Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42c83176-dbb6-39aa-93b7-4957992a652b.roa
File:                     42c83176-dbb6-39aa-93b7-4957992a652b.roa (raw, json)
Hash identifier:          Pxa5souq44GXuQAL0jtDf8Xj+QWFPZsmcAX15yzSHjw=
Subject key identifier:   E0:63:6A:40:2D:C1:A8:23:4C:39:78:86:71:19:51:5D:CB:3C:1D:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D00B29CE7093A16CE2E649900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42c83176-dbb6-39aa-93b7-4957992a652b.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     701
IP address blocks:        63.66.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9c:e7:09:3a:16:ce:2e:64:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=2207112f-d8fc-465c-b5a1-d2977794b7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:df:7e:43:3e:69:42:53:bc:dc:a8:fd:37:
                    5e:29:02:98:17:d3:3b:54:90:1e:53:88:f5:f6:59:
                    ab:3a:aa:cf:f8:2d:3b:20:26:5e:c5:14:4a:8f:2e:
                    10:39:bd:fd:59:52:33:18:0f:16:56:31:ea:c1:c2:
                    b8:88:98:ae:bb:91:22:e7:d8:ad:ec:d9:08:76:f6:
                    d6:eb:26:25:17:28:69:73:6e:5c:80:2b:2b:96:e7:
                    d7:e6:3b:89:51:ca:7f:88:f9:68:48:ea:0b:af:c0:
                    e5:b4:a0:8e:d1:03:a8:2a:93:84:f1:f7:a1:61:1c:
                    76:64:1c:6c:cd:ff:5c:a9:fa:d7:e4:da:72:ee:46:
                    b5:2c:2a:a3:9f:69:fe:cb:bb:b4:bb:ee:ff:d4:5f:
                    20:61:7d:e6:13:89:e8:46:53:fd:1b:64:78:08:3e:
                    e0:d0:35:c3:05:5d:40:f8:0c:a0:89:3e:c0:0b:cb:
                    0c:77:ce:e6:e4:84:c4:e3:32:f4:ad:b1:82:72:10:
                    af:1d:54:68:50:e1:63:bf:f9:b7:4c:e7:a8:6d:7a:
                    a6:59:9a:f8:e1:a2:6f:3d:0a:77:6d:6f:3e:60:d8:
                    f5:24:48:fc:17:d7:12:96:ea:82:82:72:74:28:3b:
                    f5:fa:31:79:6d:bc:0b:42:bc:04:92:31:8d:8c:df:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:6A:40:2D:C1:A8:23:4C:39:78:86:71:19:51:5D:CB:3C:1D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42c83176-dbb6-39aa-93b7-4957992a652b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.66.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:54:be:f0:05:c3:a7:2b:a9:d5:51:c7:52:36:72:0d:63:e3:
         4b:37:26:40:27:b2:35:df:db:20:92:f7:6c:dd:ca:60:58:81:
         c1:08:36:89:d0:11:d6:c9:f6:51:c6:b6:3d:cc:21:6e:40:dc:
         6e:5e:45:94:8b:57:2e:69:e1:42:16:53:65:92:4c:83:16:fc:
         eb:09:a5:6f:97:6e:e8:91:ae:be:49:ba:51:2a:aa:68:09:b0:
         45:f2:f4:c7:ca:06:27:36:35:b8:db:02:82:7b:3a:0e:8b:1f:
         97:a8:4f:81:7b:b9:0b:58:23:b0:3f:ae:19:c1:1a:c0:61:2a:
         01:81:e2:92:92:d3:e8:9b:0d:b4:32:0b:55:a9:94:07:f8:eb:
         5a:ef:6e:4a:b4:04:15:14:de:74:0d:b2:fb:a6:28:b5:4c:f4:
         68:25:ed:b6:95:ed:9d:d5:1f:52:f0:41:81:52:22:81:16:f2:
         e1:02:b6:e9:33:fb:5f:c7:b2:42:1f:ca:9d:97:a6:c7:d5:8e:
         18:fe:3f:b3:bb:33:3e:5a:ba:82:ef:3c:4e:19:3b:7e:e9:22:
         49:e3:17:4a:3e:cf:00:3b:5f:76:52:7f:40:9a:1f:fb:e6:8a:
         65:03:2b:58:51:b5:23:63:1f:04:9b:b3:ec:3e:d1:7a:02:7b:
         8f:55:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:36 2026 by rpki-client