Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
File:                     1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa (raw, json)
Hash identifier:          rUcF6gAUw5CUYjXgx3MH0z+Ftb+Wt+81NjcDqI0rKzE=
Subject key identifier:   45:3C:5E:AD:AD:77:3B:B0:0A:FD:08:2A:FF:83:46:7E:C2:EF:40:2E
Certificate issuer:       /CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
Certificate serial:       010D0C9F4328584CDC676B30AD62CCF68A56D500
Authority key identifier: A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     198949
IP address blocks:        66.22.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:6b:30:ad:62:cc:f6:8a:56:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bebf1fd-be49-4771-87fb-2d0488be4cab
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=ff9351d5-cedb-46f5-a8b3-d95d7d640250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:1a:ae:1b:e9:aa:ff:9d:b1:24:0d:21:a2:
                    c9:4e:11:cd:44:05:4b:c7:cb:cd:45:6d:d8:07:72:
                    f0:c4:17:7d:1b:1a:9e:c4:54:91:31:35:a8:f7:ed:
                    c8:b7:3f:aa:08:fb:bd:24:2b:0c:ab:b8:48:fd:bd:
                    31:cf:8d:81:f2:5c:44:70:0e:20:2b:cd:69:fb:40:
                    0f:b6:16:31:ee:2b:9e:c4:20:66:77:49:cc:4a:ab:
                    e2:82:ed:71:5a:4d:3f:10:67:41:76:29:5d:c7:e1:
                    27:e5:42:cb:e2:87:66:d3:99:a5:6c:3a:b8:f2:47:
                    88:3f:fd:be:c2:28:14:63:11:89:a0:22:20:b0:a5:
                    fd:0a:a4:35:b1:37:73:1c:13:b2:56:df:6a:37:95:
                    e1:03:bf:eb:13:50:02:70:d9:f3:be:e0:15:74:72:
                    1a:70:70:e8:e5:ac:d5:ed:6f:53:26:9e:ae:bf:55:
                    42:b2:c0:22:5d:7c:3a:cb:a2:83:67:cd:d5:45:cb:
                    e7:08:ba:4b:9f:c2:30:a4:0e:f1:51:c2:f9:f2:87:
                    10:78:82:7d:e3:c0:f5:ee:90:9e:2d:8d:60:70:13:
                    4f:e7:db:b1:de:fc:a1:03:61:01:b3:de:4d:ee:4c:
                    58:1b:e1:8f:70:4a:21:8e:c5:5c:b6:4c:f5:31:72:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3C:5E:AD:AD:77:3B:B0:0A:FD:08:2A:FF:83:46:7E:C2:EF:40:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/1c5dcfa1-c9ff-3b25-aac4-1bd57fbcd667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab/7bebf1fd-be49-4771-87fb-2d0488be4cab.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AD:23:24:BF:14:90:C2:B8:53:86:42:68:F2:81:07:01:EB:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7bebf1fd-be49-4771-87fb-2d0488be4cab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.22.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:34:4e:69:1b:e1:0a:75:b3:bc:2f:2a:e5:d1:16:b7:73:77:
         78:b8:46:e9:36:cf:dd:e5:ad:c0:5e:30:34:63:f8:09:b6:65:
         4a:16:74:06:a4:e5:49:58:aa:4b:56:c0:fd:1e:65:fd:55:13:
         3d:e4:20:22:dd:34:a3:3c:80:13:0a:a7:67:0f:e4:e3:f4:b7:
         b5:5d:d7:1e:80:3d:ba:65:33:eb:80:49:5b:33:1b:4c:3c:4f:
         60:2a:2f:a5:49:46:68:d8:12:64:ce:25:d5:e9:0c:c5:65:84:
         f1:e4:b5:ec:94:ca:60:b0:c3:f1:16:e6:60:63:8c:87:89:be:
         db:ab:4d:f9:e0:a2:3b:9c:3b:05:71:b5:13:49:7b:b7:60:a0:
         1f:87:58:21:ad:dc:c1:6c:a4:66:07:a7:ff:08:e8:e4:7a:df:
         64:a1:61:dc:62:08:d6:d8:30:2c:30:13:11:02:fd:5f:6d:f1:
         4b:f5:6a:41:8b:d5:cf:b9:fa:75:75:be:e7:77:31:e8:48:2f:
         80:71:5e:7f:46:42:6e:b1:bc:a3:27:03:bc:44:af:06:7a:42:
         dd:28:02:b7:c8:89:a0:c5:ce:db:4c:f2:0c:2a:e0:d7:ae:1c:
         73:90:db:eb:e7:d7:40:9f:41:4c:1e:be:cf:b9:9a:1e:3a:9e:
         8c:53:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:08 2026 by rpki-client