Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/b5cd3131-83e9-3692-8091-5903443094cd.roa
File:                     b5cd3131-83e9-3692-8091-5903443094cd.roa (raw, json)
Hash identifier:          Y9NnSgK04JDOoOPq/TgpwkEAPyS96EI0ZNq7Kzci7Dg=
Subject key identifier:   EA:63:C2:DF:AF:48:EB:13:C2:0B:72:B0:76:66:66:E5:B6:51:D0:F4
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584D97556AE5BEA21F39A9F53540
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/b5cd3131-83e9-3692-8091-5903443094cd.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     22351
IP address blocks:        66.36.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6a:e5:be:a2:1f:39:a9:f5:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=eecf22b5-a0dd-425f-96a6-8039e8ca0920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:f8:50:aa:d2:d4:5b:d5:eb:f0:11:a7:64:
                    9a:f1:f3:93:1c:b1:a2:0c:58:64:17:b9:e3:98:a7:
                    7e:31:35:50:e9:50:8d:a6:01:1f:16:87:e7:3a:43:
                    8d:0e:c2:d6:94:24:35:6b:37:5e:ed:91:8d:4c:cd:
                    fa:c9:cf:86:87:b9:69:88:87:67:93:ad:d1:d6:53:
                    40:af:89:ac:57:fd:18:ab:3c:ee:32:b4:cd:27:3a:
                    14:12:17:6d:d6:2c:41:9b:01:75:1e:ef:8e:b3:42:
                    ea:11:fa:90:37:da:2e:07:6f:75:8c:23:51:0a:fc:
                    d8:10:db:b0:18:8e:29:12:c1:3b:bb:db:5d:24:dd:
                    cd:62:ee:6f:55:ed:44:45:ff:1b:0c:17:0b:d1:97:
                    e9:63:0a:55:78:ea:5b:bb:2a:a5:00:88:aa:eb:10:
                    dc:3b:c3:66:ba:0f:5b:17:6a:da:5d:19:eb:1e:b5:
                    d5:88:d2:f4:e7:c6:b1:24:65:31:43:db:a2:37:b1:
                    c5:fb:bd:3f:c6:2a:e2:27:5a:71:c3:e4:1f:0d:94:
                    12:ea:3e:6d:58:7e:78:e0:99:34:51:a0:14:cd:d9:
                    85:33:0b:e1:22:fd:06:46:8b:a6:aa:e2:c0:bb:9b:
                    05:3a:45:07:20:de:cd:8a:00:86:75:88:86:c1:e1:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:C2:DF:AF:48:EB:13:C2:0B:72:B0:76:66:66:E5:B6:51:D0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/b5cd3131-83e9-3692-8091-5903443094cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:da:4d:10:df:5f:3c:49:a5:ff:f5:73:ee:81:3e:05:0e:27:
         e9:f3:31:ed:d2:fd:9b:7d:d6:80:2e:8f:9d:73:e5:6c:26:b0:
         d4:3b:ce:eb:f5:83:44:55:ab:34:73:7a:30:47:d6:3d:81:aa:
         93:78:e2:24:d7:78:46:c2:9e:86:7c:cd:55:cd:5b:52:68:75:
         35:b4:f8:33:92:4d:a0:07:a8:a9:23:33:fc:97:f4:2f:98:fd:
         96:bb:26:11:fe:0c:09:7f:ab:a2:c3:6e:0c:43:bc:18:5f:c5:
         27:95:e4:1f:e7:80:45:c2:9f:60:6d:03:33:d0:19:7c:85:43:
         01:44:1f:ca:4e:cd:52:28:e3:0c:36:bf:21:c0:c8:58:a0:3b:
         51:ab:00:7d:28:d0:c1:81:ff:e8:97:77:c9:a9:e7:65:40:d9:
         3f:72:06:f2:a4:ff:01:7a:05:3a:56:e5:81:63:ee:4e:b2:90:
         52:01:8b:e9:9c:f0:c5:45:e8:48:6f:90:47:e1:0a:28:ca:40:
         66:6b:82:85:01:cf:a9:75:95:8e:fc:98:65:af:bf:9e:48:4c:
         da:12:04:6f:8c:12:a4:35:25:97:70:f6:b1:42:57:aa:68:aa:
         bd:43:c6:9e:f0:bf:d0:80:1b:b3:f2:c1:a3:b5:0a:d9:4a:95:
         71:f0:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:36 2026 by rpki-client