Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
File:                     a468cae4-4d9c-382f-8572-d90d29d27e8c.roa (raw, json)
Hash identifier:          qWtbWWj1he8PYMrNJwXXDg1gR0xrt4zezeLON1/OCvU=
Subject key identifier:   ED:20:7F:DD:71:CF:73:46:33:BA:3D:EA:D7:47:1E:09:90:25:A8:2C
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584D5234F971C9E7C1323806D783
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
Signing time:             Sat 28 Mar 2026 18:44:36 +0000
ROA not before:           Sat 28 Mar 2026 18:44:36 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     26277
IP address blocks:        64.235.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f9:71:c9:e7:c1:32:38:06:d7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Mar 28 18:44:36 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=161b6b1e-4b61-4391-9b9a-de1368baef59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:09:7d:bf:b9:5b:f3:8b:87:27:9e:39:6f:
                    a0:61:d0:65:25:f5:e1:d5:54:8a:18:8a:43:e0:03:
                    c6:f9:17:c6:d3:61:d3:42:55:72:4c:e8:ea:2a:66:
                    a3:2c:12:92:f6:81:11:67:a1:a1:77:69:a0:48:c5:
                    c7:6c:36:cb:77:f7:73:70:10:2e:1e:9f:c2:27:f0:
                    14:c2:56:8a:25:b0:39:c2:97:58:b4:87:8c:55:24:
                    6f:78:2d:70:7c:a7:a4:4d:a6:df:e0:53:a2:9a:a8:
                    99:e7:8c:d1:32:04:90:b9:8e:80:9b:03:38:25:df:
                    5b:9a:8b:97:1c:5b:08:17:47:82:54:9b:1d:d1:78:
                    f0:bd:a1:97:aa:d5:2a:68:c9:35:5d:4c:59:c6:d4:
                    a1:75:12:8f:15:d8:f3:c2:52:76:71:f9:c0:2f:3c:
                    56:dd:55:bb:33:43:77:bc:4c:6e:40:f3:d5:41:15:
                    53:fe:8c:a5:9d:0c:3b:9f:7f:00:08:09:16:3a:6e:
                    e7:9d:e5:2b:fb:74:da:b6:b9:3c:f9:56:61:45:28:
                    d9:28:a2:18:65:aa:85:dd:7c:f1:68:4d:e6:31:fe:
                    c9:5f:d0:50:25:df:8e:83:71:39:b5:21:50:aa:a7:
                    1f:70:6a:26:db:72:3f:9b:cc:e0:8a:7e:5c:75:28:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:20:7F:DD:71:CF:73:46:33:BA:3D:EA:D7:47:1E:09:90:25:A8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:46:1b:31:62:59:62:e0:29:e0:12:d8:2f:4b:47:50:c3:8d:
         7b:c9:4f:fe:d9:97:04:f1:f5:02:9d:58:7d:09:d3:57:6f:30:
         62:fd:45:9a:84:15:f9:e3:1b:d5:53:7f:eb:40:37:52:46:6c:
         f6:bd:75:e6:75:f0:05:f7:6a:ba:ca:a2:2d:a9:09:f5:94:a6:
         61:d4:de:30:24:44:b1:69:98:d4:49:7a:ef:12:2a:4a:71:bd:
         70:16:0c:b1:33:e3:15:15:8d:5e:b8:f8:a5:46:54:9e:c3:fa:
         d4:45:94:40:f9:62:0a:5c:41:d1:58:2c:7e:d7:b2:54:e4:18:
         2b:d2:03:3e:2c:22:f7:df:a3:70:93:7c:77:9d:61:65:85:f5:
         34:61:22:88:65:7a:ec:c3:39:53:af:d2:e3:26:5f:4c:ce:5d:
         50:d3:37:f1:9c:7b:6a:72:81:14:2b:f7:e0:46:3f:0c:37:ef:
         dd:bf:9e:6b:f9:52:c8:41:bf:61:94:34:fb:74:03:d0:0d:c7:
         fe:30:3c:32:1a:f8:38:66:61:9c:a2:18:2a:44:7a:70:bf:3e:
         54:60:69:47:9b:f9:19:4d:a4:3f:98:80:ee:ee:a0:d8:4c:53:
         8f:bd:b5:cb:f4:f7:f9:54:da:5e:6d:62:bc:eb:06:11:80:fd:
         cf:c2:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:31:23 2026 by rpki-client