Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5020df77-5b61-3b7a-b4a8-4917e312ba56.roa
File:                     5020df77-5b61-3b7a-b4a8-4917e312ba56.roa (raw, json)
Hash identifier:          ed6EnPKrY4kkuKWzG17WwB1hrwha1LX8gAPdPwMlzZ8=
Subject key identifier:   CA:F4:72:96:39:1B:44:F3:BA:D8:E6:3F:02:59:CE:35:85:0A:D8:E4
Certificate issuer:       /CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
Certificate serial:       010D0C9F4328584D44FA6E9996C928AB5365AD70
Authority key identifier: 4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5020df77-5b61-3b7a-b4a8-4917e312ba56.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     401319
IP address blocks:        66.51.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:6e:99:96:c9:28:ab:53:65:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d16a39-472c-48cc-ac4c-7e385950a0e2
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=4b63851e-b270-41f0-bb01-02655b50e415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:24:b1:45:55:1d:21:c1:8f:d5:17:04:65:
                    84:80:6d:cf:03:9a:8c:dd:98:3b:fa:52:e1:bf:ba:
                    90:08:56:0d:2e:2e:76:b0:3e:93:c1:d7:6a:02:3f:
                    fa:1c:c0:13:ff:fd:fd:33:16:71:65:4e:3f:86:be:
                    2d:e9:c0:c2:3d:d4:cb:01:24:02:94:40:44:3b:90:
                    33:f2:76:e8:3e:dc:e6:a2:e8:22:1f:01:de:a7:47:
                    3e:26:e5:ef:19:68:ac:b4:8b:f1:00:45:29:e5:f3:
                    ad:7e:81:10:96:fd:4e:a4:3b:54:1e:09:8e:38:22:
                    02:16:88:6a:bb:4a:b2:d3:24:2e:5c:b3:32:11:d5:
                    7b:4d:b0:64:d4:0f:88:1f:38:c6:70:ab:ef:ac:da:
                    f4:6b:ff:56:5c:0b:80:79:63:4c:74:95:63:92:91:
                    06:b6:83:80:15:23:fa:f1:a3:c6:1e:b0:8f:21:7c:
                    a7:f1:da:42:9c:f1:e7:1b:d9:65:a3:14:80:c9:1b:
                    54:26:81:fe:5b:64:f5:20:31:1e:a5:a6:72:93:c9:
                    73:76:b9:d9:fa:54:ef:de:44:4e:df:3a:4f:a7:0a:
                    9d:a4:de:35:8d:f8:e7:54:eb:58:be:bc:cf:e3:e2:
                    68:dc:9b:3e:10:3b:c6:52:5e:99:9a:74:4f:7f:ed:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:72:96:39:1B:44:F3:BA:D8:E6:3F:02:59:CE:35:85:0A:D8:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/5020df77-5b61-3b7a-b4a8-4917e312ba56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.crl

            X509v3 Authority Key Identifier:
                keyid:4E:9E:79:41:AD:55:D4:9D:9D:D7:5D:EE:90:7D:F7:4E:30:AA:90:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c6d16a39-472c-48cc-ac4c-7e385950a0e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:99:ef:71:e3:30:6e:4c:04:3b:e2:8a:60:0b:09:4d:59:dc:
         f9:f3:ef:17:c2:5f:09:cc:19:c8:b7:a1:c9:a1:8b:d4:0a:c1:
         0a:22:1c:be:be:86:93:97:1a:07:18:bb:d7:94:ab:70:9c:75:
         63:b6:34:31:cc:e8:58:76:33:7a:26:be:aa:1b:e8:1d:8a:c2:
         3b:23:04:7c:49:0b:a8:82:26:5b:60:87:6f:d8:c2:31:9d:93:
         8e:c1:42:a0:ae:ee:bc:74:a7:47:24:a3:89:1e:da:71:8e:e8:
         d3:39:84:10:89:7e:1d:ba:89:ef:af:c9:4d:1c:cb:e1:69:73:
         90:f6:3d:47:de:3c:26:42:a4:5a:01:2f:ce:be:67:24:33:8e:
         83:df:73:ba:71:58:3e:1e:e9:c5:13:7c:08:e3:9a:f7:46:96:
         8a:8c:ff:4e:ae:ef:e7:f0:d9:7f:d4:7f:4c:57:13:28:87:e0:
         e4:40:9f:95:be:ba:15:7b:0c:1e:1e:5f:94:26:a4:f7:f9:5e:
         3f:13:54:61:ec:78:72:79:91:7a:f3:8d:22:14:b2:95:e5:e8:
         02:ee:26:50:ce:f7:77:4c:3b:35:19:c0:8a:1b:0e:15:5f:b5:
         1f:6e:43:14:dc:49:c9:c4:00:d6:4f:30:2d:8e:f1:7a:c1:9c:
         50:1f:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:41:45 2026 by rpki-client