Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/0e46189f-6763-3c78-85f7-44b980d57254.roa
File:                     0e46189f-6763-3c78-85f7-44b980d57254.roa (raw, json)
Hash identifier:          Q/q/6uNppne6fKfoMYOM3WTb7oyJs5bfLYxxN8HwwHA=
Subject key identifier:   F7:0A:C4:7C:E8:4C:F8:69:A3:57:D0:CB:C0:87:A5:50:25:C5:B9:DB
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584CD4075369CA48493186BE1740
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/0e46189f-6763-3c78-85f7-44b980d57254.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     40627
IP address blocks:        66.81.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:53:69:ca:48:49:31:86:be:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=5cc21123-a375-4b4e-a80a-48e4b366f1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:85:1a:d6:93:67:16:69:78:e9:84:01:3a:
                    49:ac:59:37:de:ad:ac:01:99:19:02:78:f8:44:3a:
                    a9:eb:b3:6c:0e:38:7b:44:8b:1a:4d:26:1e:1b:b9:
                    23:1a:9f:9d:c5:d3:9a:19:8d:f6:17:ba:e3:12:e8:
                    b8:04:fc:5e:37:70:a1:a6:5a:08:c5:19:07:76:fd:
                    b2:99:0a:a4:4b:c4:a5:82:0f:09:92:e5:02:ec:10:
                    76:60:dc:f0:c6:7b:b9:5d:ff:11:ca:cb:00:d2:4a:
                    66:c7:75:b7:48:0f:89:63:2c:fa:a1:6f:6f:c2:26:
                    d5:dd:79:aa:4b:45:9b:ac:d2:9f:81:49:1d:12:42:
                    5e:21:19:6f:a0:74:40:85:ab:be:ad:e5:ac:1f:5d:
                    eb:2b:65:d6:7f:b6:c9:27:97:5e:96:a4:7b:97:cc:
                    96:81:20:e2:dd:7c:a8:94:13:35:1f:75:17:8b:7b:
                    b0:09:23:cd:08:93:62:ed:66:a0:7c:ea:a5:36:84:
                    04:5d:41:3f:87:83:94:4f:41:af:8c:7f:9e:40:e5:
                    bf:bc:65:da:19:63:81:99:12:58:bc:a4:3c:fd:d5:
                    df:e7:51:73:a8:e4:31:b2:a8:83:fd:df:f6:4f:78:
                    d3:86:78:28:e3:1c:66:95:66:03:08:8a:ec:36:ed:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0A:C4:7C:E8:4C:F8:69:A3:57:D0:CB:C0:87:A5:50:25:C5:B9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/0e46189f-6763-3c78-85f7-44b980d57254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:b4:3d:dc:69:2e:99:cd:af:6a:c9:2e:83:ff:9c:15:4b:
         76:12:cb:ce:96:f9:a2:6e:1d:96:69:b7:41:3e:2a:c6:b0:1d:
         22:ec:56:a5:8e:bd:d2:e1:0a:5f:9f:1c:40:32:8e:8f:c2:af:
         37:8d:04:ac:92:2b:3c:88:14:d9:68:84:3b:e8:46:61:e1:27:
         66:e9:c8:f3:5c:69:16:b9:f6:ed:d2:b1:ed:7a:99:a7:14:fb:
         bd:1e:ce:d8:5d:a9:dd:e7:a9:f2:9d:c8:fc:91:5d:ed:b5:3f:
         85:28:35:2b:1d:59:84:78:4f:ea:56:82:5a:e5:e3:b3:f4:c8:
         d8:ae:34:e6:8e:ef:ec:34:b6:f6:87:c7:b4:a7:e2:c6:5c:10:
         b5:35:00:a5:b8:39:e8:7a:97:38:bb:16:aa:70:d8:99:8d:1d:
         23:ac:86:8c:68:de:36:6d:a7:5e:8f:85:16:4b:6b:9a:d2:7a:
         66:a6:b9:6f:e1:c1:57:15:63:55:05:3a:eb:30:11:0f:83:6e:
         6f:5c:48:05:4b:99:65:2c:9c:3d:4d:6f:da:67:ac:8d:d6:44:
         a9:53:5f:db:f6:f1:1c:da:f2:6d:5d:e4:4f:2b:df:1a:89:81:
         90:37:88:93:9d:c6:46:65:be:ae:bd:d4:17:cd:16:e7:0f:68:
         ad:dc:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:35:51 2026 by rpki-client