Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
File:                     0327aa02-52d2-3d16-9336-4e4047d5dc35.roa (raw, json)
Hash identifier:          pJqeKPD9+lMnK54Wb7FcoSlB2tcwKOHau6Ko3mlKAs4=
Subject key identifier:   6D:C2:F6:FF:40:E3:1B:51:32:6A:61:74:00:D1:41:30:48:41:50:D8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E376477A76DB68F60D82DE320
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     262287
IP address blocks:        64.64.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:77:a7:6d:b6:8f:60:d8:2d:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=cf6fb9fd-57ee-4cf7-b758-5dbac8ae471c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3c:10:b0:76:22:1e:53:7e:bc:82:07:1d:06:
                    e3:a8:ea:1d:f0:32:05:c6:08:ff:cb:03:b1:9d:0f:
                    98:07:79:a5:42:b4:b8:3e:73:e3:d6:1d:1a:0b:fd:
                    7e:d1:e6:23:79:fe:72:88:05:93:0a:98:22:e7:de:
                    29:87:9e:12:c1:10:3d:d0:f8:75:c5:ab:1f:ee:c1:
                    5b:11:04:2d:d4:46:69:7a:9e:c5:7a:15:78:f5:5a:
                    53:94:38:6c:5d:3a:fc:9e:22:0d:00:c2:22:9c:8b:
                    07:f2:05:70:7c:b0:2d:58:0b:24:8e:98:33:19:37:
                    92:c8:c9:12:ec:7c:95:98:3e:9b:c9:45:20:e2:0d:
                    db:18:ba:55:06:57:a7:8f:eb:fd:58:6b:34:07:26:
                    39:00:e7:f7:b5:1b:cf:e1:1d:fa:35:c3:02:3e:41:
                    72:26:1c:87:ed:ba:2d:93:a8:86:6b:6e:a7:ed:f2:
                    04:2e:df:86:5a:5a:ea:d7:f3:70:1d:98:4e:19:19:
                    8a:f6:46:70:6c:28:63:2d:29:d0:fc:11:f3:01:42:
                    59:c3:ea:58:35:45:4e:61:a6:58:0c:de:c9:56:cf:
                    b0:aa:21:86:23:1e:76:64:1c:65:b1:9b:61:38:62:
                    b5:9f:20:39:2b:fd:1d:c9:b3:a0:f0:d0:00:cb:c0:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:F6:FF:40:E3:1B:51:32:6A:61:74:00:D1:41:30:48:41:50:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:1c:24:61:eb:26:7e:9d:e6:d4:1a:78:81:ed:e4:88:d7:
         5c:e4:f6:5c:e9:89:7f:4f:d0:4b:5a:2a:ff:fc:19:6f:ae:82:
         60:24:1b:23:5d:af:bf:2b:30:27:76:1d:48:44:9e:b8:28:64:
         4f:2b:4b:3b:56:48:5c:39:f2:bb:e2:09:bf:67:57:e3:30:90:
         4f:3f:b1:01:0e:6a:5d:db:27:83:50:f0:42:a4:2d:20:29:18:
         96:69:e7:dd:04:7d:22:f5:c3:f9:74:21:ad:c0:f1:5b:a3:f0:
         57:37:ae:e1:51:29:2b:ae:0a:5d:e2:d5:5d:6f:c3:f8:31:ac:
         53:d0:26:c6:9e:f1:13:46:e0:f0:95:d3:7c:91:42:b6:e7:37:
         cf:31:6b:18:e6:70:e5:05:fa:ce:2c:ee:00:4f:18:4f:33:d2:
         d0:13:f8:d1:d0:20:8f:c6:77:5a:5d:bf:26:f8:bb:8e:8f:c3:
         44:1b:1e:42:b9:f8:07:30:4f:de:02:40:a5:6a:81:da:6a:2e:
         4a:87:e5:13:3b:df:35:09:35:4e:04:a0:9c:5d:9c:0f:59:2c:
         16:e0:8a:b5:ef:06:10:19:f7:f4:da:51:3f:08:37:bf:77:37:
         17:b7:7f:68:a7:70:48:ce:80:0e:0c:92:c9:a6:32:66:ce:5f:
         ab:c6:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:49:07 2026 by rpki-client