Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
File:                     6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa (raw, json)
Hash identifier:          7DPfpC0pc4hUtL9hGU2lZSJB2Uhq2kBnqIVQWGiU/fw=
Subject key identifier:   EE:0C:53:A7:86:44:D3:9A:DE:3C:B4:88:BE:20:A5:5E:BF:D9:A0:45
Certificate issuer:       /CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
Certificate serial:       010D0C9F4328584D703FE37A23DC84674B2BFB80
Authority key identifier: 1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     17356
IP address blocks:        66.220.224.0/19 maxlen: 24
                          173.195.240.0/20 maxlen: 24
                          209.134.32.0/20 maxlen: 24
                          216.66.96.0/19 maxlen: 24
                          2607:ffc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e3:7a:23:dc:84:67:4b:2b:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=edf9695f-9267-4e75-bbec-12cd7d46a3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:bb:bb:fb:e2:40:ab:2b:95:ee:4f:8a:61:
                    83:9a:3d:e8:43:14:59:fb:0a:7f:11:cf:af:21:f3:
                    91:65:ed:55:f9:26:9d:57:25:2a:48:2b:54:a6:56:
                    78:6b:ae:ec:ad:51:ae:63:9c:30:57:b1:9b:a5:ab:
                    34:ed:12:99:d7:22:24:5b:b8:68:30:14:33:f4:de:
                    83:b0:75:2f:39:28:45:5f:78:03:a5:1b:e6:a1:5c:
                    22:3c:15:fd:81:93:1c:77:c8:3f:13:47:6d:db:c1:
                    71:c7:35:21:82:aa:10:ed:34:1f:d0:b6:1a:63:30:
                    4f:1c:e5:fa:dc:f3:b2:81:85:e1:dc:86:6c:87:71:
                    a2:b1:80:42:01:76:b3:f3:b2:d5:e0:b1:42:6d:ce:
                    3f:2b:76:f6:54:8e:61:73:c2:9e:50:94:2f:b5:53:
                    e9:4e:8b:b5:40:93:29:5c:ba:a3:22:1c:dd:47:b0:
                    4d:9e:58:b3:bb:42:3f:0c:09:2c:c6:aa:a6:dc:6d:
                    b0:fb:fe:9b:81:7c:86:ae:a7:d1:bc:bc:76:9f:c2:
                    8d:f3:e4:6a:c9:ed:b2:0b:f6:ad:c2:77:39:4b:40:
                    95:7c:ff:bc:75:a7:b4:78:40:47:f1:5a:07:0f:bd:
                    56:68:6c:18:ed:13:6d:1a:98:ce:e0:c0:49:a6:fa:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:53:A7:86:44:D3:9A:DE:3C:B4:88:BE:20:A5:5E:BF:D9:A0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.224.0/19
                  173.195.240.0/20
                  209.134.32.0/20
                  216.66.96.0/19
                IPv6:
                  2607:ffc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:5d:a1:55:78:93:e1:b5:f2:02:f5:a6:03:f8:d6:c4:9a:
         2a:cb:7a:a2:54:fd:0f:a6:83:a6:e7:df:1e:5f:9d:94:38:f5:
         78:1c:61:69:8e:15:db:e8:aa:2d:65:4f:28:e3:41:f2:94:d4:
         c9:ca:65:f1:e9:8d:74:a5:c2:6d:54:00:c7:8f:29:1e:61:4d:
         6b:be:61:7f:bd:7f:e8:2e:31:cb:22:47:f7:f6:1c:04:78:c4:
         4d:ed:39:3b:b4:ee:84:89:2c:9a:7f:f1:6f:b3:77:fb:7e:b1:
         78:23:a1:f1:c4:bd:db:67:da:8d:11:89:da:f1:96:fc:94:f6:
         ec:dc:d1:72:98:12:d8:38:2b:ae:ba:82:a5:3c:53:7e:6c:69:
         45:b4:2c:57:87:83:46:b3:9b:67:d4:53:a7:d0:ee:08:e5:00:
         af:96:91:0b:01:42:a0:aa:4e:cf:96:6b:12:b5:03:b4:24:ed:
         96:c4:a9:1d:f8:a5:84:11:cd:93:51:63:0f:d8:27:c4:46:a6:
         7c:57:5d:74:78:01:42:af:82:87:0c:46:93:31:a6:da:f9:71:
         11:bc:6c:2c:f9:67:83:08:c3:f8:a5:2d:97:ee:6d:d2:b1:b1:
         3f:b7:ce:a7:38:da:f2:f5:92:8c:9f:a9:97:47:e9:9d:54:75:
         fa:1c:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:07 2026 by rpki-client