Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1edc11a-532d-3a9b-ac2a-9a7c68f78706.roa
File:                     e1edc11a-532d-3a9b-ac2a-9a7c68f78706.roa (raw, json)
Hash identifier:          /kLmOVM8TeqJvi+6efci+Am8uQh9izSC/20Su2XUwfg=
Subject key identifier:   3D:8C:CC:58:26:B4:6D:02:95:EC:41:DC:C9:4C:79:5B:F4:4A:51:D5
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DCDC5CC2E4A1DCE5EF2D263E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1edc11a-532d-3a9b-ac2a-9a7c68f78706.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     3257
IP address blocks:        66.93.252.0/24 maxlen: 24
                          66.93.253.0/24 maxlen: 24
                          66.93.254.0/24 maxlen: 24
                          66.93.255.0/24 maxlen: 24
                          69.3.140.0/24 maxlen: 24
                          69.3.141.0/24 maxlen: 24
                          69.3.142.0/24 maxlen: 24
                          69.3.143.0/24 maxlen: 24
                          206.135.156.0/24 maxlen: 24
                          206.135.157.0/24 maxlen: 24
                          206.135.158.0/24 maxlen: 24
                          206.135.159.0/24 maxlen: 24
                          216.132.204.0/24 maxlen: 24
                          216.132.205.0/24 maxlen: 24
                          216.132.206.0/24 maxlen: 24
                          216.132.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:cc:2e:4a:1d:ce:5e:f2:d2:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=03f476de-431f-46b1-a608-598be995fecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:6b:2d:0b:14:ae:a0:71:20:59:46:eb:02:
                    54:6e:ca:12:47:17:13:b2:49:6c:4a:4b:30:72:d6:
                    21:87:f2:1a:52:6a:7d:3f:fa:26:ce:0f:57:40:7a:
                    7e:a6:21:61:73:5d:cd:c8:21:13:0f:af:80:86:f6:
                    35:2e:02:4a:a4:a1:0f:67:33:4d:a6:04:21:b1:d9:
                    fb:f3:21:ae:ce:25:12:bf:77:68:99:67:13:fd:e3:
                    07:1c:bf:b6:a5:22:48:39:b6:f2:1d:9c:86:23:9d:
                    75:7e:3f:8a:fd:d2:5f:e4:27:7d:97:e6:36:78:98:
                    eb:a7:0a:99:7e:25:12:9a:f5:c0:07:44:4f:f6:11:
                    87:52:7a:2f:8f:16:0e:b3:56:ad:17:f8:b6:6c:28:
                    39:d9:16:c1:91:be:44:e4:eb:16:e6:37:f0:89:67:
                    58:e6:6c:78:51:0e:d2:2d:9c:83:ae:20:49:6b:3f:
                    6a:13:33:82:9d:76:bd:aa:ad:3f:4f:f2:30:52:e9:
                    9a:d0:db:13:67:a7:99:b6:cf:07:de:e1:20:c2:52:
                    63:68:7e:ac:a2:5d:84:f4:cf:07:2b:5d:84:e9:38:
                    46:b0:66:da:dd:98:8c:c1:dc:c6:2c:93:69:52:2a:
                    5a:1d:f6:0f:51:80:0e:7a:23:15:4d:fb:71:44:53:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8C:CC:58:26:B4:6D:02:95:EC:41:DC:C9:4C:79:5B:F4:4A:51:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1edc11a-532d-3a9b-ac2a-9a7c68f78706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.93.252.0/22
                  69.3.140.0/22
                  206.135.156.0/22
                  216.132.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:7a:0d:9a:49:88:94:86:3c:46:78:95:c3:51:98:22:63:
         f2:2a:06:b9:e7:3e:ad:55:9c:1a:64:06:23:91:00:1d:36:4e:
         ec:6f:f3:d4:25:c8:28:49:af:cd:bb:66:fc:33:57:2a:ae:2e:
         0a:8e:a1:08:a8:a6:5c:a2:73:34:65:b6:34:d7:62:7d:e7:3e:
         23:a2:18:ca:68:9d:35:b6:61:b7:2d:9b:09:22:76:28:b0:ff:
         7f:85:22:6d:67:6c:00:57:df:60:45:d2:9d:79:7e:93:91:24:
         d1:c5:65:9a:c9:47:92:8b:df:e4:21:5e:1e:0b:46:02:fa:a5:
         91:53:b8:ce:0b:00:d4:ab:de:ed:65:7f:21:9e:ee:80:ff:52:
         32:7e:9f:f6:32:fe:ca:d1:c5:9b:6f:10:ae:ca:d8:ed:38:9f:
         a9:15:4d:53:a7:9b:1e:54:2b:ab:bc:20:a8:a6:22:6c:30:34:
         4b:b0:77:12:4f:a5:4b:24:4f:91:02:fc:a9:ac:41:60:64:a8:
         13:35:d4:ac:83:ea:1c:f4:3e:19:ff:09:17:23:9f:3f:b8:2d:
         a7:9f:37:a0:ca:99:6d:d3:26:39:c6:87:a0:d7:ed:10:c9:3f:
         6c:0f:81:3e:13:74:ee:0f:f0:44:56:4a:a3:e2:3a:af:40:6e:
         4c:a1:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:42 2026 by rpki-client