Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ede10f3-0309-3a2b-bedb-6000ed6c971c.roa
File:                     0ede10f3-0309-3a2b-bedb-6000ed6c971c.roa (raw, json)
Hash identifier:          NbKSkMnKS59Yc41g4+c1UOh2HrsEg8+my0FEGVIiMRk=
Subject key identifier:   EF:07:A2:CA:FF:A4:DF:D6:9F:BA:F2:9F:99:F9:D1:04:2F:60:F0:B7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CF2BD0B77B58D13F38E106FC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ede10f3-0309-3a2b-bedb-6000ed6c971c.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     5065
IP address blocks:        69.3.128.0/24 maxlen: 24
                          69.3.129.0/24 maxlen: 24
                          69.3.130.0/24 maxlen: 24
                          69.3.208.0/24 maxlen: 24
                          69.3.239.0/24 maxlen: 24
                          216.175.200.0/24 maxlen: 24
                          216.175.201.0/24 maxlen: 24
                          216.175.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0b:77:b5:8d:13:f3:8e:10:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=46c3e3c8-8584-4474-acaf-0cdcfe726d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:25:aa:e3:4e:37:19:3b:0c:ac:52:46:b6:
                    d0:09:5f:d4:33:ae:e0:7a:11:dc:9f:36:bc:d0:42:
                    b4:29:aa:52:88:58:c4:fb:f4:e9:91:06:72:fb:97:
                    eb:4a:24:77:b5:cd:82:cc:68:87:ce:d9:f6:23:fa:
                    ac:8f:3a:0d:a2:64:54:16:90:56:d7:6a:87:27:0a:
                    d9:d6:6b:94:e6:d6:92:65:d0:f3:b6:1a:b2:26:a0:
                    40:a9:1f:94:be:ea:bc:f8:f3:9f:dc:1f:c2:10:3a:
                    12:06:f7:10:f6:e2:55:d8:3a:bc:c3:4a:bd:26:09:
                    c0:84:d5:94:d0:ac:3a:f9:fe:a4:cb:6f:78:cb:ae:
                    6d:1a:be:7a:0b:14:28:8d:a5:e8:b6:66:ab:97:15:
                    18:e1:ac:ba:d5:37:68:22:66:46:0c:58:e6:94:d5:
                    59:81:ca:ca:10:4e:59:7a:6d:ae:35:ed:7e:34:9e:
                    5f:bc:88:77:a8:cc:2a:18:7d:5b:7d:4f:08:a5:a3:
                    80:a9:99:cb:7a:56:e4:bb:d1:fb:87:9a:f4:fc:88:
                    61:e3:6f:d7:1e:0f:a9:b8:87:8d:f0:ae:32:fe:2e:
                    91:04:df:cf:64:7e:5a:76:3d:77:f2:f1:18:0e:02:
                    44:4f:23:c4:fd:f5:3f:7a:97:12:e3:51:b0:fd:ef:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:07:A2:CA:FF:A4:DF:D6:9F:BA:F2:9F:99:F9:D1:04:2F:60:F0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ede10f3-0309-3a2b-bedb-6000ed6c971c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.3.128.0-69.3.130.255
                  69.3.208.0/24
                  69.3.239.0/24
                  216.175.200.0-216.175.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:8a:28:fc:1b:fa:63:8f:7d:3d:21:98:6a:92:fc:fc:b4:
         7e:95:f0:c6:ae:9c:05:b5:9a:4e:80:54:39:68:8f:62:0a:52:
         32:e3:2f:be:8d:85:8e:32:70:0a:b5:dd:7e:ac:aa:4f:74:d1:
         af:b3:b5:8a:b7:d3:39:d0:3f:05:75:73:a8:69:2b:14:dc:c9:
         55:3b:d8:55:c2:f4:8f:ae:8b:65:de:c5:4a:8f:48:74:a1:ce:
         c8:3f:d0:4f:a4:a7:e1:d9:78:4b:c1:1d:b9:81:b2:e0:08:ee:
         6f:69:ad:1e:22:ec:ad:dd:d5:80:21:f1:79:ac:f6:25:ca:38:
         a7:50:e0:8a:6a:35:de:2d:e6:72:90:5b:59:53:05:5e:a3:5b:
         03:a9:e1:8c:26:00:27:97:50:52:c0:1f:f0:15:1f:d2:ef:4c:
         f8:d4:52:1a:85:bf:79:d2:4d:d4:e9:24:b5:3e:e2:ad:12:48:
         ab:35:9a:bd:7b:44:c4:58:76:40:7a:4c:b0:f2:b5:df:fc:88:
         27:44:f4:83:41:eb:01:ff:c7:01:da:5f:fb:3d:73:59:56:49:
         39:d7:50:fc:4a:73:82:0b:4e:4a:3a:dd:4a:56:f1:95:b0:07:
         04:05:67:66:73:9a:a3:80:3f:2a:7e:cf:d7:58:98:db:82:58:
         c8:18:e1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:11 2026 by rpki-client