Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
File:                     0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa (raw, json)
Hash identifier:          qyP0ErVEZ0UCJKXlx+QFvziqjBsW5P5n/Ygo4FImEHw=
Subject key identifier:   8F:BB:AC:45:A1:ED:37:EF:ED:C7:7D:FC:B3:D8:A0:D4:C3:9E:1C:22
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F4328584CB981D5D35D09785FE90ECCC0
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     8015
IP address blocks:        66.179.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d5:d3:5d:09:78:5f:e9:0e:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=a6a46c8e-b007-4ac5-9383-17108a4da3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:a7:b9:67:66:8e:ea:9a:a5:51:9c:af:3c:
                    b3:39:6d:4a:7f:d3:1c:7d:42:ff:70:33:e8:bf:e4:
                    28:aa:dc:9d:2d:17:e0:91:f2:f4:7c:c4:03:cd:eb:
                    1d:ea:c5:68:59:9b:40:9a:0e:03:12:13:74:35:b8:
                    a0:8b:fb:37:bf:cb:1d:bb:86:8a:e1:80:e7:7c:00:
                    89:23:d7:42:7a:45:8d:ef:11:da:af:cd:a7:ef:80:
                    00:34:82:4c:32:39:fb:4d:9d:34:91:b8:8a:49:86:
                    12:04:02:76:9b:f7:b6:7e:02:58:3d:f0:df:5f:bb:
                    25:d6:c8:80:8b:6b:27:b8:a0:90:c0:07:ac:5f:80:
                    25:4d:29:25:16:6e:82:b7:65:99:05:ae:d8:50:85:
                    96:4b:4e:9f:87:66:5e:c4:bf:3f:b6:62:7e:6f:40:
                    01:b0:3f:22:c7:40:dd:c7:e0:61:d6:9c:30:84:3e:
                    bb:b8:38:c9:db:ed:67:35:14:13:c9:85:d3:5d:97:
                    b6:bd:d3:81:a0:96:b6:82:58:95:9e:ce:06:94:3b:
                    d0:55:29:a9:3e:ea:00:d9:1f:4b:0c:db:dc:0f:eb:
                    43:d0:21:d3:74:1c:44:be:2b:75:60:26:e0:5a:1e:
                    42:40:ee:a7:b8:9d:97:4c:43:8c:ae:64:1b:63:a1:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:AC:45:A1:ED:37:EF:ED:C7:7D:FC:B3:D8:A0:D4:C3:9E:1C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a6:a8:5d:cd:1b:9e:36:fc:70:29:69:c9:88:2f:0c:0f:37:
         b1:59:bb:b4:95:71:0d:5f:78:71:cd:0a:ca:18:9c:5c:e1:35:
         96:d1:a5:99:0e:8c:3e:ca:9a:85:63:d8:8c:dd:76:ec:d8:cc:
         cb:f8:61:b3:0f:37:01:6b:8d:a1:4b:2b:4f:02:2d:1d:e7:a2:
         e0:09:d7:9d:69:5a:b8:3a:ff:61:3c:55:95:79:43:2a:e7:31:
         df:59:c7:a5:55:52:b6:c0:0f:58:e4:ef:cc:5d:a1:02:6e:5d:
         f3:35:c0:9b:1b:51:cb:63:2e:75:95:8a:ca:24:a3:ed:8d:81:
         85:62:4d:a7:df:5a:00:03:d9:fb:98:d8:8d:98:51:32:a9:2d:
         7f:87:cb:7a:e4:5c:3b:58:2a:f2:92:39:16:b8:0d:b4:b2:1e:
         1a:89:2b:b3:4f:22:24:d0:d1:23:cd:b2:80:38:1e:44:0c:52:
         88:86:c8:76:1f:60:15:b1:01:cd:ee:62:66:03:06:27:0d:a7:
         1a:bc:c7:ad:e5:80:83:41:f9:3a:8c:01:91:4e:4b:c8:81:b4:
         80:a9:6b:14:33:61:8d:91:d7:27:36:ab:9e:a5:42:02:2b:6d:
         93:22:52:ed:85:07:cf:b7:f1:2f:93:37:b2:07:e0:ac:19:05:
         d0:67:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:33 2026 by rpki-client