Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
File:                     6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa (raw, json)
Hash identifier:          p+a2YopsCC8lA7og8+VjNhFEoLL+ipv6/QQsR+02a7I=
Subject key identifier:   38:FB:41:73:3B:74:74:B3:E0:BD:52:2C:30:A0:B5:8F:87:F9:B0:40
Certificate issuer:       /CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
Certificate serial:       010D0C9F4328584C8FA189FB4A8402AA3B086F80
Authority key identifier: 1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa
Signing time:             Sun 18 Jan 2026 02:00:31 +0000
ROA not before:           Sun 18 Jan 2026 02:00:31 +0000
ROA not after:            Sat 18 Apr 2026 01:00:31 +0000
asID:                     17356
IP address blocks:        66.220.224.0/19 maxlen: 24
                          173.195.240.0/20 maxlen: 24
                          209.134.32.0/20 maxlen: 24
                          216.66.96.0/19 maxlen: 24
                          2607:ffc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8f:a1:89:fb:4a:84:02:aa:3b:08:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88f3a26-3376-4ee5-877c-a0c03c069cb7
        Validity
            Not Before: Jan 18 02:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=8d176550-39d7-41fb-89db-3e8e7bf9ac8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:8b:4b:85:2f:be:0f:16:a4:92:a1:4b:bb:
                    00:0d:29:ac:27:75:f6:e1:cf:72:af:e2:00:13:5f:
                    c6:d9:48:b5:7a:47:52:03:91:68:57:65:f9:e6:64:
                    1f:2c:10:72:85:38:f6:0d:9c:de:89:59:09:81:24:
                    0d:dc:f7:05:27:11:64:49:aa:f0:63:29:5b:fd:b8:
                    9d:d0:cc:0f:aa:c3:03:a8:38:8e:ce:53:e6:26:93:
                    5d:99:3d:d2:d8:c7:03:e1:c3:d7:c0:93:fa:8c:7d:
                    55:4b:37:94:35:5c:5a:3c:72:3a:a0:f1:54:8c:d4:
                    bf:ba:55:ce:0b:0b:b5:31:dd:32:93:c9:06:8a:05:
                    d3:bd:e5:a4:6c:23:18:fb:fc:9c:e4:a6:b5:9b:30:
                    74:72:36:02:a2:20:f9:89:5e:d0:ba:d0:b9:1f:da:
                    a6:3d:e2:99:09:b6:d1:c8:cf:bc:17:49:b1:c1:9a:
                    db:18:ce:39:b6:df:ff:43:24:39:24:5a:50:8a:f0:
                    1b:01:d2:a4:2c:49:fa:cb:ec:e3:13:3a:b1:a3:87:
                    57:fd:22:4f:62:03:3f:12:3f:51:b9:c7:81:70:d2:
                    8c:c5:35:c6:37:85:e2:97:88:e2:10:9c:dc:39:f0:
                    ac:51:73:1b:0a:08:73:a6:01:2c:4c:16:4c:03:66:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:41:73:3B:74:74:B3:E0:BD:52:2C:30:A0:B5:8F:87:F9:B0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/6a41be25-ae20-3f2f-99e1-c5dfab3b0524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7/f88f3a26-3376-4ee5-877c-a0c03c069cb7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:35:6E:AC:B3:EB:69:F8:99:14:81:D2:46:85:BC:4D:C7:A9:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f88f3a26-3376-4ee5-877c-a0c03c069cb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.224.0/19
                  173.195.240.0/20
                  209.134.32.0/20
                  216.66.96.0/19
                IPv6:
                  2607:ffc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:1b:ee:dd:01:aa:9d:8d:e4:c5:c9:01:08:37:fb:60:eb:
         05:90:ee:aa:52:2b:1b:7c:c9:69:37:b5:56:e1:37:3b:04:32:
         f8:86:ba:ce:b2:bb:73:c5:23:1e:86:92:1b:10:0f:3b:e5:89:
         32:ab:1b:e4:27:24:bb:84:a0:7c:df:59:ab:4c:39:1c:f4:da:
         26:f7:c8:c8:22:4e:57:d6:cf:0f:3c:d9:5d:d6:01:c3:dc:b9:
         53:c4:78:9f:b0:af:a6:79:ea:36:13:4c:c5:a5:2f:ec:4c:7d:
         c9:d1:3a:0a:2f:9c:af:05:38:c6:7f:21:10:83:89:4b:4f:44:
         66:9f:52:cc:ff:4b:58:f2:95:c3:4b:db:37:65:f2:a9:2d:e4:
         f3:7e:28:49:0a:3c:09:55:65:60:d2:b1:4c:12:f8:2b:29:34:
         39:da:1d:97:3b:67:c9:1a:ba:bf:6c:a9:bc:64:a9:dc:01:30:
         42:0e:35:ce:f9:78:e5:17:75:95:85:cd:30:db:3c:7e:b7:56:
         cb:ca:c4:38:1b:fd:ed:f5:40:70:fd:22:d6:10:36:08:8e:f0:
         95:c4:9f:e4:2f:0d:7a:72:8f:9f:d7:84:0d:12:38:39:2c:0f:
         5a:34:17:02:d9:ed:8f:3b:a3:73:0d:f6:17:fb:cd:6d:93:0c:
         53:c2:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:20 2026 by rpki-client