Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa
File:                     849770b3-423d-36e5-898b-d99735708a9c.roa (raw, json)
Hash identifier:          aZnjaXAbBNLoHokGrB+4UA+AWKya/aoo8Y8xeH5YEcM=
Subject key identifier:   D8:6B:65:28:EA:42:B3:A9:24:70:9F:16:FE:01:0E:4F:D4:8D:45:E5
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F4328584D1B1A0C6948C8C3E8B81FE100
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     31919
IP address blocks:        66.119.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:0c:69:48:c8:c3:e8:b8:1f:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=7f3f6d21-36c1-45be-b76d-673243893bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:49:3d:ee:78:ec:41:13:81:7b:83:a7:c6:
                    c3:d9:b0:0f:2b:a3:22:fa:67:f5:7c:b5:e6:e5:34:
                    ab:45:5e:6b:10:ae:41:47:65:5f:50:c6:78:bb:89:
                    0e:6e:e3:19:93:75:09:b0:58:38:f4:bf:aa:a6:a9:
                    90:ed:7f:63:33:12:2d:8b:66:36:8d:4c:a2:43:8b:
                    9f:65:10:9b:68:db:17:28:dd:40:b9:aa:24:9b:4d:
                    a2:f5:ac:6b:44:38:6f:64:02:e4:53:fd:a9:6c:04:
                    be:b7:43:c8:f8:7b:59:10:2f:6b:35:d5:35:5c:34:
                    3f:e2:25:07:28:26:47:b2:f1:c2:df:5e:5d:77:e6:
                    0e:08:40:87:50:f9:25:1e:0b:7d:b4:b2:dd:ad:ab:
                    81:82:d4:7b:c3:b2:15:17:cc:76:35:fd:46:78:10:
                    21:6a:dc:e0:67:04:ec:dd:82:1d:fc:dd:95:4a:d5:
                    f4:26:b1:dd:a8:a1:fa:fe:46:58:38:8a:d4:fc:eb:
                    0a:ce:06:6c:ad:9b:88:68:54:22:a3:30:84:83:c9:
                    e7:4f:77:29:2e:dd:30:a0:0f:63:6b:3c:a7:e1:e1:
                    f3:ae:b2:bf:ca:fb:ab:6e:90:d0:83:69:a8:f1:23:
                    32:4b:71:4e:02:0e:e1:9f:8a:8d:af:70:9d:65:6c:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:65:28:EA:42:B3:A9:24:70:9F:16:FE:01:0E:4F:D4:8D:45:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:93:9c:59:09:35:be:61:d2:da:64:52:4e:b2:53:6e:e0:8c:
         b0:79:31:c1:3c:42:72:ef:d7:a4:47:82:03:e2:8c:98:48:a1:
         73:0e:03:be:c5:2f:db:73:a0:21:45:bd:54:49:af:92:0d:23:
         63:6b:54:82:7b:b5:bd:b5:ec:b6:2f:04:58:2b:ed:53:d5:81:
         9e:6e:e2:d5:ab:fa:ad:94:85:a6:52:55:af:06:27:be:22:dc:
         98:2a:e1:2a:8a:a8:3f:fe:1b:78:60:ba:3f:be:c6:d4:b3:b8:
         f7:c2:35:94:d3:44:bf:9a:40:37:b3:b2:6d:d9:70:70:43:70:
         4d:73:13:df:a3:a1:6d:74:6c:ea:a2:28:e2:78:7d:89:74:9f:
         32:fd:c7:45:f2:2c:47:ab:02:75:4f:89:cf:16:1b:de:96:ae:
         d8:9a:97:10:a4:d2:f4:dd:f8:c7:59:19:bc:68:90:70:80:ba:
         5b:c7:99:38:f3:a5:1e:01:da:18:e3:6d:bd:f5:7e:18:8c:0d:
         1f:77:8a:73:24:0e:2e:ca:a1:6e:4c:b5:2f:09:9e:08:8a:71:
         78:92:10:36:59:62:d7:67:5b:09:89:2f:e0:65:1f:50:ab:98:
         ce:0d:89:b1:95:0a:fa:a1:3d:a4:8c:1e:ff:cb:46:f6:f9:3b:
         51:7b:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:00 2026 by rpki-client