Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa
File:                     ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa (raw, json)
Hash identifier:          7AkjAUrtX3DOy0uPdbwGGD+TNTjwQ2RwRzNsfllhATI=
Subject key identifier:   7D:70:B1:22:45:CE:34:35:45:96:61:DE:29:74:20:A1:30:D7:08:26
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CCBA761EE5261557287058500
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     13576
IP address blocks:        66.115.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:61:ee:52:61:55:72:87:05:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=87e68520-18d1-4bf2-8d74-e2bd8050afef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:a6:21:33:ab:cf:cb:08:c4:05:3e:44:1e:
                    eb:c5:99:cb:9f:88:77:58:0c:d7:45:3f:eb:71:0c:
                    7e:2c:ee:a2:6c:54:89:de:40:1c:d7:c9:63:42:83:
                    8e:f1:30:60:d5:93:2c:1f:bb:d9:05:6c:42:a5:90:
                    68:5f:46:57:54:86:20:e2:39:fa:19:22:53:1b:5c:
                    65:aa:c7:31:40:95:2b:32:04:a6:84:97:6b:b3:1e:
                    ca:36:fd:a9:2c:ea:87:99:62:d6:1e:bf:53:c8:30:
                    a5:13:f6:6c:bc:bc:2d:d8:88:fb:6d:7b:36:a8:50:
                    e0:69:00:6f:96:0c:e7:85:72:3b:64:a4:e7:3d:54:
                    bf:7c:da:47:93:b3:59:6c:d8:7e:0b:b5:48:1e:0f:
                    18:b0:11:12:79:54:ee:1d:ae:a9:d9:3f:f5:33:a4:
                    60:b2:a7:f4:7f:35:53:01:05:33:83:5e:99:6c:8b:
                    c5:14:2d:80:85:43:be:0b:d2:1d:9a:f0:54:46:21:
                    f7:88:41:3f:e0:a5:9a:f0:f2:75:aa:70:29:b9:b9:
                    0e:c1:22:f7:2f:0f:a4:17:85:19:60:b3:44:c3:16:
                    62:93:af:04:bf:89:91:93:16:46:8b:cf:58:6f:21:
                    a2:87:e5:91:6a:57:16:2c:02:a6:58:b6:ce:05:4e:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:B1:22:45:CE:34:35:45:96:61:DE:29:74:20:A1:30:D7:08:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ce0e9eef-ff8c-38fa-a3af-5e3678cae8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6f:96:25:11:78:02:e7:e7:8a:14:cf:5a:4e:f8:01:3e:11:
         cf:96:84:ef:23:29:d4:dd:bf:82:f1:d9:53:33:ee:e1:f7:26:
         56:63:e6:4a:27:39:eb:87:42:f4:4d:99:ac:f4:ec:96:d7:de:
         fb:75:10:61:8b:e8:f1:50:fc:af:e7:65:09:ee:4c:2d:81:3c:
         81:8d:d5:0e:c3:4e:2b:5f:01:5a:9a:d5:1d:21:aa:26:b6:30:
         f4:ea:49:7a:65:87:c3:43:09:c0:a3:ef:0c:7b:ab:94:95:f3:
         14:f6:e2:0c:cd:e6:af:1a:4c:1b:9f:21:00:6f:05:b7:e1:14:
         bc:b8:67:ec:d7:17:31:d1:2f:02:df:3b:c4:a0:53:62:2e:22:
         88:bb:37:de:b2:4d:12:af:7a:ff:cf:f2:85:32:6a:9d:85:1f:
         b9:ea:aa:c3:86:8a:de:ac:c7:08:83:24:c6:ea:10:81:e6:5e:
         81:dc:dc:a8:02:f2:08:c8:91:82:4b:af:28:36:2f:e3:0e:f7:
         25:1f:9a:ec:0c:d1:4b:a9:17:b5:59:f8:a7:40:69:46:50:5c:
         bf:7e:54:eb:9e:9c:58:1b:46:06:91:9c:33:84:bd:fb:39:0b:
         c8:9a:73:0c:7b:81:21:b3:ee:68:f3:4e:3c:be:fa:80:c2:05:
         7a:d0:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:41 2026 by rpki-client