Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/77296669-176b-3853-8735-2650b8fb7fb3.roa
File:                     77296669-176b-3853-8735-2650b8fb7fb3.roa (raw, json)
Hash identifier:          SoDCABC/mR/9YKGQlPYN2vdG61p2HLuSorWR+waRE+8=
Subject key identifier:   C7:D1:4E:57:CC:91:BD:5D:2B:5A:B2:D6:94:24:A5:6B:06:94:90:53
Certificate issuer:       /CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561
Certificate serial:       010D0C9F4328584D4A8F8C160B538D0246675D00
Authority key identifier: CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/77296669-176b-3853-8735-2650b8fb7fb3.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     395141
IP address blocks:        66.187.2.0/24 maxlen: 24
                          199.233.14.0/24 maxlen: 24
                          2604:1960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:8c:16:0b:53:8d:02:46:67:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=00a18c1f-4855-45be-9068-1865731b847b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:15:1a:7e:13:eb:fe:0f:41:73:87:b3:d2:
                    bb:e9:de:ba:c1:00:fb:dd:82:2a:b2:e9:df:08:41:
                    bd:0c:57:bf:6c:40:45:d4:d0:d5:7d:d1:e6:00:23:
                    2f:b5:65:55:95:1e:1d:76:bf:50:4d:88:b2:35:8a:
                    44:c6:1e:7a:6d:ab:c6:2f:70:b3:17:cb:80:d5:9a:
                    dd:02:7a:87:9d:5a:1f:2f:01:71:e4:09:fa:53:df:
                    00:c9:e4:3d:5b:13:32:fa:a1:d8:24:79:ae:eb:59:
                    0c:d0:4b:a8:9b:db:5a:53:ba:5b:55:fe:e9:d4:dd:
                    7b:e7:b6:e2:22:5b:a0:07:61:f3:c8:71:84:b0:2f:
                    e5:8b:d8:b2:9a:1b:7d:5e:b8:49:d6:ed:9c:46:af:
                    c8:ea:69:9f:c0:17:72:91:cd:16:2f:64:99:23:19:
                    62:98:48:04:25:28:be:c4:95:eb:4b:09:18:91:cc:
                    b4:5d:3a:7f:ce:bc:2f:3f:ca:23:dc:eb:46:11:16:
                    ea:38:7b:71:93:08:13:5a:43:d4:33:7d:ec:99:08:
                    79:9e:ff:de:c6:21:e8:e9:ab:df:f5:a9:75:65:61:
                    98:a6:7f:44:0b:35:7d:90:46:9d:ef:eb:b1:45:29:
                    29:8e:52:30:a6:01:95:5a:89:e5:e6:d6:e7:34:87:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D1:4E:57:CC:91:BD:5D:2B:5A:B2:D6:94:24:A5:6B:06:94:90:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/77296669-176b-3853-8735-2650b8fb7fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.2.0/24
                  199.233.14.0/24
                IPv6:
                  2604:1960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d0:2f:ce:d5:21:b0:d2:7b:fb:33:b8:48:15:50:d6:06:25:
         83:07:d4:6e:d3:4c:d2:8b:be:f4:25:32:7c:81:d8:af:55:14:
         5e:77:41:cf:22:e4:af:10:be:7e:4b:9f:63:a0:40:f9:20:58:
         a0:3a:09:23:17:52:25:ea:5a:69:d6:09:62:69:5c:a0:30:0c:
         89:f6:f0:79:36:42:ab:50:1f:bc:44:d6:61:51:22:1f:e8:9f:
         4b:b8:2d:36:a9:e9:2e:28:aa:5a:b5:60:0b:91:ba:51:03:d2:
         e2:68:51:95:43:47:95:6c:72:9e:7c:be:70:ed:5b:69:c0:e3:
         e9:a1:0c:25:73:4d:15:30:62:d8:f9:1b:f1:7f:47:e7:44:a3:
         53:01:a3:db:f4:34:6e:43:08:71:be:68:96:10:89:50:2c:25:
         d0:4c:9d:1c:e8:59:1f:65:63:fe:78:38:d5:a7:19:ef:82:ea:
         d6:34:4d:58:3a:09:6a:a0:f0:f2:e3:56:db:d7:4f:4f:02:9e:
         d4:77:8b:85:c3:e3:4d:64:cd:5e:89:2b:e8:56:12:2b:f5:22:
         ec:71:ea:64:78:49:36:fa:b0:34:16:52:e1:89:b3:9d:f3:d7:
         94:91:c4:c4:3c:8c:1d:86:8e:be:fc:c1:25:82:00:26:8b:01:
         23:d3:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:42 2026 by rpki-client