Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa
File:                     59544e35-0c4d-3fbc-81cb-8a530d41787f.roa (raw, json)
Hash identifier:          /1XBs/doPKwEDCcmyFtO1tm9D5vEwzslsW+/Eh18ie8=
Subject key identifier:   11:68:7E:D3:93:E7:D5:77:77:81:AC:3B:D5:D6:A3:AE:D2:A9:38:C6
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584D300A4AE45ABA5F8808CD5F00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6621
IP address blocks:        67.44.112.0/20 maxlen: 24
                          174.32.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4a:e4:5a:ba:5f:88:08:cd:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=42ceb9bb-aae0-45f8-a72f-2208aef95258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:c6:b3:bb:7d:22:0b:08:1b:d7:d3:24:ae:
                    0a:a7:44:40:34:41:01:a8:b4:c3:29:62:cb:03:60:
                    87:3d:26:48:2d:54:45:2c:37:9c:29:4d:8d:91:6d:
                    a5:7d:c9:12:79:44:00:46:8c:02:14:a7:1f:46:f0:
                    b1:0c:8d:fb:41:2b:76:90:49:11:75:e7:98:7e:89:
                    9f:5b:c1:14:9a:3a:80:80:d9:67:4a:21:07:05:56:
                    cf:a8:fa:5c:f3:12:77:a7:08:ef:6b:b4:73:9d:36:
                    59:51:4b:a6:40:45:26:eb:c8:76:8b:dc:16:19:d5:
                    f8:ae:22:ba:02:4d:52:95:20:b5:7d:39:84:7e:3b:
                    d0:c6:a2:ac:14:6b:35:cd:00:19:e4:41:24:35:9d:
                    ec:18:91:f1:86:77:5f:dd:ce:1e:de:a1:79:6e:c5:
                    87:99:ca:1b:6e:52:74:1b:70:cd:46:29:3b:8f:8e:
                    01:27:44:e5:71:ab:70:77:dc:c9:09:89:a9:5e:90:
                    2f:10:ed:50:3f:56:da:2a:54:bb:bd:a2:a3:86:7d:
                    73:37:5b:39:8e:8d:8e:9c:22:83:80:03:09:9d:18:
                    d0:f1:64:ef:47:50:9f:26:92:58:14:69:29:f8:ed:
                    b1:a2:d3:9b:eb:3b:61:a4:4f:fa:b0:64:63:30:93:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:7E:D3:93:E7:D5:77:77:81:AC:3B:D5:D6:A3:AE:D2:A9:38:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/59544e35-0c4d-3fbc-81cb-8a530d41787f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.112.0/20
                  174.32.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:c3:7a:e7:69:25:09:73:8e:71:48:47:f7:c3:5c:16:5d:
         3e:4b:06:f3:54:cb:2e:61:49:25:89:d6:40:7c:eb:dc:b1:92:
         62:e4:bd:02:cd:8a:9c:cf:f8:c8:de:11:8d:31:04:a9:e2:81:
         c6:a0:ad:c8:69:a2:6c:c7:c0:f1:fe:c6:b4:d2:ef:40:87:a2:
         f9:84:85:f9:a8:d8:56:98:8f:24:06:7f:70:6b:e2:f7:e1:2a:
         1f:bb:cf:9a:55:23:24:1e:8e:d5:d6:6a:3d:80:0f:cf:a6:b7:
         36:ce:34:ff:80:fb:d2:43:d9:10:81:c2:b4:72:97:07:3f:6c:
         a4:8e:60:1e:19:13:50:b0:9a:e2:1a:c6:1a:75:1b:77:29:11:
         5b:d6:cd:f5:c8:2e:92:c3:f4:e1:2e:29:92:cc:b4:e9:18:c6:
         bc:a3:d5:9d:de:8f:e1:85:dc:cc:d4:78:a7:c8:34:08:eb:30:
         df:6e:a9:59:3e:07:b2:7f:0e:36:8e:44:6c:b3:93:67:c8:42:
         d2:64:58:a5:80:9d:4e:3a:a6:06:b1:51:df:9b:4a:a5:df:73:
         02:51:2f:11:85:b7:35:7c:4e:0d:3d:36:3c:00:5a:0c:4d:2b:
         2a:e1:b0:4e:d5:f4:53:a1:1d:3c:42:0f:3a:ac:d5:dd:ad:d1:
         e9:20:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:55 2026 by rpki-client