Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1b963e7f-1a37-3b4d-a768-40631d408416.roa
File:                     1b963e7f-1a37-3b4d-a768-40631d408416.roa (raw, json)
Hash identifier:          g55h/r4IKGqItZVVUtAflQbQgtrBIfbn0KatdGcyXFI=
Subject key identifier:   22:E8:90:E7:AD:D7:FB:77:FC:B2:16:9E:B5:DA:3B:3B:2D:DE:91:9A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D27AA4C4DC3A387886D7C0AC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1b963e7f-1a37-3b4d-a768-40631d408416.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        64.15.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:4c:4d:c3:a3:87:88:6d:7c:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=77f30a55-e39c-4589-9d59-2c0b6473a976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:b8:55:14:83:fd:35:9c:51:3b:f7:9d:9a:
                    eb:6f:7c:50:24:2e:97:7f:93:5d:0a:61:48:a3:ef:
                    39:1e:00:73:f5:1a:97:7f:52:1a:f4:8e:35:ff:e1:
                    a0:d3:90:db:23:57:89:73:d4:41:85:0a:1e:d9:c5:
                    34:34:a2:07:69:47:6f:15:f9:b7:a7:43:61:51:7c:
                    54:62:63:54:71:b1:42:55:77:43:ce:7b:85:48:28:
                    e4:9f:3d:17:54:3e:7f:ce:9b:59:32:2e:a1:05:d6:
                    18:1d:84:db:56:55:ba:74:13:1d:b3:90:1d:0a:3c:
                    80:a2:b9:af:d3:5d:48:8b:1a:ad:2a:97:4f:95:08:
                    e1:39:f2:28:0f:ee:8a:9f:ae:59:a3:3b:18:74:4b:
                    98:50:8d:7e:2e:91:c2:23:fe:38:87:9e:fd:b4:c7:
                    48:a6:98:15:d0:9a:63:a2:9f:a2:d2:a6:46:63:53:
                    0b:43:83:ab:0c:95:fc:aa:8f:32:9c:14:57:0e:a8:
                    50:66:7c:d3:3c:cf:00:a2:a2:29:22:9d:fc:26:2e:
                    7d:79:0c:40:a0:3f:8d:fe:bc:87:25:cb:68:02:ec:
                    45:0d:24:67:b5:19:6c:a4:6a:79:1a:07:8d:9f:01:
                    ac:90:39:4f:3f:27:ab:45:9c:c0:41:8e:53:23:4d:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E8:90:E7:AD:D7:FB:77:FC:B2:16:9E:B5:DA:3B:3B:2D:DE:91:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/1b963e7f-1a37-3b4d-a768-40631d408416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5d:82:ef:c8:6c:1c:9f:24:0e:68:bd:2c:45:af:81:ad:10:
         c9:24:c3:89:f9:0e:17:25:f5:a0:34:08:98:86:79:ea:04:fe:
         03:87:12:c5:ad:b8:7a:d9:a8:62:77:1a:ba:7b:07:d8:75:0f:
         53:2c:45:19:37:58:8f:66:69:b8:4f:b9:19:a2:99:c8:3f:06:
         ab:64:63:73:c2:99:45:cf:87:e3:1a:32:32:aa:65:da:a1:0d:
         7a:9f:9c:2a:52:a3:82:95:ec:54:95:c2:e5:7c:cb:ef:26:d5:
         9c:90:47:d3:63:32:5f:69:f9:4e:71:a5:96:ac:df:a6:a2:d4:
         21:30:1e:64:aa:cd:73:5f:c3:af:11:8c:04:f0:f6:db:fe:3c:
         ff:36:86:a0:fd:bf:30:ed:1e:5d:3e:0d:a5:86:4d:20:66:4e:
         ec:03:a9:92:78:cb:8b:fa:7a:9a:04:01:b2:83:e6:81:fd:02:
         cb:3c:ff:e9:56:4a:d9:74:0b:52:a3:9f:78:2c:ed:d5:ef:3d:
         4d:1d:35:b2:5a:b8:0f:3a:3c:15:d1:55:fb:89:75:ab:7e:fa:
         b0:9f:20:de:a1:eb:4c:ec:da:5a:4f:66:a6:18:e5:61:15:d9:
         97:e3:69:cd:69:96:ff:f5:45:01:c4:f5:22:2e:48:9a:74:18:
         47:f8:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:57:06 2026 by rpki-client