Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa
File:                     c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa (raw, json)
Hash identifier:          hwA1tnaqm0J7fUh/czjRIAQOcph3ZqdQlg63yeA0NX4=
Subject key identifier:   54:21:75:F3:05:92:92:08:6E:DE:CF:5A:DB:CA:B5:F4:53:A3:E2:E8
Certificate issuer:       /CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
Certificate serial:       010D0C9F4328584D2A74C80DDB136C0A55C1E3E0
Authority key identifier: FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     36221
IP address blocks:        66.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c8:0d:db:13:6c:0a:55:c1:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=84d6aca4-b5d3-46c5-b3b4-22a3041e05dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:49:60:fe:11:84:01:91:b7:d4:00:5a:7a:
                    7d:61:df:e7:61:52:0f:ac:69:bc:db:e2:d8:ee:ec:
                    83:55:5a:91:6b:d5:7e:f3:3c:76:77:d1:5b:92:e6:
                    30:27:a8:5c:d2:55:d2:24:83:1a:99:c5:71:9c:b3:
                    53:37:c6:c0:08:bf:9d:4b:f2:2d:3c:9f:74:17:a1:
                    fb:54:87:e4:12:a6:26:06:6a:26:aa:dd:b3:01:fb:
                    92:f3:4c:a7:b2:25:1b:91:5e:be:58:0d:8b:c9:57:
                    cb:c1:78:ac:07:c5:98:55:66:30:22:2f:58:c7:7d:
                    0b:72:8c:ab:80:3d:de:62:e4:a4:65:25:06:c8:d0:
                    f8:a9:38:da:84:1c:96:f9:9b:30:da:87:d5:a8:d4:
                    6c:45:db:f3:15:67:87:68:4a:2c:8d:d0:eb:bb:cd:
                    03:20:ea:4c:fc:12:6b:f7:6d:fe:59:5d:69:39:26:
                    68:95:03:f8:36:e0:ac:4b:5d:bf:de:29:bd:54:18:
                    ca:cd:0e:28:a9:59:ee:49:85:10:77:f2:30:31:7c:
                    7a:a5:d7:a3:f2:57:b5:59:61:04:b7:76:a6:22:24:
                    af:17:54:7b:f2:a6:bc:10:11:d2:eb:fe:64:14:03:
                    e6:24:1f:9c:56:ce:97:cc:7d:07:73:98:6b:7e:b0:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:21:75:F3:05:92:92:08:6E:DE:CF:5A:DB:CA:B5:F4:53:A3:E2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/c4e0f065-b518-350b-a0e5-e94865e6cbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:8e:14:6d:36:67:83:1f:fd:65:c9:e0:73:00:ed:7d:cf:
         96:8e:ff:f7:01:d6:c7:53:31:24:a0:f7:ce:09:05:f6:6b:5f:
         b2:f1:42:3d:b5:23:0e:9f:dc:43:d1:55:e7:00:35:fe:4f:ca:
         1d:0a:57:ec:8f:46:1e:e4:66:12:0d:a1:89:20:e7:a8:ea:fc:
         ee:55:dd:1f:e7:a2:03:ca:30:86:31:eb:df:47:27:0a:84:be:
         03:6e:02:00:0a:21:00:85:f1:26:7a:af:ee:eb:dd:8c:fd:8e:
         92:5d:2a:cb:3c:9e:82:0c:17:5b:f4:2b:23:b7:97:de:32:e2:
         9a:93:0d:6c:42:31:c9:3b:aa:2f:be:de:e3:9c:fa:b0:ec:ff:
         65:c1:70:60:fa:d4:9c:a3:21:bb:d1:94:46:38:87:b3:f7:46:
         55:29:98:08:22:d1:f6:c2:03:f3:57:a1:ec:32:ea:ab:d5:47:
         80:1d:75:49:bf:c1:22:21:a1:2b:9d:a0:63:df:f3:af:f3:ee:
         70:45:9c:bc:bd:57:d8:66:72:b5:35:74:4c:62:f3:4c:8d:62:
         96:c5:fa:3e:a9:e9:28:e6:c2:0d:02:4b:0a:d4:a4:fe:11:71:
         9d:df:0a:f7:53:c6:48:a1:1e:fb:0d:f7:d5:2d:93:17:3e:2e:
         a9:c9:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:42 2026 by rpki-client