Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/25e72791-2137-3482-acdd-de246c9c7c80.roa
File:                     25e72791-2137-3482-acdd-de246c9c7c80.roa (raw, json)
Hash identifier:          KWFlYSNh2F0A4OX4xA+NTwhgIERDvWD4V6KS3jSyvtc=
Subject key identifier:   C4:A8:A2:67:62:27:32:58:CE:90:B1:32:DD:FE:64:F5:A2:B7:22:33
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E67FA2B96A9B04A33710
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/25e72791-2137-3482-acdd-de246c9c7c80.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        68.66.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e6:7f:a2:b9:6a:9b:04:a3:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=9272cd11-d595-4155-8fbe-e62ab95624d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:bc:df:49:e8:ea:74:15:01:15:94:1f:34:
                    23:4d:43:1b:b4:2e:75:47:d4:36:9c:2f:e0:f5:d0:
                    6e:4f:55:73:14:6a:a4:9d:06:40:c6:20:7f:8a:8d:
                    dd:80:39:27:e0:a0:62:7d:66:43:00:45:0c:75:2b:
                    e1:8e:f0:b4:c1:46:56:01:df:5b:f9:6c:96:a3:83:
                    a0:e9:1e:d5:4d:b8:52:c1:c1:c9:04:5e:5f:66:bf:
                    dd:55:65:35:1b:a5:1e:0d:3d:fd:21:4d:50:fd:69:
                    b3:1c:c0:e2:27:03:b4:bb:b1:21:63:82:87:45:f6:
                    77:0a:93:40:c5:bd:a6:80:d3:62:de:13:33:e6:8f:
                    08:00:71:b6:f5:af:fb:77:d4:3f:2c:f3:50:b5:09:
                    41:b9:fc:ca:75:9c:96:ad:1e:22:5f:74:35:68:1a:
                    20:d0:87:04:4e:12:ce:87:4a:bb:08:bd:f5:5c:5c:
                    ef:f0:af:4a:bc:78:d8:9d:15:c2:58:d5:c1:50:e1:
                    09:38:e3:d8:17:1e:d5:a7:28:58:de:95:6d:42:75:
                    f4:d4:0c:37:c8:d4:1b:7a:05:84:86:62:d3:80:9d:
                    1a:06:6b:ff:80:89:41:9d:73:9a:40:76:7b:c9:67:
                    34:0d:68:96:8f:d7:b6:ec:21:be:40:2e:06:d0:9e:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A8:A2:67:62:27:32:58:CE:90:B1:32:DD:FE:64:F5:A2:B7:22:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/25e72791-2137-3482-acdd-de246c9c7c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3d:cf:4a:8a:32:3f:18:d7:e2:f6:55:fe:47:91:72:b2:88:
         cf:bf:8b:33:df:8b:60:45:d7:23:ad:ef:52:e2:21:30:19:63:
         dd:d0:bd:a5:d7:0e:64:14:fa:67:c2:5b:f6:09:54:09:32:af:
         db:6f:7f:62:1b:27:33:4f:2c:76:af:99:33:76:6d:26:f6:b5:
         ea:6d:8c:56:0e:87:41:42:0c:c4:a7:c7:13:ab:7a:33:10:39:
         e6:f8:a2:79:1d:9a:5d:a0:13:dd:94:24:6b:51:76:26:73:08:
         fc:35:78:f3:ec:db:d6:08:a2:5f:af:86:d7:10:fd:cb:05:8d:
         34:56:a0:de:3e:df:eb:b8:79:2f:58:67:bc:a0:3b:d2:c5:3a:
         29:e0:dc:58:ba:27:28:b4:fb:e5:4d:ad:6f:33:36:f9:1c:7e:
         f1:20:0c:ef:87:92:e0:4a:72:84:96:e7:52:b0:ab:6c:df:39:
         77:9e:fe:88:2a:82:73:6a:89:7e:96:84:56:91:de:70:98:dc:
         c8:a1:26:46:00:a7:8b:f2:df:74:83:55:0e:0a:78:7e:63:c4:
         9c:7b:02:a1:81:e5:68:3b:62:30:11:83:86:de:18:7a:99:94:
         36:33:ba:0b:de:fe:b3:0b:5e:b2:89:1e:d1:0c:a3:bc:de:14:
         1c:97:2a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:38 2026 by rpki-client