Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa
File:                     b02d7254-2264-3097-86e7-bab31bccdf77.roa (raw, json)
Hash identifier:          9xSuHoFqvR7qa7ojzCAldbA9UPgAn9l5BFdE0FONsWA=
Subject key identifier:   35:25:CD:41:77:9E:FF:1A:BD:2A:55:74:D5:57:29:7D:53:6C:55:6B
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584D40CA4F98151E347F06339640
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33717
IP address blocks:        66.171.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:4f:98:15:1e:34:7f:06:33:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=87e7cbd8-d66a-4567-bd2a-b15042833b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3b:5d:86:0b:55:31:06:8b:6f:72:72:75:2b:
                    25:36:1e:0a:68:98:e1:84:73:3e:85:bc:71:4a:b2:
                    6d:f2:87:7b:4f:8b:0a:7f:74:ee:44:76:08:45:4b:
                    6d:45:10:ee:40:a1:91:78:58:53:d3:35:66:e6:82:
                    55:d3:b5:be:74:64:ad:bb:50:8c:f1:d6:ca:a6:36:
                    c3:b7:44:93:73:c7:36:5f:65:4b:5b:1b:3a:e9:7b:
                    68:de:e1:aa:9a:b5:1c:de:25:25:bd:09:d9:73:30:
                    0d:00:11:33:1f:4f:e0:7e:b2:6c:2e:cb:15:57:26:
                    0b:b7:bc:57:81:3e:4b:22:7d:28:67:b5:2f:15:9b:
                    28:1c:16:0f:c4:f3:ab:f0:1b:cd:ee:2e:ff:6a:52:
                    e4:75:43:0d:35:f6:e3:30:ed:04:29:38:c0:11:a0:
                    df:f1:01:00:cc:96:9f:93:57:4e:54:70:81:2d:e9:
                    26:51:3d:ea:a8:60:c6:8d:78:85:99:a5:7b:d6:80:
                    88:6f:70:e2:d3:ba:26:c4:57:06:3f:c2:40:da:35:
                    09:25:c0:fe:52:d9:e2:75:ed:5e:ce:c4:51:73:2a:
                    af:26:aa:cb:4e:47:cc:ae:10:a1:91:93:06:db:82:
                    81:09:b9:bf:da:49:4d:e9:fe:8c:e3:e4:8a:f3:b4:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:25:CD:41:77:9E:FF:1A:BD:2A:55:74:D5:57:29:7D:53:6C:55:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/b02d7254-2264-3097-86e7-bab31bccdf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:73:9d:7b:44:5d:c8:8d:94:0a:ab:16:38:cd:bf:27:92:
         26:71:96:c9:5e:b0:9b:82:4c:57:f9:2f:4a:80:a8:46:12:f5:
         1b:79:87:5b:50:6e:50:b8:7d:e2:71:9f:fb:32:08:4b:3f:5b:
         e1:bf:80:bf:5e:40:1c:4e:3e:bf:28:cf:3e:8f:72:f4:8e:c4:
         71:81:d1:cb:6f:e8:e9:49:5e:80:d5:55:c8:63:3e:03:2b:bb:
         48:df:db:19:94:32:dc:6d:1e:1b:50:f5:0e:ce:2d:13:f7:40:
         32:db:96:7b:e5:02:22:40:a4:7e:04:c5:ca:75:81:b3:aa:b0:
         69:33:22:0c:9a:96:7a:ab:3b:e0:49:7f:36:18:b6:1a:c0:a0:
         a9:c0:5e:15:26:7d:8c:5e:e6:a1:0f:fd:65:47:09:c6:8c:bc:
         a8:52:12:67:6f:bc:0e:0c:fb:e4:41:00:28:33:23:f5:89:32:
         ca:6d:e4:4b:5a:4a:90:76:d1:97:71:9b:54:e4:15:ed:9b:e3:
         61:12:b6:14:d0:f2:79:e6:74:e3:7f:53:98:96:16:52:da:2a:
         32:5b:a9:b1:bb:bd:15:b8:16:c0:c5:ca:f1:de:ac:04:0b:2f:
         b3:30:f2:c3:82:e5:9b:b6:bc:d2:1c:de:78:e1:ca:cc:4d:5e:
         ca:dd:f7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:42 2026 by rpki-client