Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa
File:                     53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa (raw, json)
Hash identifier:          w3lKqd1lPrVewiUmlQuKmQ3wBbUB3nz4tTldBruSuHk=
Subject key identifier:   1B:C6:11:37:68:4F:1F:9E:EA:8F:3C:7C:61:1D:50:CB:9F:6C:39:0E
Certificate issuer:       /CN=d3bf923d-6c9d-4713-887f-1f30075cf850
Certificate serial:       010D0C9F4328584CD6D212BE7FDC7440F756E648
Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     32746
IP address blocks:        199.175.56.0/22 maxlen: 24
                          199.201.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:12:be:7f:dc:74:40:f7:56:e6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=71edb557-a114-439d-be8e-b5660a921478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:82:23:c6:d4:99:fb:4e:68:ac:b4:8d:12:
                    30:f1:28:20:ef:3f:46:ab:f1:3b:12:86:92:8b:0f:
                    2e:47:ff:e1:52:01:01:2d:c4:c8:19:85:95:4d:38:
                    84:eb:9c:1a:e9:8f:99:2e:92:9e:17:69:a8:44:77:
                    36:28:d3:61:0b:55:07:cc:dc:3a:28:65:0f:26:aa:
                    ac:0b:8a:2e:cd:6f:10:16:c0:ff:51:d7:76:c0:ba:
                    12:25:2c:b9:f9:10:d9:2c:b8:df:21:84:7a:c1:4e:
                    25:f8:12:2f:0c:d0:7d:a1:f4:5f:44:f3:de:45:5d:
                    8e:ae:bb:38:98:12:c6:a3:cf:70:d9:4a:5c:6c:ee:
                    3f:29:d2:80:f7:54:2a:cd:a2:24:39:89:0d:e1:67:
                    f3:4b:5c:b0:2f:2f:23:4d:9f:7d:0f:89:96:36:91:
                    c4:c7:d9:80:e6:b8:89:8c:87:ad:09:91:38:2f:c7:
                    04:e9:8a:7b:f1:01:1d:cd:a4:93:d5:1a:63:89:fa:
                    1d:22:b9:41:10:fc:44:26:aa:70:46:c2:af:e3:33:
                    2c:8d:0a:e0:00:22:24:60:1e:34:43:f1:06:3c:ec:
                    99:39:4c:74:02:07:3a:fd:35:8c:67:62:10:80:e6:
                    0e:df:fc:d2:27:4e:7f:6c:14:bc:11:87:a6:ab:29:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C6:11:37:68:4F:1F:9E:EA:8F:3C:7C:61:1D:50:CB:9F:6C:39:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/53de87bb-ba5f-3d9d-b019-48e29dbd0a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl

            X509v3 Authority Key Identifier:
                keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.56.0/22
                  199.201.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:20:e8:19:f7:69:c2:b2:c2:2b:21:db:8c:4d:02:3a:fc:d9:
         d9:c0:be:96:22:89:36:4e:49:e8:c6:80:1a:39:5f:4c:72:73:
         b9:99:6b:d5:a1:f6:0f:d2:c0:43:6e:8a:58:00:11:81:b2:e1:
         a7:ad:24:17:e4:30:23:8b:a5:b2:6e:16:ec:56:6a:9c:9b:5a:
         7f:d2:5f:94:76:db:2f:0e:c9:22:9b:4b:bc:1d:87:38:52:ce:
         bc:6f:c2:36:ee:17:49:bc:b7:71:2a:c3:1a:65:6a:86:7a:c2:
         6f:59:6b:78:aa:37:b8:5f:2e:4b:58:34:60:be:68:fe:9e:7d:
         eb:3b:15:4c:33:d6:2c:85:b2:d5:92:49:44:90:e2:20:1b:a3:
         bd:02:4f:05:53:b9:9d:b0:52:5b:16:54:a0:db:04:8a:b5:bc:
         5c:eb:e6:82:5f:70:be:f4:5a:38:32:45:f9:f8:58:1b:90:f2:
         5d:e1:3b:f5:a9:74:cf:49:19:2d:27:08:58:42:bb:ab:e8:77:
         47:5e:95:29:92:62:16:e4:e9:cc:cd:78:21:f7:b2:8e:8a:76:
         a1:28:cc:28:52:06:65:fd:1a:ac:3e:d1:16:60:86:98:55:26:
         6f:9c:a3:26:34:d2:9f:37:a1:be:ac:26:ef:f7:be:32:7f:ca:
         d3:c8:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:25 2026 by rpki-client