Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa
File:                     4950d9b3-8566-33f1-8c08-18c21931d55c.roa (raw, json)
Hash identifier:          m0rqjXA2/rj8HBWc7RrvudWbyB1xbwgLehy5Wmt47S8=
Subject key identifier:   C6:F6:07:67:B4:42:97:90:7E:6D:6C:A2:B7:5E:EA:0D:39:14:31:BB
Certificate issuer:       /CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
Certificate serial:       010D0C9F4328584D63AFA1EA77288112DE13E400
Authority key identifier: B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     13335
IP address blocks:        66.242.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:a1:ea:77:28:81:12:de:13:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37215f57-8a07-4b5a-adb9-c29a44a90e22
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=fe712099-c521-4283-b474-5337d19f5f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:d0:a7:b3:61:8d:8d:62:70:04:b7:41:2f:
                    8e:14:da:c6:03:b9:5c:18:dc:34:6a:a7:76:2d:8b:
                    8d:e6:6c:20:f5:a9:e4:1d:d9:0c:2d:d6:dc:43:1f:
                    b9:58:72:db:b5:e0:4d:7b:b7:35:e0:c8:df:a5:16:
                    5c:88:ff:ce:a6:b3:6a:a7:b7:92:fa:77:22:c9:31:
                    4e:7e:88:2b:fc:cd:15:a6:66:52:3c:41:01:61:06:
                    74:25:a5:9d:b9:bf:b3:15:0e:50:3c:a5:65:e0:86:
                    c5:87:7d:0e:0e:1e:45:34:05:2f:da:59:aa:39:9c:
                    0a:51:2e:12:f0:8b:30:d1:87:bf:17:02:3f:5c:7b:
                    9a:d0:9b:4f:cf:3d:a5:83:06:5c:8d:5d:88:c5:d3:
                    be:ed:48:56:12:22:11:24:5e:b5:10:76:f5:18:7b:
                    2d:d4:bb:2b:d4:b0:d0:53:c9:c1:34:87:be:2c:b0:
                    ba:33:ea:07:a6:52:dc:61:f5:9e:1a:e6:b3:e3:11:
                    1a:93:f5:e7:bf:1d:28:41:75:f5:65:43:7d:5a:53:
                    67:bd:02:91:fb:b7:4c:7f:30:07:6f:0f:16:00:0e:
                    41:d3:fa:bd:33:55:65:c1:b7:f0:90:18:31:15:6f:
                    56:f2:bd:6e:79:2a:bf:ea:8f:38:40:9d:59:f0:b6:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F6:07:67:B4:42:97:90:7E:6D:6C:A2:B7:5E:EA:0D:39:14:31:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/4950d9b3-8566-33f1-8c08-18c21931d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22/37215f57-8a07-4b5a-adb9-c29a44a90e22.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D9:6B:25:FB:4E:C5:40:E6:F9:98:D3:8A:44:69:C4:AE:37:AA:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/37215f57-8a07-4b5a-adb9-c29a44a90e22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:f2:6b:30:91:75:f0:ed:4a:47:98:61:28:fe:fb:0b:06:
         ef:c0:2f:33:6b:6e:54:b9:20:35:bb:a3:d9:35:4c:07:c6:7e:
         be:6b:8b:7d:73:31:6a:c5:20:b4:57:7f:ea:4a:a5:17:f8:fd:
         b6:41:80:ec:5d:4c:8d:e7:a1:88:d8:96:1f:e7:ea:a3:90:f3:
         55:22:0d:f2:79:7d:ef:76:02:df:eb:96:5a:2d:0e:d6:04:7d:
         d8:89:19:3e:12:37:7b:c4:ca:fd:09:50:f6:13:09:ad:df:56:
         99:68:0f:49:1e:17:28:f8:4e:36:52:e8:90:3e:c7:11:7d:c4:
         68:22:79:63:70:39:be:09:a1:90:84:eb:c1:b1:3e:e1:38:a0:
         e0:63:05:c9:6d:2f:7d:ac:47:f8:de:05:12:5d:b3:af:52:6c:
         3f:13:2e:43:25:f8:fc:76:9d:bd:ab:37:09:44:92:16:69:5d:
         b8:0e:de:b2:30:e1:bd:d3:bb:db:d4:76:68:db:5a:bf:de:1b:
         f5:71:75:d7:81:c8:8c:30:8f:cd:fb:06:97:2d:73:1a:bd:44:
         04:f4:a9:65:0e:fc:9c:15:27:57:c1:13:1f:dc:c2:d8:f7:6a:
         08:5f:76:d6:26:d2:66:bc:a4:77:b4:c5:f6:97:85:94:cd:c2:
         24:8b:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:05 2026 by rpki-client