Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa
File:                     66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa (raw, json)
Hash identifier:          gWVyA4xOY9ZnVy3h/5NWFPgjGV2dDpoc2r4Ng2Ppsb4=
Subject key identifier:   E5:7E:38:ED:00:B7:A9:4B:CD:5C:E1:4C:69:29:E5:23:F5:B2:2A:74
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584D3F64DA5A05B2FD74FB9E5380
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     21928
IP address blocks:        100.128.0.0/9 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:da:5a:05:b2:fd:74:fb:9e:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=75e69977-04ef-4226-acc3-812409ae588e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:89:34:64:af:df:0b:29:8e:a3:7e:ac:4c:
                    fd:76:89:7b:e8:44:86:7d:ca:22:0c:af:c9:7a:68:
                    b8:86:ae:85:29:ee:23:b7:68:99:b4:5a:58:1d:45:
                    99:24:17:a1:dd:8e:66:97:90:93:b0:2a:dc:ed:ce:
                    51:a6:41:a4:3a:24:d9:56:ca:c3:83:8c:14:f9:dc:
                    94:70:75:66:40:d5:17:f6:94:a0:40:d3:f1:e3:45:
                    32:d6:02:d3:9f:a9:d0:80:11:66:12:96:79:1f:8c:
                    41:8d:1b:13:ec:4d:4f:9d:a7:8b:db:c3:22:c1:f2:
                    b9:5d:13:5c:87:37:57:73:4d:f6:99:b0:0e:32:26:
                    3a:ae:c7:d6:a4:ba:f4:c5:46:0d:cf:99:c6:dd:3a:
                    e5:06:85:f2:77:6b:4f:9a:25:9c:e0:f8:cc:eb:e5:
                    ac:ad:49:e7:97:26:90:87:de:b8:2b:07:5f:e9:ce:
                    1e:81:ad:ed:62:62:5f:6f:e2:b1:6a:f1:50:d9:c4:
                    3c:f4:06:9e:5a:b6:33:7e:60:0c:e0:03:d6:ba:d1:
                    28:d2:31:eb:b0:94:90:ef:9c:41:4c:c4:ee:f6:e4:
                    1c:7a:13:1d:86:00:fc:e6:a6:ec:af:bc:6b:58:70:
                    2d:77:a8:e8:f2:8f:8b:fd:c7:4a:ff:63:ca:b3:ec:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:38:ED:00:B7:A9:4B:CD:5C:E1:4C:69:29:E5:23:F5:B2:2A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/66637ec7-a576-3dcd-9cfe-d9c166a3feb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.128.0.0/9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:08:8f:fe:25:32:bc:60:6a:0f:65:ba:2a:9e:91:21:db:82:
         be:0b:56:84:c3:f8:31:5f:67:01:cd:f5:9a:c7:88:0d:f8:5e:
         e1:90:5e:78:7b:d8:73:3b:5c:96:4d:63:b8:d0:c8:d4:c3:66:
         b0:dd:65:3e:57:23:c0:f6:6e:66:18:24:1b:10:2b:88:40:8c:
         eb:cd:0a:ed:83:f0:c9:80:3c:a5:bb:3f:8f:98:4d:50:94:57:
         c7:bf:2c:e0:db:a8:f3:a4:c7:7a:fc:b4:c0:be:78:20:ff:f6:
         43:2a:83:cc:63:2b:b1:4d:f4:10:58:21:9b:74:7e:54:9a:df:
         04:54:e0:6b:6a:e2:7d:a5:61:c7:ca:7b:2f:c2:1d:22:a4:94:
         2c:c6:d0:b9:96:05:17:30:2f:e4:71:be:f0:82:22:7b:27:0d:
         c8:74:86:47:1a:f8:9e:7b:dc:bd:a8:4c:44:5a:f8:3e:a8:05:
         dd:ac:fb:77:b6:23:ef:95:b2:9d:15:84:e9:a3:bd:f0:e1:61:
         88:08:a5:bd:ec:9d:e7:7c:18:27:9b:7e:b1:d1:61:df:88:f6:
         24:f2:ab:2e:1d:73:1c:a4:93:f2:29:28:96:b1:5f:01:91:9f:
         06:ea:bd:00:29:56:89:e3:33:0a:47:e5:2e:75:89:88:a9:a1:
         a0:88:a1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:31 2026 by rpki-client