Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/9b90701a-5999-3de0-a2d3-457a8f170ca5.roa
File:                     9b90701a-5999-3de0-a2d3-457a8f170ca5.roa (raw, json)
Hash identifier:          z6jRhljRPy/+0Vvy4qb/Q1MItD9wsmgIZD7U3tE9fkk=
Subject key identifier:   59:2B:44:2A:8D:0F:68:80:59:E7:5B:39:BC:FF:22:4E:C5:C4:6F:CB
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584E6E335A5BBA976CF4953AE7E0
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/9b90701a-5999-3de0-a2d3-457a8f170ca5.roa
Signing time:             Wed 08 Jul 2026 12:10:54 +0000
ROA not before:           Wed 08 Jul 2026 12:10:54 +0000
ROA not after:            Tue 06 Oct 2026 12:10:54 +0000
asID:                     40038
IP address blocks:        64.107.8.0/21 maxlen: 21
                          64.107.9.0/24 maxlen: 24
                          64.107.10.0/24 maxlen: 24
                          64.107.11.0/24 maxlen: 24
                          64.107.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:33:5a:5b:ba:97:6c:f4:95:3a:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Jul  8 12:10:54 2026 GMT
            Not After : Oct  6 12:10:54 2026 GMT
        Subject: CN=7def2968-c25d-443f-8440-ef672a82c482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:53:1f:ef:65:9c:0b:2b:93:c6:ee:70:19:5d:
                    ea:f4:c9:4b:70:9b:0e:a1:96:b0:56:ce:60:9d:52:
                    66:2c:0b:60:f1:c3:b9:ad:97:21:3b:5a:38:0a:46:
                    1d:ae:60:ac:c0:7a:dc:d7:a1:59:97:ca:97:c6:d4:
                    b9:3b:5d:bb:f1:9b:0c:18:c6:1d:80:a7:42:e0:8c:
                    98:dc:dc:6f:ee:09:10:ce:e7:a6:a8:79:95:e1:5a:
                    fe:59:5c:f5:48:1a:2b:91:ab:d0:1c:60:21:8f:7b:
                    27:db:ec:65:f1:3e:b0:a7:63:48:bd:14:99:d9:cd:
                    3f:fb:81:08:32:03:0f:86:ad:b5:46:f2:f2:10:89:
                    68:39:39:22:01:c6:ef:a9:82:19:81:b0:af:d6:ec:
                    16:55:aa:8c:64:ff:b6:01:2d:da:a7:3e:85:82:39:
                    71:f7:ca:5d:25:2a:98:57:c3:38:e2:ae:ce:82:bd:
                    84:f8:2d:f9:e4:42:c2:cf:70:e2:93:34:da:8f:61:
                    92:3c:37:29:35:e8:f7:c3:be:fa:9a:a1:f4:2d:e1:
                    fb:05:22:fc:d7:97:44:30:86:13:32:d3:b7:d0:24:
                    35:8d:41:34:0e:c6:4f:b8:58:e4:5c:92:56:14:97:
                    4b:e2:ee:09:65:ed:1a:27:8d:d8:29:6c:11:73:58:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2B:44:2A:8D:0F:68:80:59:E7:5B:39:BC:FF:22:4E:C5:C4:6F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/9b90701a-5999-3de0-a2d3-457a8f170ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.107.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:db:b0:98:89:55:6a:0e:a2:0a:bd:31:ac:32:19:ca:f2:6a:
         75:89:cd:e7:33:d9:a8:6a:23:f0:37:22:82:41:40:38:cb:56:
         94:42:4f:2e:65:c7:96:5d:55:f7:f3:e2:01:7c:d2:1f:b7:3e:
         28:a2:fc:45:ae:e0:ee:2b:b0:39:bf:fb:93:d9:27:72:64:51:
         c2:eb:1c:e1:29:85:54:1f:61:95:8a:92:4f:83:fc:18:1a:3d:
         7e:49:34:df:a8:4c:2a:9e:72:c1:72:5c:f1:8e:01:75:bd:3a:
         08:5f:2f:87:f0:82:56:bc:54:53:88:fd:f8:09:e9:07:a7:d8:
         3e:fd:5f:69:07:94:bc:20:2d:76:a6:b8:55:00:71:ff:86:c4:
         c2:49:13:9c:64:57:0f:2f:f9:d7:e8:44:0f:87:05:11:8d:57:
         d0:80:a4:79:cd:e9:1b:3c:85:d1:af:4a:59:64:10:6e:a3:d9:
         db:cf:9f:31:0a:6c:26:ac:fd:26:f5:9c:0e:4d:68:ef:11:ae:
         40:f6:12:fe:20:89:45:67:79:f7:64:89:fb:d2:8d:86:96:5d:
         91:94:f9:fd:55:fd:2f:e0:10:a7:59:9d:e0:81:3f:8f:a2:d5:
         90:fb:3a:69:29:bb:51:4a:6d:02:b4:0c:98:3b:13:8b:11:f1:
         a2:ef:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:16:13 2026 by rpki-client