Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa
File:                     e3d19010-3c57-31d1-9452-1c284aeb635a.roa (raw, json)
Hash identifier:          TGtduBuOxjp+Ua1GGcaUlD6byipnrMGMNO2y5qFWrYE=
Subject key identifier:   01:83:C5:EB:89:7A:4E:4A:3F:21:B7:6C:44:32:09:8C:81:94:EA:92
Certificate issuer:       /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial:       010D0C9F4328584D6AAA68996F910E0FB4208E00
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16557
IP address blocks:        66.103.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:68:99:6f:91:0e:0f:b4:20:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a5556dff-2c1b-46da-aa26-6b87fe097fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:e5:6a:34:36:2d:9b:b4:0e:8a:58:67:4d:
                    dc:a6:58:d4:8f:2c:7e:99:e5:ed:8e:71:b5:8c:1c:
                    2a:bc:99:b2:9b:b0:bf:47:f0:2a:61:22:4b:41:16:
                    97:e7:7e:a5:f5:f6:88:0a:68:83:67:1e:72:60:5b:
                    99:f3:46:cc:55:13:de:27:0a:56:24:77:b5:15:16:
                    31:af:fd:81:c6:cc:88:52:bd:04:3f:6d:65:71:7f:
                    44:a3:cc:c2:f0:a5:bb:a0:8f:fe:b3:e9:2c:50:0c:
                    8d:90:f7:d2:6f:cc:fb:2d:bd:16:f5:9c:82:41:00:
                    44:5a:d4:2c:bc:f5:73:2f:fc:d2:0b:62:4b:95:1f:
                    2f:e2:f7:d0:4b:fb:02:9f:64:2b:c9:47:5c:b3:dc:
                    b8:86:7c:f9:24:44:ed:68:50:cf:c0:d3:b4:8d:fb:
                    a8:91:46:ef:63:46:fd:d9:18:13:82:91:4c:39:e4:
                    10:87:75:76:49:e3:6a:ea:2e:72:2d:39:81:37:b5:
                    08:3b:b4:37:9b:72:40:a0:56:57:dd:8c:75:28:9f:
                    d8:03:e8:77:26:f1:43:31:9d:4f:cb:b7:b9:fa:57:
                    ae:53:eb:6d:5b:76:5b:e2:7e:64:10:65:fe:4b:6d:
                    91:af:03:bd:a0:6d:95:61:72:1b:11:e6:5b:99:40:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:83:C5:EB:89:7A:4E:4A:3F:21:B7:6C:44:32:09:8C:81:94:EA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:02:2b:cc:66:b4:52:7a:b8:33:56:38:1c:86:ab:db:bf:
         49:22:3a:79:3d:56:36:f8:ad:3c:bf:00:52:55:e8:96:f3:2e:
         c3:37:7d:80:95:8f:49:3f:be:fa:f8:e7:10:d6:44:3b:2e:df:
         b0:36:24:9c:7f:7a:ed:66:86:4c:53:6b:0c:6d:a5:9f:f3:03:
         c1:8f:13:b4:af:82:d0:93:fc:67:4e:ff:ac:71:0f:f1:56:62:
         53:51:27:68:a7:ee:b2:80:b1:79:3b:bc:10:ee:b3:17:ac:30:
         f7:f9:94:85:48:e8:b4:40:81:7e:73:da:4f:0a:7c:36:33:aa:
         8b:42:40:13:52:aa:a1:f7:6d:9f:e2:b8:e0:34:63:a6:be:8b:
         88:b1:87:bd:42:72:48:82:c7:02:fc:92:5f:ea:5c:a3:a5:b8:
         bf:b8:35:b0:1a:59:83:97:60:54:15:59:17:5f:5e:7d:19:f1:
         35:a1:69:77:ee:04:f9:71:1b:fa:da:45:8f:68:3b:64:c6:f5:
         8b:fb:3b:9f:6b:09:cc:a1:7b:5f:9c:ba:9d:06:b9:83:d8:b7:
         a3:58:60:b7:fc:57:60:84:43:c5:c1:2c:92:6c:1b:7a:a7:82:
         c2:10:46:50:89:08:fe:2f:f8:0c:ca:7a:71:09:91:ec:ff:37:
         33:18:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:07 2026 by rpki-client