Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa
File:                     66d28256-cbf5-3b31-910e-e10623aa8600.roa (raw, json)
Hash identifier:          VKd8YYKupbB3qR+UfdiM/jkWKeIX228p3Zw+2TCONe8=
Subject key identifier:   8C:F3:50:4F:62:98:19:9B:D3:E8:C9:39:A1:BB:94:CD:00:02:8F:B8
Certificate issuer:       /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial:       010D0C9F4328584CC6121DABFC5A77D7C3C2EDF8
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     7018
IP address blocks:        216.40.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:1d:ab:fc:5a:77:d7:c3:c2:ed:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=26bd5994-bf3d-48d8-96e7-dec247cf5693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8b:f6:d7:2e:84:19:27:d5:9a:3a:91:c3:95:
                    2a:97:d4:24:e9:9e:ef:fe:6d:c7:f9:54:ea:42:9a:
                    73:15:e0:5b:e4:80:93:fa:a3:0d:23:dd:0a:c5:0c:
                    f1:49:ff:fc:2e:6a:40:04:56:45:8f:e0:07:c0:01:
                    3d:97:c3:bf:07:87:90:67:38:56:59:b6:15:fc:8f:
                    07:e5:c7:0b:f0:52:73:32:3b:23:89:07:22:ba:45:
                    b1:e5:33:b6:b9:e6:ca:de:3a:5c:f8:cb:a2:35:f0:
                    3a:45:a1:21:24:06:e2:5d:48:0c:c8:64:0c:ee:f5:
                    69:d3:6e:27:e4:24:79:11:34:6f:9f:0c:69:62:e1:
                    26:ad:9e:7b:90:5f:63:ea:3a:12:89:3a:54:d4:d4:
                    b9:01:f3:9a:cc:5c:e1:bf:c1:c4:c5:8c:e0:29:d3:
                    a4:1c:87:8c:62:7f:01:a8:e3:1c:fd:bc:07:29:4b:
                    f8:cc:ea:45:53:09:fd:85:5f:db:23:35:f7:91:cb:
                    8e:ea:a7:92:b0:91:21:95:0c:c7:f0:f4:84:05:67:
                    eb:e7:71:80:27:21:cc:27:76:da:da:56:26:c8:fa:
                    d7:bf:40:c4:a9:17:84:88:b3:40:2c:98:3b:66:dd:
                    84:a4:20:02:63:ce:b5:32:a0:74:8c:71:5a:da:8b:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F3:50:4F:62:98:19:9B:D3:E8:C9:39:A1:BB:94:CD:00:02:8F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl

            X509v3 Authority Key Identifier:
                keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:b0:65:68:2a:f1:a4:8b:ac:c0:ad:03:ea:e0:59:bc:3e:
         77:09:a8:2e:ce:04:7a:72:89:f1:4b:d1:11:b0:1b:c7:0b:f3:
         29:0d:90:15:64:fd:ae:3b:78:bd:02:55:88:78:ed:d6:78:83:
         e8:d1:f7:64:3b:74:99:0e:a5:11:82:5d:07:ac:90:c5:6a:83:
         0c:a0:a6:fd:16:92:aa:19:e1:21:07:3a:a3:52:59:bf:88:df:
         d9:59:2c:06:2c:44:6d:f5:ad:65:8d:eb:97:eb:42:57:ff:4d:
         d7:b2:8b:b7:47:d4:5f:9a:60:86:70:25:0c:b8:7f:a6:a0:e5:
         ad:21:89:16:75:7a:b8:58:b7:65:cc:e6:23:15:4a:16:12:76:
         d3:ef:89:8b:71:7d:ff:90:6d:0f:82:90:e7:7a:ba:a6:24:c1:
         15:ef:dc:51:33:58:0d:af:a8:cd:14:f4:6a:67:b3:d4:fb:55:
         f3:eb:28:a3:0f:7d:ee:13:29:27:34:b0:38:10:bc:48:51:06:
         8b:69:0b:b2:f9:72:93:68:25:75:96:0a:f6:9e:35:72:6c:05:
         00:8f:66:cf:6f:3c:0e:7c:8c:e7:e5:e9:d6:47:7b:15:91:1b:
         87:79:f6:29:52:43:73:5b:2e:c7:50:39:ea:ab:24:15:95:5d:
         ef:01:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:45 2026 by rpki-client