Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/badf8c18-890e-35f8-8fa7-c227c3dcadbb.roa
File:                     badf8c18-890e-35f8-8fa7-c227c3dcadbb.roa (raw, json)
Hash identifier:          I9ri9zMyXrKB44zBKxDNMl+lpAiQIjUTJoaZRuN0Wvo=
Subject key identifier:   FF:96:85:80:0E:C3:10:04:C2:DE:B3:A0:68:CE:5B:13:C3:11:AE:60
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584D1F4A471B4B748EF5E2067FC0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/badf8c18-890e-35f8-8fa7-c227c3dcadbb.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     33635
IP address blocks:        66.36.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:47:1b:4b:74:8e:f5:e2:06:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=376302a1-9213-4be1-96c9-0e88f071fdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:f6:44:93:59:de:00:cf:60:41:4c:89:00:
                    e2:b8:8d:c4:6a:fe:7f:05:9a:6c:70:8e:9f:53:f8:
                    f8:9d:32:8d:8f:f3:a6:66:c4:4c:1f:f2:b2:1f:a3:
                    34:ce:3b:49:89:54:76:58:3c:6a:fd:1b:77:3d:fe:
                    f6:df:1e:38:88:3d:62:6a:c0:78:49:6f:51:9d:ba:
                    cf:bd:68:31:e5:a3:a3:7a:13:72:63:34:3f:92:af:
                    86:48:64:c8:4c:41:2c:52:b5:33:1c:08:b1:7e:a2:
                    44:ce:38:e5:50:fd:51:9c:d7:da:7a:ff:54:e9:10:
                    b0:b0:bf:e5:cc:64:e8:47:25:0f:00:60:05:fa:65:
                    01:f3:1f:99:c2:30:04:22:77:c7:ad:47:c0:9d:6c:
                    d2:68:82:b7:09:6d:b6:5b:05:f9:83:a0:a6:d1:7e:
                    1a:22:87:58:09:99:0f:37:91:41:98:c9:f8:88:7e:
                    b1:ca:a9:aa:bd:b8:54:86:15:09:c1:cd:12:5c:c0:
                    65:f1:e0:99:46:36:2e:98:ed:6b:d2:b8:a6:38:cb:
                    7e:e1:32:86:22:07:cd:36:12:b7:66:fe:6e:fa:be:
                    56:57:bc:59:88:71:80:b7:40:30:cd:fe:bf:7a:2c:
                    66:7c:1b:68:54:ee:63:f7:e8:ac:6a:41:0f:dd:51:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:85:80:0E:C3:10:04:C2:DE:B3:A0:68:CE:5B:13:C3:11:AE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/badf8c18-890e-35f8-8fa7-c227c3dcadbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:21:33:a3:1c:8a:2d:78:cd:c9:ba:f8:ae:49:9e:5a:4f:
         7f:39:4a:55:87:86:c9:31:ed:24:b2:48:f7:9d:e4:f6:2c:30:
         da:42:90:f9:63:7e:7c:ec:7b:29:9d:4f:f9:8b:19:a2:be:fe:
         7f:31:51:a7:0c:4c:15:30:a0:88:10:56:4c:fb:ed:53:ee:d7:
         fd:a7:5a:fa:22:6a:c3:c8:e6:5c:a3:84:09:38:58:0c:49:69:
         6c:30:bd:20:93:2b:e9:c0:d4:bf:7e:97:99:87:67:a9:72:90:
         5c:b5:51:1a:6d:68:62:0d:9a:d3:85:5f:a4:34:99:0d:06:5a:
         69:55:9a:bd:26:eb:d9:28:ae:22:bb:6e:25:10:aa:bd:a7:6b:
         f0:50:ae:ed:66:53:d0:d0:a1:4d:da:28:4c:45:16:1c:26:6a:
         8f:f5:3e:3a:0d:79:e3:81:0e:91:bb:af:71:25:f5:e9:73:6b:
         14:22:a0:0f:f5:e3:f4:7e:3d:8e:61:5a:c9:4c:54:15:10:95:
         7a:e8:68:da:fd:ed:3d:61:0d:1f:d5:f3:42:c1:19:09:d6:44:
         0e:47:80:20:a5:8a:f4:48:9f:15:e4:2e:b2:64:3d:33:93:0a:
         c4:a0:44:58:54:75:c5:20:4e:22:dd:00:7d:69:2b:81:0d:fc:
         67:79:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:24 2026 by rpki-client