Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa
File:                     cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa (raw, json)
Hash identifier:          GNVeX5znNN5pC/0a8EibJc3hQqq3Zk2jLwIN4fuh2eU=
Subject key identifier:   CE:99:9A:BA:AD:19:71:09:1D:04:A4:86:C6:F8:4B:BA:80:8B:1A:9C
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584D3F64DC12B933441E9FA79B40
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     393960
IP address blocks:        66.85.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:dc:12:b9:33:44:1e:9f:a7:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=bc310f71-0dff-43b9-87ec-10b296fda049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:0c:73:ee:49:9f:12:e3:34:ce:eb:42:b5:
                    72:5b:df:54:06:17:cb:e0:ef:9e:97:e8:19:fb:11:
                    4f:ea:86:92:4e:de:b7:9d:a5:22:b9:75:4a:33:5f:
                    10:38:93:e7:ff:70:02:4c:1a:19:2e:3b:85:87:7b:
                    f6:2d:d5:6f:fb:66:be:d5:e2:e5:ef:84:d1:bd:98:
                    fc:06:c1:ec:40:6a:25:4c:56:d1:df:7a:30:f2:8d:
                    6d:7e:23:62:78:21:ce:d4:cb:b2:c0:7f:87:9c:55:
                    15:45:12:4e:ba:c2:a6:8f:19:dc:d6:da:c1:c3:7b:
                    2c:47:56:e9:6b:ca:6d:39:38:68:ab:72:08:03:1f:
                    37:09:c5:9e:ee:8e:2b:5d:2d:5a:e0:c6:ef:20:5d:
                    da:76:31:d5:b2:d9:60:92:89:cc:57:17:92:bc:e4:
                    6b:ab:38:fa:0d:b0:52:7c:af:7e:9e:36:29:be:4d:
                    08:ab:f2:40:b5:9d:7f:7d:67:2b:7a:37:2e:09:cd:
                    3f:50:be:b4:bc:bd:c5:f1:2a:9a:dd:3c:46:ec:f7:
                    3a:2d:4c:4a:24:bf:7b:95:53:e1:29:cf:73:f9:95:
                    36:97:12:bf:85:10:e4:ee:a7:bb:83:92:31:de:60:
                    b1:fd:4e:4f:dc:83:57:6b:52:6c:d0:f7:6b:19:12:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:9A:BA:AD:19:71:09:1D:04:A4:86:C6:F8:4B:BA:80:8B:1A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc1a6b76-3a21-3329-a9aa-d8ffb85450b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f9:f7:81:0a:86:89:8e:50:e7:a9:2c:16:42:30:b3:8a:fc:
         59:f5:bf:05:68:37:dd:25:d6:de:93:94:46:43:3b:68:30:ab:
         7f:3a:4a:cf:bc:5b:0c:ca:73:cc:a8:67:97:32:1f:fd:67:c9:
         05:ed:db:61:53:b6:e7:8a:05:1e:53:f8:e1:a8:d2:bf:3f:a1:
         5d:cb:a6:73:cb:25:d0:0d:11:6b:33:f1:cc:9d:0f:99:e2:eb:
         59:ae:37:13:62:92:12:bb:82:b4:0a:c3:c7:eb:c4:5e:5f:ab:
         9f:6b:69:ad:ea:c8:46:9b:b9:ea:63:2c:d8:5a:ba:de:36:fb:
         55:d5:b7:04:e1:04:ce:ac:70:82:d5:7f:6c:da:bf:84:e0:0e:
         75:27:38:f1:fe:48:d6:f0:c8:72:5c:86:1d:80:9a:16:08:87:
         a8:ad:5b:0e:f3:b0:32:d5:0e:af:42:ef:dd:00:40:3c:51:63:
         c2:49:42:1b:7f:6a:19:87:26:2f:bc:3b:35:70:a7:25:d2:ee:
         07:b6:67:1b:cc:4e:26:bc:72:d2:99:ca:62:db:50:9f:6f:4f:
         5b:5f:c4:cb:62:c9:86:72:26:9c:9c:54:91:2e:e8:92:bb:22:
         9f:07:15:1b:9d:be:80:d3:01:5f:e6:ea:af:14:61:bd:b4:d7:
         73:d7:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:13 2026 by rpki-client