Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/d56b59fc-80de-3c0a-aa9b-61de5109062f.roa
File:                     d56b59fc-80de-3c0a-aa9b-61de5109062f.roa (raw, json)
Hash identifier:          WnmxkkgjXEeKiyx6kQzkqnfcUq2+huBiKXPp++V3ZaQ=
Subject key identifier:   C1:DC:A8:34:17:8B:CF:CC:C4:B5:AD:2A:65:60:67:A0:72:6C:43:39
Certificate issuer:       /CN=bf23e246-3039-40e8-b878-ea33708da258
Certificate serial:       010D0C9F4328584D27AA2D159062E0A32873BDC0
Authority key identifier: 90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/d56b59fc-80de-3c0a-aa9b-61de5109062f.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        66.179.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:2d:15:90:62:e0:a3:28:73:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf23e246-3039-40e8-b878-ea33708da258
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=ac98559a-48b0-4141-823e-e69e6c2bd92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:d4:2c:7e:98:d3:47:31:16:27:6d:df:4c:
                    39:79:43:13:f7:4f:a4:44:d4:34:f9:e8:54:d8:18:
                    9f:ee:d4:e9:09:51:4d:5d:67:9c:82:ce:82:e1:e1:
                    98:91:22:d4:5b:3b:4c:32:f9:74:6d:75:3c:a8:a6:
                    5c:6e:15:2f:2f:34:05:bd:66:7e:d0:22:42:71:f2:
                    75:37:86:04:a6:78:ca:cc:7f:25:6e:d4:da:a8:9a:
                    92:3e:73:0d:eb:23:d9:a2:94:e9:58:52:89:e9:05:
                    43:5a:8a:5c:a2:ae:7a:22:b1:96:4d:9a:16:cd:7f:
                    07:62:94:60:88:38:0f:fa:71:21:79:0b:0e:c0:29:
                    f8:6e:fb:ba:de:32:f5:0f:c7:1f:a6:10:99:b6:bb:
                    d6:27:a1:6a:86:69:c6:b5:83:3c:34:17:9c:43:42:
                    1d:dd:5c:d9:8b:66:ae:a0:fa:92:72:ac:a4:3b:9c:
                    78:e2:6b:9e:3e:33:e8:2e:68:90:90:5b:05:71:45:
                    74:82:2c:52:32:03:68:f9:d1:e6:0f:84:e9:18:4f:
                    ec:18:4d:c2:fa:3f:c4:8f:db:08:cb:fd:9f:c3:1b:
                    fc:97:a1:cb:52:d5:82:8b:08:dd:b1:ee:2a:2f:34:
                    29:3e:af:88:17:f0:7b:0e:34:ff:61:b9:13:ec:17:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DC:A8:34:17:8B:CF:CC:C4:B5:AD:2A:65:60:67:A0:72:6C:43:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/d56b59fc-80de-3c0a-aa9b-61de5109062f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.crl

            X509v3 Authority Key Identifier:
                keyid:90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:56:5e:24:6d:17:b1:4f:ab:3d:19:fe:32:12:f8:fc:72:a8:
         f8:11:9c:93:55:8b:25:24:d2:63:94:fa:34:4b:33:1c:06:18:
         d2:91:5b:9c:6e:43:35:70:eb:e7:ed:44:43:df:4c:2c:e8:94:
         23:16:d0:cc:bf:eb:c2:18:c4:8c:d2:e0:f8:65:a4:23:1d:f9:
         da:55:36:13:c7:32:60:7b:c3:76:81:8b:79:86:3a:15:ea:15:
         81:a8:19:42:8e:4e:04:cf:51:43:19:cc:c2:3c:d2:c1:51:60:
         71:e1:ba:3f:e9:ea:c8:a1:9a:a1:c1:85:c5:ca:ab:f0:89:a5:
         83:87:47:9d:dc:b8:7b:23:04:4d:93:cc:c2:07:5a:09:2a:37:
         d3:7a:4a:6b:11:27:a8:3f:92:83:26:fc:18:69:99:e8:28:90:
         ac:a3:c6:07:69:f0:40:78:ff:ad:3a:48:be:d1:21:36:d0:f2:
         72:25:6b:3a:b7:3e:e4:2e:7e:ce:c6:e1:03:ec:7a:b8:2a:ac:
         fd:30:35:ec:5a:2c:46:60:3c:67:10:fb:8f:f9:68:92:e0:0f:
         41:26:52:57:ae:89:54:3d:f9:fe:f5:28:63:79:41:10:67:33:
         17:1f:9c:1d:eb:b6:7f:24:91:8a:59:98:6b:de:44:13:f4:7d:
         41:63:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:12 2026 by rpki-client