Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1c44c3ac-997e-3856-b63e-2408fc8014b8.roa
File:                     1c44c3ac-997e-3856-b63e-2408fc8014b8.roa (raw, json)
Hash identifier:          CkfYRx8005Vq3mgM5FW9LOn3+bHnv4mJX6RVKIIX0WA=
Subject key identifier:   AF:4E:2B:C6:58:14:02:EF:08:D7:4D:F3:82:39:F9:B9:93:B4:6E:10
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584D91C00F8E0A172C7410FC2F80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1c44c3ac-997e-3856-b63e-2408fc8014b8.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     14618
IP address blocks:        64.99.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0f:8e:0a:17:2c:74:10:fc:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=2493f2a9-239a-4fd5-b9d4-c35d940990b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:45:97:4d:87:46:b2:25:d9:7b:50:12:03:
                    ca:5b:e6:26:b9:22:71:de:d5:62:27:ae:9a:da:f9:
                    6b:e2:63:28:c6:10:21:e2:c9:a1:fd:87:75:f3:c6:
                    22:92:5f:30:af:aa:01:01:92:ff:66:ed:ce:cb:84:
                    53:30:7c:f5:ee:1f:ff:ec:9e:cc:c2:82:80:8e:6d:
                    f9:fa:1d:b0:c8:61:31:43:dc:c3:c2:fd:7a:7c:7d:
                    6c:0c:ae:cf:c4:8e:b4:79:68:d2:b9:ec:ed:a1:0b:
                    71:c7:57:f3:0d:7c:5c:0b:e9:85:54:4b:79:24:09:
                    29:81:64:94:a7:ba:98:17:ba:92:28:7c:df:0d:ba:
                    5e:11:35:c2:4a:dd:75:24:7f:97:65:88:92:a2:23:
                    6e:f0:a4:db:3a:3c:5a:f2:8d:aa:bd:49:40:3b:11:
                    fb:3c:56:53:1b:fd:16:23:e0:3a:0f:a0:9d:8f:07:
                    87:4c:e4:2b:e8:b3:3a:58:5b:c0:7a:7e:59:a3:a4:
                    46:5f:6e:9a:d4:e7:89:38:76:91:b6:20:1d:25:d8:
                    d1:3c:60:f4:d8:9c:5b:90:98:b3:6a:19:03:e7:9b:
                    b9:cb:79:1e:39:9f:1d:e1:26:cf:ad:fb:25:eb:ca:
                    e7:4b:32:6d:4d:45:83:b7:69:5a:3f:cf:84:74:1a:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:2B:C6:58:14:02:EF:08:D7:4D:F3:82:39:F9:B9:93:B4:6E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1c44c3ac-997e-3856-b63e-2408fc8014b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:ac:93:93:c7:f6:0a:d7:0c:f1:ae:7d:e7:54:66:43:34:
         db:fd:ff:9c:27:e7:cb:68:fe:84:a1:46:80:00:11:4f:47:ed:
         84:13:83:5f:9f:15:e5:1d:cf:c9:c7:90:d3:a3:38:b7:7c:e2:
         b3:a9:a4:d5:0c:5c:4a:4b:8b:ff:3e:84:b5:03:7a:ba:83:e4:
         c5:63:22:f3:f8:5c:12:d8:72:1f:ef:c1:b3:02:6c:00:68:fa:
         ae:59:4f:d8:f2:a4:80:41:ae:23:fe:b0:d3:94:ea:d2:28:8d:
         d9:bc:08:76:ef:ce:40:7d:e2:80:b9:7f:b6:ea:7b:86:92:78:
         c6:ec:7a:06:51:03:f4:6e:b3:b8:41:a8:7b:40:d7:28:49:5a:
         7a:54:bc:ce:9e:85:07:08:59:ef:85:c6:1c:89:16:a6:ee:ff:
         cb:6a:a3:3f:60:d5:c2:73:f2:e0:a0:97:ab:69:93:34:9a:10:
         77:b9:3e:e4:85:45:6e:5c:d2:e5:89:ca:2b:90:76:b7:f9:b0:
         5d:98:85:b6:1e:66:0b:84:e1:af:96:57:49:a0:f1:5b:13:d8:
         34:fc:7c:87:4d:dd:41:c6:c4:e7:a4:13:aa:9a:cf:8f:62:2f:
         a8:a0:76:48:9e:c6:b5:29:7f:e5:1a:45:7b:5b:61:51:91:60:
         aa:ff:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:15:53 2026 by rpki-client