb:e0:87:27:af:60:b8:60:3e:0e:88:b7:21:77:
         87:56:a4:b0:66:5b:4a:4d:0d:c0:c2:79:3f:5b:3e:40:74:12:
         63:92:1a:9b:d7:d3:66:35:db:91:cf:a5:28:a4:e9:2f:10:82:
         20:63:e2:07:5d:48:e6:55:6f:ce:69:0d:cb:73:d1:68:cf:7a:
         d9:ec:3a:b2:5c:d3:8f:8f:c6:67:95:d8:8e:fe:dd:f8:45:64:
         e1:b3:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:10 2026 by rpki-client