Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa
File:                     36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa (raw, json)
Hash identifier:          BGYpUkG4/FyDvMKdVPQ1FoJmclQF9ikc6FAsKjX8O70=
Subject key identifier:   6D:F8:DE:47:3C:70:2F:A7:96:F2:96:4E:75:20:3E:10:A8:D2:9B:9E
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F4328584CBDB1EA04F137AA18D4A28F00
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        66.37.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ea:04:f1:37:aa:18:d4:a2:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=68d2d6be-f88b-4f56-b7c0-f22ef889f0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:a4:e1:b7:f8:29:aa:cc:35:99:19:13:d4:
                    60:b7:ac:8f:bb:25:a0:fa:7d:3d:26:5f:32:65:15:
                    df:3a:04:ef:dd:61:17:71:2c:ba:f6:21:c4:64:07:
                    9d:e4:e2:b6:e8:3d:06:73:d1:b4:69:6f:60:75:bd:
                    c1:35:40:26:8a:35:60:a8:dd:cd:4a:7f:43:08:95:
                    b3:44:1d:25:b3:13:9f:2f:50:db:12:66:74:21:8d:
                    58:13:44:55:a7:1b:44:b2:11:87:17:80:73:8c:b1:
                    01:19:f3:21:57:55:7c:ec:d2:f1:b7:04:f8:47:e9:
                    f8:b2:30:a0:13:7c:01:e0:43:d5:b2:f8:00:71:cb:
                    cd:b8:71:d7:ac:91:53:52:2a:0a:11:14:b0:85:9f:
                    b2:49:27:51:38:d1:7e:de:03:ba:d2:17:e7:11:79:
                    70:6a:cd:8a:47:bd:9a:30:49:a0:05:bb:71:4c:d1:
                    df:04:43:9d:c3:ce:7d:f6:fb:54:83:42:56:a7:d8:
                    c3:32:28:02:b9:91:c0:06:c6:ed:ce:e8:f5:9a:97:
                    b5:5b:1e:56:bf:a6:be:81:5d:24:8d:4d:cc:bf:a6:
                    ec:ed:d6:25:11:4e:fe:88:bc:00:73:f3:12:2a:96:
                    75:e0:89:8a:e2:87:38:2e:0e:3e:0f:1e:ff:d6:ab:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F8:DE:47:3C:70:2F:A7:96:F2:96:4E:75:20:3E:10:A8:D2:9B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/36c67c52-a3dd-350d-8ca4-cdfff6a62b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:94:0c:37:c7:ae:cc:88:47:2a:f2:25:d1:10:98:96:b7:
         d7:f0:1c:53:29:53:55:a9:1a:18:40:53:73:ca:f6:75:18:c5:
         46:8e:25:20:bd:d6:df:3d:2a:19:96:ba:4e:28:63:2d:b3:f6:
         ff:f3:db:3a:13:f4:57:38:7e:51:41:61:9c:ba:b5:48:9b:f4:
         5f:49:91:9c:e7:1e:fb:ae:80:05:45:03:f2:ac:2b:44:03:45:
         d7:90:0c:aa:98:97:ac:e6:41:0c:89:95:36:78:b0:df:08:77:
         10:bd:2e:12:8f:f9:88:39:74:a8:22:5d:e0:72:ca:f2:64:97:
         2a:e5:cb:3c:3e:30:4e:66:e3:3f:5a:60:4a:29:3c:87:a8:b8:
         fb:57:f5:51:56:8c:44:db:55:a5:00:1c:86:23:93:be:8c:8e:
         a2:fb:52:f0:fc:f7:6b:89:a1:8e:1c:aa:a1:40:cf:a1:1f:ef:
         28:b6:1c:b8:c0:8e:ce:f3:8b:2c:ec:11:c7:07:26:f3:59:73:
         20:67:70:26:99:4e:4e:0c:8a:42:49:15:ed:88:a2:74:c4:a0:
         27:7e:8e:5e:85:05:9b:9a:8c:e0:7c:60:4d:76:36:65:ae:d3:
         9f:19:d8:be:43:86:7e:37:fd:1e:77:83:86:9f:3c:9f:48:f1:
         f9:33:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:28 2026 by rpki-client