Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
File:                     0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa (raw, json)
Hash identifier:          f/QT1nCSZGXWSh0u8JuS8mf6Wv7ASi2VjZIcUuzyVPY=
Subject key identifier:   E9:97:EE:EF:A9:73:92:1D:0C:2B:62:7C:3F:BD:B8:0F:81:1B:98:10
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F4328584E4C54879C8A58BBE671C68840
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     55002
IP address blocks:        64.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:87:9c:8a:58:bb:e6:71:c6:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=9909570b-bbda-4823-a073-72889b4d55e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:6e:be:48:f2:46:05:93:0b:c6:c1:cb:19:
                    3d:01:a9:53:c5:8b:b1:13:96:d5:48:9f:62:88:70:
                    88:df:61:7a:50:cf:2c:12:88:4b:64:a6:b1:db:5c:
                    f3:2a:31:3f:95:28:53:e2:e6:e4:f6:b2:69:de:40:
                    e5:52:02:12:77:70:29:6f:ad:9a:80:19:51:03:37:
                    79:27:b2:0a:72:2b:1b:a1:03:5d:98:0f:35:ba:83:
                    f0:58:80:fa:9b:5b:4b:68:41:22:57:98:e9:21:8a:
                    55:a1:59:d3:8a:fd:ce:47:10:4a:fc:0b:7a:1f:57:
                    07:b4:ae:95:9f:6d:2d:31:02:d7:48:5a:77:5a:f8:
                    54:59:f0:47:8d:73:7d:0b:58:e6:ee:60:36:43:44:
                    3f:2c:37:0d:5a:4c:41:08:84:f7:6b:96:bc:23:32:
                    34:0d:57:c8:9d:8a:cd:3a:6d:9f:5b:25:e7:d5:58:
                    8b:68:bf:cd:4f:ac:f0:af:8b:a2:eb:ac:ba:a0:c1:
                    82:3b:0c:50:69:99:44:b2:f2:53:03:c9:98:01:0d:
                    bc:62:d5:ff:34:db:84:5a:1a:ea:f8:e9:1a:9d:42:
                    d3:0a:35:d2:a2:2e:2d:ad:b1:d1:02:de:c4:9b:87:
                    16:ba:4c:89:55:7b:9f:21:27:8b:a5:73:0e:f7:88:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:EE:EF:A9:73:92:1D:0C:2B:62:7C:3F:BD:B8:0F:81:1B:98:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:fa:93:fe:4e:9d:66:0e:a6:81:1e:59:02:6e:a7:2f:37:
         f9:13:8c:4e:3a:63:bc:cb:ae:9b:6c:85:aa:9e:29:3b:a1:37:
         7a:23:a8:f5:a1:58:8c:38:56:81:88:a5:6a:3e:03:f3:9a:7b:
         c7:35:3f:fb:98:1e:9f:f7:3e:ac:45:60:a9:8f:72:86:8f:45:
         80:b8:4d:a2:d3:bd:18:c7:3d:ac:91:c0:f5:f8:8c:64:07:08:
         dd:38:ce:e9:57:d7:12:81:50:34:35:64:b3:d4:6e:be:dc:d5:
         db:90:d6:d5:5c:ff:26:14:cb:c3:ee:d6:e7:34:d2:69:5b:03:
         b4:df:27:81:98:95:54:d2:c3:b8:39:40:96:b6:a8:ec:bd:23:
         76:e2:4c:fa:ec:ff:fc:25:0a:58:8f:55:cf:c6:5c:0e:7b:25:
         ee:cc:7f:df:96:b3:07:4e:2d:dc:25:f2:46:10:db:c9:d5:39:
         6f:da:10:08:28:e3:e0:52:40:90:7e:38:ff:84:74:1f:5c:9b:
         36:84:7e:eb:38:bb:be:fe:31:1f:4f:db:a9:f2:d0:66:14:e8:
         fe:57:8f:6f:7a:ba:9f:46:b7:8e:54:ec:ec:7a:4d:0f:08:80:
         00:79:73:f3:80:91:5c:41:29:8b:ea:1a:2e:35:05:81:68:2f:
         49:59:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:36 2026 by rpki-client