Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa
File:                     0a5a6f69-3335-3826-9d7e-893e816a4189.roa (raw, json)
Hash identifier:          vGN3W7nJwsquOwf6FhuaQiapmTJQfi/hpQiBF/3qDUY=
Subject key identifier:   91:D0:6E:4C:3C:82:38:7E:D0:05:49:03:4E:1C:A2:D1:72:2C:02:5B
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584CCA41F199DDCADD30A0195140
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        207.202.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:f1:99:dd:ca:dd:30:a0:19:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=a7901f3c-d142-4fa9-9525-bca0a5398a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5d:1d:36:8a:08:d2:03:2e:82:14:61:e9:c3:
                    c7:d5:4a:00:9f:46:b5:5f:d3:3d:49:df:bb:a9:78:
                    cd:4f:55:b3:b0:59:6b:c0:55:2b:79:e3:14:c2:66:
                    ce:0d:14:5a:81:57:98:80:cb:f2:72:a2:2d:77:4b:
                    ec:58:8e:95:4c:37:b5:96:df:f1:d0:95:3b:d4:cc:
                    aa:fc:c5:ea:1a:61:df:48:c8:b7:bd:0d:17:ca:c6:
                    1a:d3:3f:94:2e:22:76:91:6f:b1:b0:f5:71:aa:c1:
                    df:20:66:a1:d2:a7:8c:ad:a0:d4:04:83:26:73:1b:
                    ba:ab:1c:69:6b:6e:98:4c:98:98:ae:77:f8:c2:04:
                    96:fd:00:01:9a:1a:6b:e7:0f:5f:39:7b:bf:0e:e2:
                    48:32:f0:6d:1c:e4:eb:bf:5a:d9:61:62:f7:04:e1:
                    f8:41:41:21:b0:9a:0e:fa:55:00:b6:f9:e1:03:50:
                    bd:ea:45:21:ad:7d:8d:1b:f3:03:3f:e1:27:82:a8:
                    86:3a:e8:f1:96:75:fa:ad:96:06:a0:49:75:ef:eb:
                    bb:7b:89:db:5c:f6:1c:ec:6d:d7:fe:34:77:00:9b:
                    a2:34:dc:ee:f4:32:88:26:93:3c:40:fd:65:9f:b1:
                    28:35:ef:42:da:99:77:0b:d9:12:c2:96:d7:00:24:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D0:6E:4C:3C:82:38:7E:D0:05:49:03:4E:1C:A2:D1:72:2C:02:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/0a5a6f69-3335-3826-9d7e-893e816a4189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c0:e2:fe:36:82:0f:5f:56:21:ca:f9:01:5c:ad:72:29:a2:
         a1:2f:88:8f:00:57:b7:4b:53:91:68:1d:fe:ce:5e:4c:9f:7d:
         74:f8:a8:25:76:79:9c:99:1d:4f:ac:d2:f7:76:f9:6a:f7:fe:
         16:ec:f0:8b:b4:f6:8e:31:56:28:5c:4e:c4:a9:c8:a4:5d:b4:
         2a:b1:53:b6:db:3c:e6:cc:76:95:96:48:ea:48:7f:e0:9d:df:
         53:fa:88:0b:90:39:40:04:80:85:35:91:e8:85:2d:34:f3:b5:
         43:62:5d:41:c0:e5:8b:8f:ed:d9:6b:22:d4:b7:c7:1d:2f:03:
         58:e7:63:64:79:3e:05:6c:74:c8:c0:f6:8f:f5:7a:90:9d:91:
         ec:a3:f7:3b:bd:d7:91:92:c1:0d:4c:7a:47:2b:f2:4f:b4:05:
         04:fc:af:10:93:30:55:8d:fa:dc:23:f0:4c:93:1e:e3:36:db:
         e5:5c:13:f8:9b:92:ff:ea:f5:39:62:9a:6f:1c:0d:b2:7c:89:
         20:a3:0a:a0:66:aa:43:96:a1:17:60:27:f2:78:87:c5:6f:c0:
         74:d7:8b:80:70:16:0c:c0:4f:72:48:fd:72:a0:6d:ed:e8:ee:
         98:48:1b:d0:10:cb:32:b5:e8:56:87:fe:63:11:38:fb:b3:87:
         e3:2c:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:54 2026 by rpki-client