Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/2d47f086-eb6d-3456-bded-b4486d9c9c91.roa
File:                     2d47f086-eb6d-3456-bded-b4486d9c9c91.roa (raw, json)
Hash identifier:          iadLa0UTQ7Qs47L7ST+/7qTn6WJ9Yb3TBOEXOuIy904=
Subject key identifier:   21:DE:D6:FC:0E:8E:ED:95:F7:56:49:CC:0C:4A:4B:B1:B1:1D:CE:83
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584CEAA0CB5EEC36600975C802E0
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/2d47f086-eb6d-3456-bded-b4486d9c9c91.roa
Signing time:             Thu 19 Feb 2026 16:17:46 +0000
ROA not before:           Thu 19 Feb 2026 16:17:46 +0000
ROA not after:            Wed 20 May 2026 15:17:46 +0000
asID:                     393397
IP address blocks:        66.150.64.0/24 maxlen: 24
                          66.150.65.0/24 maxlen: 24
                          66.150.66.0/24 maxlen: 24
                          66.150.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:a0:cb:5e:ec:36:60:09:75:c8:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Feb 19 16:17:46 2026 GMT
            Not After : May 20 15:17:46 2026 GMT
        Subject: CN=519a3fdf-ff1d-4c4e-8074-d4dd395fcb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:d1:b9:a8:3a:58:da:46:58:4e:d8:93:d8:
                    d2:11:c8:4f:a8:74:3a:96:e9:5e:29:24:b6:29:58:
                    d8:46:ef:bc:9d:5b:ac:77:56:1c:19:ff:f8:e3:6a:
                    b6:94:e7:c9:d8:99:b2:72:9f:11:e4:29:1f:37:61:
                    45:50:88:a7:d6:a7:d3:02:83:e1:e6:fd:44:9c:25:
                    11:ab:51:86:34:c7:84:e0:bf:cb:3c:ea:00:ea:ab:
                    d9:ed:99:51:62:ab:50:c9:f1:af:3a:e4:8b:ba:45:
                    63:cd:31:2b:2a:15:80:af:ef:74:15:b4:5f:01:1a:
                    27:7f:7a:1d:fd:e1:d2:90:1e:14:a1:99:55:4a:12:
                    32:b6:d0:f6:b7:e6:dd:b7:43:70:d0:50:2e:6e:c2:
                    37:da:93:13:00:28:73:1e:c9:33:43:27:19:d3:d6:
                    0e:34:41:d1:2a:aa:e2:1f:29:21:d0:89:9a:55:47:
                    40:ad:3f:9e:2f:f4:c4:26:0c:ef:02:5b:b8:6a:1c:
                    84:b0:f4:2a:70:39:db:76:1e:c7:73:a9:9a:fb:61:
                    5b:10:a8:ee:5e:a2:49:ea:8d:66:99:fe:68:22:d5:
                    e1:22:f4:14:7b:58:75:72:5d:cf:31:21:9e:02:d8:
                    02:2a:ac:26:fa:20:fe:fc:8b:ad:f5:40:02:2c:ac:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:D6:FC:0E:8E:ED:95:F7:56:49:CC:0C:4A:4B:B1:B1:1D:CE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/2d47f086-eb6d-3456-bded-b4486d9c9c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.150.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:72:be:da:0a:75:fd:e6:a0:20:d8:de:f3:a7:9f:ff:fd:
         26:ea:90:75:bd:a1:fd:e3:01:e5:32:d1:6a:64:48:ce:c5:8e:
         70:e8:2a:c1:51:97:ca:07:aa:b1:fc:b1:9b:9f:ed:8b:80:b7:
         c4:60:28:a9:5b:49:5b:8a:c2:e7:01:a5:0c:aa:25:81:5f:57:
         34:6f:ac:f4:a6:96:9c:14:3e:c1:ce:66:4c:f2:ce:bc:30:88:
         4c:11:83:3c:d2:2f:89:34:3a:f5:23:0f:99:43:66:33:ab:20:
         c4:02:af:af:1b:9e:52:c9:45:dc:bc:b4:ec:34:26:fa:5f:eb:
         89:e9:7d:b5:d9:97:e9:b4:35:56:62:d2:fc:98:04:20:f6:6a:
         cc:99:cb:20:e2:aa:ff:36:b7:c6:0b:32:eb:35:06:f8:66:93:
         22:95:64:ba:df:7c:32:4d:09:34:d0:a0:2f:2d:ed:7f:c5:9b:
         19:cf:57:84:15:62:4a:fb:3a:e1:35:d0:e8:5f:9b:3f:bd:b6:
         1f:4d:e3:ee:79:d2:31:58:c9:2f:55:0b:31:3c:1c:f0:e1:95:
         f4:e3:ba:79:70:21:ca:7d:37:ae:41:a0:ce:c4:8b:ea:ff:59:
         94:ea:de:c9:04:f7:ff:9b:ca:a3:da:38:33:aa:a8:d4:1b:03:
         ff:ff:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:57:41 2026 by rpki-client