Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/14acf770-1afa-3855-b9be-f52cb675541a.roa
File:                     14acf770-1afa-3855-b9be-f52cb675541a.roa (raw, json)
Hash identifier:          xjbx7YFuGuYGkLvDHmyVx64bhqwJy6usnSMESbfVExs=
Subject key identifier:   DF:81:6D:3F:C9:D5:19:37:BE:E7:7C:44:B5:5E:F6:C5:CC:CC:70:09
Certificate issuer:       /CN=2c0d6631-d953-4646-a85e-78cc1e2ef97f
Certificate serial:       010D0C9F4328584D70D6656F3E6D76AF24A47880
Authority key identifier: C6:36:71:E1:22:EF:24:7A:43:27:47:57:15:09:6C:81:61:AA:3D:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/14acf770-1afa-3855-b9be-f52cb675541a.roa
Signing time:             Wed 08 Apr 2026 18:04:06 +0000
ROA not before:           Wed 08 Apr 2026 18:04:06 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     25668
IP address blocks:        65.110.0.0/19 maxlen: 24
                          66.51.128.0/20 maxlen: 24
                          172.103.128.0/17 maxlen: 24
                          208.110.96.0/19 maxlen: 24
                          209.205.64.0/19 maxlen: 24
                          209.205.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/2c0d6631-d953-4646-a85e-78cc1e2ef97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/2c0d6631-d953-4646-a85e-78cc1e2ef97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:d6:65:6f:3e:6d:76:af:24:a4:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c0d6631-d953-4646-a85e-78cc1e2ef97f
        Validity
            Not Before: Apr  8 18:04:06 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=61f238bb-b1a5-416e-a13d-fb8e1fd3fbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:17:d3:c9:c3:be:28:56:02:72:bb:2f:01:
                    44:68:0c:30:52:90:ff:18:b6:25:47:0c:3f:95:e4:
                    f7:3a:ad:38:7b:83:c5:dc:eb:32:07:a1:39:dc:a1:
                    f9:e0:b6:0a:3c:df:1a:94:66:b0:c3:eb:75:f9:e1:
                    b4:71:64:0a:69:c2:1e:a5:5c:05:b0:6e:ae:30:2d:
                    db:63:85:74:52:1a:00:41:f2:37:75:18:b3:85:71:
                    f7:12:0c:6d:17:49:68:46:0b:8f:f0:66:72:f6:eb:
                    1e:e9:c7:17:78:b9:22:1d:d1:31:b9:09:57:8b:01:
                    13:8c:d1:b1:79:62:da:77:19:bc:97:e7:af:27:c5:
                    80:dc:33:d2:8f:74:48:9d:b9:91:9f:29:71:54:da:
                    9f:c5:9f:47:c8:f3:1c:30:45:bd:6b:29:f0:db:8f:
                    51:11:05:78:10:4a:f0:da:b1:4d:e2:eb:db:bb:08:
                    33:1c:e2:05:bb:e1:79:50:22:d8:03:82:e9:22:5b:
                    41:1e:b5:a8:45:36:e4:39:61:ac:69:48:f1:46:2e:
                    82:48:c2:d4:c8:6f:e0:82:10:ae:0d:8a:c2:b6:ef:
                    38:9e:8d:34:9c:9f:10:e7:7d:ee:7e:7d:35:e2:3b:
                    8f:df:00:28:26:b9:27:5b:37:fb:d7:5e:50:e8:e5:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:81:6D:3F:C9:D5:19:37:BE:E7:7C:44:B5:5E:F6:C5:CC:CC:70:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/14acf770-1afa-3855-b9be-f52cb675541a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f/2c0d6631-d953-4646-a85e-78cc1e2ef97f.crl

            X509v3 Authority Key Identifier:
                keyid:C6:36:71:E1:22:EF:24:7A:43:27:47:57:15:09:6C:81:61:AA:3D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c0d6631-d953-4646-a85e-78cc1e2ef97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.0.0/19
                  66.51.128.0/20
                  172.103.128.0/17
                  208.110.96.0/19
                  209.205.64.0-209.205.111.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:fb:e5:bd:6a:17:ec:bd:0f:91:53:a1:af:82:61:a1:19:
         2b:d8:be:18:d1:e2:e5:25:e3:6b:64:7c:bc:ef:72:c7:e0:4d:
         66:34:b6:a2:20:35:8b:e8:dd:59:82:44:8f:57:d7:eb:c0:7c:
         cd:b7:f4:32:5d:d5:1d:22:18:ea:b9:11:bb:34:18:4e:b4:b6:
         40:67:09:f3:b8:4e:b6:29:10:80:31:e3:bb:2e:74:8e:52:6a:
         87:c3:53:af:73:4b:ee:67:01:ba:52:2e:16:f2:7a:31:49:ac:
         77:e7:f9:05:eb:6e:f8:34:b0:6a:b6:e7:42:34:c5:78:1b:f8:
         0c:3c:36:35:56:59:52:c8:e1:4f:56:23:05:9d:44:ad:64:c9:
         aa:68:b8:4d:0c:a3:e6:91:4b:18:a3:e3:09:7d:f0:b5:b4:8c:
         ff:02:12:2e:6f:9a:59:79:a5:eb:b3:b1:88:5d:68:6b:8c:a8:
         99:30:67:1e:c7:30:62:df:88:56:e8:8a:bc:ed:5a:57:39:00:
         98:cb:a1:63:1f:6b:58:e5:a1:ce:8e:fb:97:ee:3d:22:d9:31:
         1a:90:19:cc:4d:10:65:3f:31:7a:1d:22:e4:4d:64:c0:48:82:
         a2:38:a8:19:e5:4c:94:38:a6:64:43:83:d6:d8:6a:ef:75:67:
         f3:b3:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:22 2026 by rpki-client