Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa
File:                     d33868cc-aaa1-37b3-b510-97181288e62a.roa (raw, json)
Hash identifier:          tTbhtYrcvGa5K7v+6F2mTE0RY4lnjJTqQ7YpQXz1jNU=
Subject key identifier:   EF:09:81:C9:44:B4:47:FC:BB:9C:7F:F4:70:91:51:CF:5D:E9:0F:B3
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584D1F4A3991220CD1B6562C2600
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     8100
IP address blocks:        66.232.101.0/24 maxlen: 24
                          66.232.102.0/24 maxlen: 24
                          66.232.103.0/24 maxlen: 24
                          66.232.109.0/24 maxlen: 24
                          66.232.113.0/24 maxlen: 24
                          66.232.116.0/24 maxlen: 24
                          66.232.117.0/24 maxlen: 24
                          66.232.120.0/24 maxlen: 24
                          66.232.121.0/24 maxlen: 24
                          66.232.122.0/24 maxlen: 24
                          66.232.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:39:91:22:0c:d1:b6:56:2c:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=002c5d86-16fe-44d7-8623-dbd0bf8ebc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:63:e7:2d:aa:95:67:30:7f:52:f9:2c:e3:
                    07:75:dd:24:85:3b:b0:12:6f:00:b3:76:e5:e6:d8:
                    4c:d0:b7:aa:1f:f9:22:bd:09:c7:ad:e3:60:f8:c9:
                    8a:e2:66:ca:23:19:1a:bb:0f:70:61:23:61:e6:49:
                    0f:0a:e3:c2:6b:aa:e1:42:ee:36:b5:6f:f6:aa:ca:
                    0d:9d:29:a8:5d:f4:9f:ec:3d:6f:8b:bd:6c:5b:71:
                    09:73:8a:18:63:81:32:c4:f2:49:25:5c:17:91:17:
                    c9:a6:eb:eb:a1:e6:2c:31:35:73:74:b9:9e:42:e2:
                    5e:3f:50:90:d8:2c:dc:75:17:14:fe:24:93:77:61:
                    0a:2c:21:e3:e4:d7:a4:72:53:c8:cb:69:f3:a0:88:
                    54:18:68:71:64:d7:b3:0e:20:6d:00:c0:5d:91:0d:
                    50:9c:f4:b1:ae:43:80:c5:28:52:a9:49:b2:ba:ca:
                    4e:24:1e:29:e5:2c:b2:08:7d:1c:7d:49:44:11:39:
                    ee:f6:d4:aa:e9:12:86:18:19:c1:93:a0:ad:c1:93:
                    08:ef:22:58:5a:06:8f:e6:0f:96:ee:80:9f:ed:ad:
                    74:f0:2f:c2:0d:76:85:98:05:00:16:8b:26:c9:97:
                    54:84:c3:6d:d4:fc:54:14:7e:69:af:55:c3:2b:9f:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:09:81:C9:44:B4:47:FC:BB:9C:7F:F4:70:91:51:CF:5D:E9:0F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/d33868cc-aaa1-37b3-b510-97181288e62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.101.0-66.232.103.255
                  66.232.109.0/24
                  66.232.113.0/24
                  66.232.116.0/23
                  66.232.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:9b:35:c4:e0:cf:dd:45:20:e3:ce:b6:52:f4:fd:64:04:
         2b:e4:05:da:53:a7:c3:90:29:cc:54:b6:58:86:8d:7d:82:4a:
         21:bd:b5:6a:f1:97:6d:f8:0c:a8:96:34:4a:65:75:c6:6e:c9:
         e9:a5:91:7b:93:19:ef:ad:17:6d:6c:c1:f4:26:ea:f8:b2:dc:
         e5:e3:f2:98:19:26:a3:0a:06:cc:18:2a:4f:ca:cf:40:21:42:
         22:d1:c2:b0:6f:7b:45:8b:95:17:bf:b4:f4:4c:8d:ad:c0:1d:
         56:b8:37:46:06:ba:e2:04:59:14:be:5c:06:8a:a6:6b:5c:53:
         cd:8c:ea:94:53:07:07:eb:5a:70:2f:2b:65:a0:7e:d8:90:3f:
         35:4c:ff:f9:da:04:06:08:03:ee:a1:df:b0:fc:e0:26:24:29:
         06:37:1a:dc:77:8b:97:01:f1:4c:55:8e:0c:f4:5f:90:2a:3f:
         18:ba:b8:b1:57:19:25:22:6a:f1:48:55:7b:b0:de:1a:77:ad:
         50:a0:65:0b:e9:e3:7f:14:32:97:80:57:8e:3c:dc:5d:9d:19:
         a1:c6:6a:e6:8e:7b:54:f0:4b:fd:b4:c7:3e:65:8b:a2:1e:41:
         06:70:d6:e4:29:83:a1:01:0b:4f:e9:7c:c5:e2:91:b8:57:44:
         23:64:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:17 2026 by rpki-client