Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa
File:                     c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa (raw, json)
Hash identifier:          QPFx++4QjNV5q3xx2epZkyAS+GfYqoqqGDB2CCRa/08=
Subject key identifier:   3D:8A:B6:75:F3:4F:49:B0:19:1C:70:C7:92:91:63:03:63:21:BA:F8
Certificate issuer:       /CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
Certificate serial:       010D0C9F4328584D143D8026998F873C9886F300
Authority key identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     13765
IP address blocks:        66.196.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:80:26:99:8f:87:3c:98:86:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=296ae816-53f7-45cf-8d9f-ec60ae9cc0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:a9:19:b8:87:39:d7:48:d0:90:e9:e3:8d:
                    65:b1:fb:55:0f:08:21:23:02:38:2b:b0:ce:42:fc:
                    f4:f0:4c:c2:c2:96:42:5d:5b:12:a8:48:bc:30:ab:
                    a1:65:e3:4a:81:b3:da:5c:37:d5:b4:ea:27:b4:43:
                    93:99:18:c0:21:24:84:35:01:72:d7:9a:de:82:75:
                    b5:20:16:94:79:bf:3c:62:fe:bf:8f:c8:66:1e:84:
                    3e:0a:ef:2f:40:1c:fb:fe:94:da:c4:ac:db:26:38:
                    3c:aa:7a:b2:10:e0:93:f7:0f:31:73:74:17:2c:5d:
                    c8:f7:7b:54:7a:bb:49:79:58:d7:7c:4a:11:62:25:
                    68:de:49:9d:86:f9:d5:b1:57:23:62:af:76:eb:94:
                    ac:c3:77:c9:8c:4c:7f:79:4b:94:8b:b2:cf:10:c3:
                    8e:bf:f3:68:55:de:b9:9b:11:72:ff:1a:31:ae:4c:
                    9d:b7:a0:bc:f4:2e:e7:74:9c:76:a5:f9:23:ba:c3:
                    8e:63:39:36:64:91:51:98:35:d6:a7:ac:c5:89:78:
                    d7:a0:8a:65:a3:c5:bb:91:47:35:f6:eb:ee:46:26:
                    a3:1d:69:77:d6:ee:bc:94:6d:84:1c:03:77:5a:52:
                    ad:ba:fd:59:1e:8b:82:ef:50:5a:d7:3f:80:12:38:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:B6:75:F3:4F:49:B0:19:1C:70:C7:92:91:63:03:63:21:BA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/c8facb2a-8894-3868-bf24-c4553cb7f3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl

            X509v3 Authority Key Identifier:
                keyid:91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.196.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:86:40:7a:2e:b1:51:e6:6c:ac:ca:8d:1d:7c:f9:fb:d2:
         99:b3:fc:18:cb:99:ae:fd:cd:8b:78:b2:c5:0c:51:38:07:0e:
         68:e2:51:6f:9d:c8:85:5e:3e:88:7a:cc:8a:b8:6b:19:1e:80:
         6a:a1:ab:44:fe:02:95:7f:28:63:bd:80:8c:bc:30:8f:4d:59:
         e7:3d:e1:f9:2e:66:28:72:ba:ba:49:09:b5:29:8a:48:45:f1:
         5b:db:e2:15:19:fe:b1:f5:42:b4:4e:24:c8:cc:75:c5:ab:84:
         0e:cd:b9:4e:96:79:b0:b5:36:1b:02:26:43:c3:ea:d9:9e:97:
         88:da:e0:ff:be:0c:48:e4:c4:fd:82:66:95:dc:64:38:96:c2:
         8e:83:47:f9:65:1a:a8:e7:de:54:e2:49:a5:d9:3b:6e:df:6d:
         3b:17:21:45:e9:fb:54:e4:29:f1:96:58:c8:f0:61:27:86:85:
         be:13:da:34:03:0b:ed:01:d1:78:34:27:14:c8:11:2c:a4:d9:
         86:d9:20:85:e1:4e:da:86:15:3f:b4:29:a1:aa:cc:4f:f4:06:
         d8:a7:b6:c2:ca:c6:90:66:3b:48:ca:e7:d2:f3:aa:10:30:3e:
         4e:e9:2d:48:6b:f7:2a:ad:c3:43:b8:b9:02:b3:64:54:dc:e0:
         7a:ca:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:08 2026 by rpki-client