Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
File:                     6d52598c-853a-33f7-b184-caa86dfc7a61.roa (raw, json)
Hash identifier:          hqnrcf4+sc0wdj5MdBrjh0XUahWlHzbAHCmXdpk4TIw=
Subject key identifier:   7B:D5:75:B2:67:69:36:76:4A:BA:58:15:55:7C:6B:00:5B:56:48:AA
Certificate issuer:       /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
Certificate serial:       010D0C9F4328584CF852452150AAB195A8712C80
Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     36515
IP address blocks:        199.68.56.0/21 maxlen: 21
                          209.240.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:45:21:50:aa:b1:95:a8:71:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=24ce6321-c3a0-4250-aa2c-6e0c71b19e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:72:94:4e:8b:0b:d3:18:d8:ef:36:2e:a7:
                    f6:54:81:83:6a:4c:93:2e:72:f9:5d:2b:27:72:a5:
                    74:22:a0:f2:57:fd:0a:37:a6:b7:87:2d:2b:6a:72:
                    ff:c6:25:5f:be:06:64:42:3d:ea:86:d9:cf:44:20:
                    00:26:fa:6e:53:0c:f0:1e:71:a0:28:82:8a:15:2c:
                    92:2e:af:fa:3d:fa:13:d7:b5:9b:b9:53:44:48:70:
                    39:c4:72:15:75:19:cc:10:32:30:71:3a:dd:ae:5b:
                    a7:e1:08:15:7c:c0:83:c0:14:43:82:d4:69:90:4d:
                    01:bd:5d:4c:21:36:7e:a6:50:d9:ba:91:61:0b:e7:
                    ac:95:88:16:f1:43:ab:5a:de:f3:68:26:a1:98:fd:
                    d1:87:c9:eb:24:99:28:7e:aa:f6:a4:fa:df:18:47:
                    82:d1:6f:97:09:19:c9:f4:c5:e9:47:49:73:65:37:
                    83:b6:a0:5b:8b:9c:a8:29:bb:7b:7b:2f:6c:c4:ac:
                    66:26:8a:3e:84:bd:04:3a:fc:53:f6:31:de:2c:87:
                    12:4c:75:a4:4b:0a:72:16:d0:79:5b:fa:d2:17:56:
                    f9:b7:19:79:e2:57:76:3a:72:c2:8c:ed:cc:15:35:
                    90:e5:55:d9:92:d3:20:50:03:2d:b8:7a:3f:a3:e6:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:75:B2:67:69:36:76:4A:BA:58:15:55:7C:6B:00:5B:56:48:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl

            X509v3 Authority Key Identifier:
                keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.56.0/21
                  209.240.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:a2:cb:9f:e8:ca:7f:66:58:6a:cd:fb:4c:8b:5e:e8:4e:
         2e:d7:80:70:da:a4:74:94:b1:a5:70:65:73:9b:78:f5:37:3f:
         49:f2:83:1f:e3:aa:a7:8d:7a:ba:9e:44:c3:99:67:0e:a2:26:
         d8:f0:7a:ff:a7:75:07:4c:9d:65:a9:3a:8b:1a:67:da:7d:3a:
         03:95:c0:2c:24:c8:4b:a4:7f:8c:ba:d5:a4:22:fc:6d:33:f1:
         42:46:f9:19:ed:b3:44:4e:46:3e:15:12:0a:85:ce:41:55:b1:
         b7:c9:88:78:c2:d2:eb:36:10:53:d8:45:12:e8:bf:14:ac:8b:
         7b:1f:5b:91:03:af:e3:72:32:02:6f:89:25:5a:18:12:0c:8e:
         d7:81:13:33:92:0a:12:a1:54:c1:37:59:85:4c:65:dd:f9:45:
         57:3a:a5:04:5a:0c:27:48:5f:0e:6f:55:f5:82:d9:9a:9d:fc:
         6d:95:d5:8f:67:60:23:f5:cf:f7:60:7b:e2:82:0b:b7:41:64:
         a5:ad:15:8b:29:76:e1:ea:18:50:18:89:a4:9c:52:2c:6c:86:
         7b:9a:7b:9a:7f:46:91:ea:ea:4f:8c:8d:98:c8:2b:75:a7:0a:
         af:d6:87:dd:57:2a:d2:05:36:f0:9f:38:9f:59:c7:91:9c:68:
         8d:a4:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:03 2026 by rpki-client