Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8448a058-efbb-3482-84d7-e1c11cb7696c.roa
File:                     8448a058-efbb-3482-84d7-e1c11cb7696c.roa (raw, json)
Hash identifier:          VtJ+ZS19ljkTJyu2ETQS1IKcEGkN34ILOeUpMVAiQPs=
Subject key identifier:   7F:16:9D:95:5A:C9:30:69:45:46:FC:4D:A2:18:B2:53:19:07:F4:15
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D386A5909B3BB2BC465F56520
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8448a058-efbb-3482-84d7-e1c11cb7696c.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     395793
IP address blocks:        66.134.64.0/23 maxlen: 24
                          66.134.66.0/23 maxlen: 24
                          66.134.68.0/23 maxlen: 24
                          66.134.70.0/23 maxlen: 24
                          66.134.76.0/23 maxlen: 24
                          66.134.78.0/23 maxlen: 24
                          66.134.80.0/23 maxlen: 24
                          68.167.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:59:09:b3:bb:2b:c4:65:f5:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=990dbb1b-0b95-4fe6-b9ec-e24a16a98249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:84:0f:a9:0e:4a:c1:a0:21:3a:6d:d4:99:
                    a6:5f:73:d5:01:fb:a3:05:21:26:f5:da:9d:8c:e0:
                    40:ff:15:70:2b:92:81:3c:80:fe:0a:ef:f8:c1:55:
                    61:91:74:25:85:96:23:24:e6:cd:43:ea:3b:f7:01:
                    59:9c:fd:a0:59:1d:74:22:c1:8b:e6:8e:22:a9:5b:
                    3c:7e:f2:20:86:dd:5b:5b:e5:08:47:ce:5d:4f:c8:
                    f0:24:32:29:5a:71:5d:70:93:13:e7:18:13:6e:4d:
                    5d:5f:69:d8:76:b0:69:7d:e1:93:09:75:85:88:65:
                    4a:d8:ac:28:f1:ad:25:90:34:96:f7:60:64:d3:4a:
                    af:e6:c2:23:8f:bb:d2:73:7f:ac:48:cc:84:a6:43:
                    38:3c:7b:03:7a:30:54:a0:7e:51:02:5c:bd:be:3e:
                    1f:f4:81:d6:11:21:97:bf:76:00:92:5d:a5:78:94:
                    97:1b:8d:57:26:a1:8e:c0:8e:37:69:37:31:d2:ec:
                    0a:8e:7e:e5:64:40:68:18:23:41:b8:c4:61:b2:78:
                    5f:ba:5d:e4:b5:45:91:7c:aa:4e:95:d1:6f:20:2a:
                    3c:d9:c6:2a:0f:ec:2a:b6:e7:f3:25:96:d5:84:5c:
                    f3:26:4a:af:35:11:0a:33:b1:75:98:98:c9:41:37:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:16:9D:95:5A:C9:30:69:45:46:FC:4D:A2:18:B2:53:19:07:F4:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8448a058-efbb-3482-84d7-e1c11cb7696c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.134.64.0/21
                  66.134.76.0-66.134.81.255
                  68.167.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:65:06:f9:01:05:1f:76:a4:a7:ae:6b:3e:88:fd:53:fe:d1:
         63:41:7e:09:75:6d:4c:ab:4a:1b:ff:4e:b5:e4:13:65:97:31:
         78:68:8c:14:52:88:b4:1a:16:04:3d:c8:57:22:30:22:1b:49:
         55:85:8e:fc:9e:81:c3:80:f5:7b:bf:0a:36:b8:fb:43:cf:f2:
         7a:91:9f:8f:bf:d7:81:71:4e:7a:80:23:02:25:c5:4b:74:e9:
         d5:cb:c9:4b:8d:68:4a:3a:0e:65:5a:d6:d9:f3:41:67:a5:ba:
         f7:7c:1d:b1:0c:5d:64:71:50:f3:1f:2c:8b:cd:64:5b:d6:ee:
         15:20:28:ba:5a:b3:c2:1d:6d:26:d8:93:e6:de:fa:57:c1:48:
         d1:46:6a:3d:7f:9f:0c:ca:8a:6a:6d:14:21:c3:1c:fd:77:77:
         46:a2:80:04:d6:0e:09:7c:c9:d5:48:8f:98:71:0b:5c:d7:a3:
         9c:c9:a1:91:e9:89:18:c0:26:9e:1e:05:b4:d5:87:a6:d6:c4:
         47:b7:ac:e0:0e:63:a2:12:b5:4a:8e:e9:09:0b:e6:2d:1d:2d:
         f2:6a:d6:c4:f8:4c:67:19:86:9d:cb:79:42:ae:02:6c:05:e9:
         3a:c4:32:fc:cc:50:82:8b:48:28:f0:fa:fe:84:8b:45:4f:db:
         11:1a:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:36 2026 by rpki-client