Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/5d2a64e0-c660-304d-978d-bfa20da7ba1b.roa
File:                     5d2a64e0-c660-304d-978d-bfa20da7ba1b.roa (raw, json)
Hash identifier:          9kiyPJvs2EfY9qumYdf8LgpvH3gR8VtwnxQmjIl9HNU=
Subject key identifier:   04:D8:3F:58:83:D6:D0:A4:80:11:DF:3C:B6:A0:88:E4:09:A8:E6:1B
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584E37648B7E5E22BCF02C87DA00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/5d2a64e0-c660-304d-978d-bfa20da7ba1b.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        64.99.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:8b:7e:5e:22:bc:f0:2c:87:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=ea625089-6440-46f9-9b9e-e184613b3f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:73:63:af:dc:6f:5c:25:2c:66:a1:7a:d0:
                    45:2c:c1:6a:72:60:eb:ef:1d:44:36:37:c2:ba:f5:
                    bb:cb:aa:a1:9b:18:91:63:ba:e7:e7:e6:a3:f0:99:
                    71:dd:88:08:88:41:c0:b3:02:ba:79:83:fd:83:77:
                    1f:bf:00:dc:07:fe:83:66:20:8e:a0:85:6f:cd:7f:
                    8a:46:c2:7b:8d:a9:84:0e:0a:8b:56:37:83:22:3e:
                    ce:9e:9f:81:b1:56:86:04:e1:c7:a9:4a:fd:4a:f0:
                    8c:65:34:8a:4a:8b:b6:2d:be:39:c5:d6:65:2f:8b:
                    b9:96:5e:d9:35:eb:07:e7:63:c2:dc:73:35:d4:7a:
                    19:de:e5:09:8c:fe:77:51:6b:be:37:bd:2f:27:97:
                    2b:db:4f:2a:b4:a1:53:61:45:45:f9:9f:7e:8f:51:
                    36:b3:c5:ae:66:4f:ea:21:c0:72:4c:76:c0:16:e6:
                    ce:c5:b4:15:74:c1:48:9b:aa:5d:f5:e1:af:59:20:
                    6b:50:73:fd:e6:6a:ae:42:2c:c6:45:42:62:45:1c:
                    bf:80:d9:0f:fd:5c:d4:62:84:c6:a1:b4:f0:73:dc:
                    8a:32:69:10:4d:87:ee:80:e4:56:a3:76:da:87:28:
                    1a:16:07:f5:45:c5:73:be:d7:75:a9:d9:94:7f:4e:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:3F:58:83:D6:D0:A4:80:11:DF:3C:B6:A0:88:E4:09:A8:E6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/5d2a64e0-c660-304d-978d-bfa20da7ba1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:18:f1:c6:51:46:3a:17:82:60:44:89:76:11:f0:7c:64:
         47:a4:0f:1a:1f:35:43:19:14:04:9f:d0:95:fa:45:d2:ac:56:
         ff:2c:4b:76:61:66:f4:83:c6:53:24:6d:b6:bd:87:d8:27:e5:
         80:d5:00:34:77:f6:be:2d:64:e4:17:22:26:0d:ba:bf:a0:7f:
         46:c0:07:60:ef:48:70:78:6a:91:15:ed:ed:70:eb:fa:e4:cb:
         1c:46:92:30:e0:51:ce:a0:f8:55:30:18:f5:12:e2:3f:a9:d9:
         c8:1e:14:57:d5:a4:7a:54:b6:5f:4e:83:55:8f:a7:74:27:4c:
         5a:e6:6e:df:f2:77:f8:1f:5e:d9:49:56:4a:9e:f1:0e:0b:cb:
         e2:f3:6e:8e:b7:dc:52:f6:54:33:a1:b4:e9:91:2e:11:ad:2b:
         f5:65:21:8f:aa:41:7a:c0:dc:70:91:8a:43:06:31:12:34:da:
         e6:e1:e5:ca:2b:d3:ee:14:91:44:05:3d:84:50:ce:66:32:b1:
         a5:2d:79:98:31:df:5b:1c:52:ac:f8:3d:fc:91:4c:05:32:ca:
         41:1f:cc:12:93:f2:5d:2e:bb:e5:eb:66:c8:59:b1:30:37:77:
         76:d5:6d:3f:3d:a4:38:b8:96:72:84:a0:88:fd:2a:af:6e:ff:
         67:60:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 23:22:12 2026 by rpki-client