Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/86d6f7f0-b8ca-3239-a2d5-9eb68d9f3945.roa
File:                     86d6f7f0-b8ca-3239-a2d5-9eb68d9f3945.roa (raw, json)
Hash identifier:          9+sUZBmtmRTYuK/F7t5QFuCMFOfs5mhU7cLptuNR7y0=
Subject key identifier:   2C:66:C1:9B:CD:25:79:01:1F:EA:66:11:E3:E2:6A:4C:63:7E:A1:10
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D24DF5A2AEEB2F97B47EE16AC
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/86d6f7f0-b8ca-3239-a2d5-9eb68d9f3945.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     204800
IP address blocks:        67.209.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:5a:2a:ee:b2:f9:7b:47:ee:16:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=258d5713-429e-4a05-8818-17dcdd23668b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:26:6c:8b:8b:cb:d8:3d:4c:40:d2:ac:7e:
                    a4:66:3a:5b:b2:74:81:a2:c1:b5:d7:83:3a:4f:8d:
                    4d:99:55:bc:44:24:0f:3c:78:67:8a:df:cc:fb:b4:
                    d9:98:16:99:27:d8:bd:00:45:8d:1a:fe:f9:1f:f5:
                    33:09:a5:69:2e:f6:8b:ad:ed:e1:72:6d:d0:ae:ee:
                    d8:f9:45:03:82:b2:2c:81:16:3b:b3:d8:3d:1c:b1:
                    f7:ad:59:45:ad:be:75:dc:bc:71:5c:9a:5e:e4:c9:
                    cb:bb:af:bd:ca:f8:4f:df:dd:d4:f4:71:f0:7d:34:
                    83:e3:ae:3a:8d:1e:c4:c5:03:59:ad:a3:97:57:01:
                    ef:d4:a0:83:dd:ba:83:65:a4:85:00:4b:18:58:e1:
                    81:90:cc:44:2a:fd:d6:a9:e6:4c:38:06:59:fc:66:
                    6e:00:9b:34:f3:08:cc:f6:50:88:c4:da:71:a0:0d:
                    bb:ba:23:64:80:66:f5:73:5f:0c:10:48:4f:b9:ac:
                    d7:2b:a1:23:9f:2f:f6:bf:83:89:0a:65:6c:7e:54:
                    2b:66:c3:33:1d:ae:73:84:b2:46:b4:32:51:71:6c:
                    93:8a:bc:7a:de:36:2c:35:2c:d6:2e:64:c8:fb:02:
                    cb:d9:ca:1d:9a:2c:b4:89:a2:03:2a:5d:26:d0:c0:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:C1:9B:CD:25:79:01:1F:EA:66:11:E3:E2:6A:4C:63:7E:A1:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/86d6f7f0-b8ca-3239-a2d5-9eb68d9f3945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:92:56:ad:a3:5b:50:62:b1:7b:9e:09:f9:e8:0c:43:3a:
         33:67:fd:13:63:51:ed:b3:7e:49:3f:69:91:93:38:81:0b:c3:
         af:57:e7:ca:7a:db:5f:e1:56:87:ad:c4:c8:b4:71:58:1c:9f:
         a9:87:99:8a:c7:aa:5a:19:fe:8a:05:7e:19:b1:07:d2:0d:49:
         a9:3c:16:06:47:d0:84:be:c4:a5:f5:64:ea:94:18:db:4b:7e:
         c5:d6:17:6f:a0:62:40:41:36:88:21:12:80:7b:00:83:04:6f:
         b5:b2:4c:13:c7:2b:65:d7:cf:65:77:c9:f7:c1:89:1a:8d:34:
         8e:ba:d9:40:f9:c1:94:a9:9a:7a:2a:e3:74:0c:70:96:d0:f9:
         26:5d:a1:7e:f7:b6:35:dd:ef:2b:2c:02:b2:f7:b5:21:4a:3b:
         5a:be:9d:1f:b8:03:bb:37:88:2d:60:0a:6c:4b:34:38:da:ad:
         67:63:c7:85:78:25:a3:39:07:7f:32:ef:17:e4:20:a1:16:b7:
         06:f2:be:c8:be:ec:46:94:94:4b:35:90:fb:04:f5:a1:9b:20:
         47:cc:60:db:38:31:46:06:f1:d5:07:fa:de:fa:1b:70:07:4a:
         64:d6:72:29:e4:d8:61:b5:03:bb:1f:95:b9:4c:77:1a:69:66:
         11:ef:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:05 2026 by rpki-client