Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
File:                     5e6b3956-f389-30ac-a866-34bb38831507.roa (raw, json)
Hash identifier:          GJWYPnwATUBNS8gmZs+8cVSp1TY2uz35sdO1o/oUuDA=
Subject key identifier:   C7:3A:DE:1C:A4:77:C6:EA:5E:55:9F:4F:E3:5A:B2:2A:23:BF:BC:23
Certificate issuer:       /CN=ebf567a0-4cf8-429d-82b3-3d284a246421
Certificate serial:       010D0C9F4328584D33206F93CFF65411D1823F60
Authority key identifier: BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     1421
IP address blocks:        66.39.192.0/20 maxlen: 24
                          66.220.58.0/24 maxlen: 24
                          69.64.240.0/20 maxlen: 24
                          162.211.176.0/22 maxlen: 24
                          162.216.96.0/23 maxlen: 24
                          162.216.100.0/22 maxlen: 24
                          199.38.232.0/22 maxlen: 24
                          199.101.92.0/22 maxlen: 24
                          2001:4848::/32 maxlen: 48
                          2605:dc80::/32 maxlen: 48
                          2606:9100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:20:6f:93:cf:f6:54:11:d1:82:3f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf567a0-4cf8-429d-82b3-3d284a246421
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=828d8d1f-f68a-49df-8c74-5067a9b52c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:3c:85:0b:c0:6c:53:97:96:ae:b6:a7:2a:
                    e5:89:8a:82:8a:be:36:e9:55:f2:80:b0:c5:f8:b7:
                    50:70:d5:5f:21:91:5c:16:cf:68:4d:3d:ae:db:f0:
                    c3:50:a4:83:77:bc:44:a1:ae:8e:14:95:82:b5:30:
                    c1:1c:87:5d:d2:36:96:c2:5d:b6:70:8d:07:61:ed:
                    a4:c1:08:ed:bd:48:19:26:05:96:4f:5a:06:56:e2:
                    36:3b:d1:0f:8e:dd:8f:63:d0:bb:3c:40:04:05:9c:
                    6d:4f:fb:04:4c:ff:10:71:d0:75:d0:1a:50:87:25:
                    0f:41:1f:58:6f:d1:d9:2c:92:56:b1:13:77:1d:43:
                    f2:c7:86:3d:21:1c:f0:ec:fb:f7:d5:a9:39:ba:37:
                    72:6a:8f:3f:7a:a7:9a:83:59:3d:88:d3:7e:60:da:
                    ca:f2:39:98:60:61:e3:45:d1:96:5e:ee:21:86:07:
                    ed:61:ca:09:d4:ea:c2:2c:c6:1e:04:39:1b:97:e5:
                    d6:4b:0b:47:3c:15:82:4c:52:07:30:69:87:fc:dc:
                    ce:93:8f:d7:e9:58:18:3a:c4:75:13:5f:79:6a:84:
                    ef:97:01:ce:f3:62:e2:5d:89:ca:ff:14:cc:5c:a8:
                    f3:8f:af:b8:ed:9b:ab:25:5f:6c:a5:73:81:ef:a1:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3A:DE:1C:A4:77:C6:EA:5E:55:9F:4F:E3:5A:B2:2A:23:BF:BC:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/5e6b3956-f389-30ac-a866-34bb38831507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421/ebf567a0-4cf8-429d-82b3-3d284a246421.crl

            X509v3 Authority Key Identifier:
                keyid:BC:DC:60:56:34:F7:B9:03:E6:E5:5E:C5:FD:4D:EE:CC:69:95:41:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ebf567a0-4cf8-429d-82b3-3d284a246421.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.192.0/20
                  66.220.58.0/24
                  69.64.240.0/20
                  162.211.176.0/22
                  162.216.96.0/23
                  162.216.100.0/22
                  199.38.232.0/22
                  199.101.92.0/22
                IPv6:
                  2001:4848::/32
                  2605:dc80::/32
                  2606:9100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:87:cf:48:d0:5f:d0:db:e3:11:e5:bb:54:f6:fc:d2:5c:cf:
         ee:f3:61:9d:d0:45:e4:b2:e8:74:61:7a:ea:01:48:a1:d9:77:
         97:9f:cf:e1:3d:a4:2a:e6:d2:4a:12:86:8f:73:0b:fa:03:44:
         f6:a1:09:1d:bf:f8:ce:7d:43:f7:e2:c7:b0:00:18:12:34:0e:
         2b:10:20:eb:1f:5d:64:9c:dd:51:7f:75:c2:47:44:bb:81:f1:
         80:f6:ff:35:dd:5a:d1:a1:59:1a:d2:e1:cd:5f:79:15:b2:11:
         32:37:a9:d2:41:c5:cf:4a:09:29:f4:94:14:03:ff:88:5a:66:
         55:fa:7a:eb:fa:73:2d:a6:6a:6f:f5:09:d7:bc:2b:01:9a:9a:
         a3:ae:21:4a:e1:c6:6f:11:8e:7f:58:e9:a8:08:0c:0f:db:dc:
         67:7d:1f:e0:ac:65:9e:21:c9:63:83:9b:06:50:89:f4:94:c2:
         b6:2d:11:71:a7:85:e1:7a:e6:a7:88:74:76:6f:c4:f8:07:8c:
         d7:ff:ac:ef:68:0d:fb:3e:27:f6:c6:a9:3c:f4:f8:1b:c2:1a:
         d2:9a:4e:f1:ba:65:4e:00:f2:02:48:12:91:19:20:9a:8f:36:
         30:03:5a:12:9e:e7:3c:68:81:3d:ef:12:29:dc:02:3e:8a:0c:
         d8:f2:19:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:22 2026 by rpki-client