Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/319e4ff6-08d2-348a-9751-6bef549e7c25.roa
File:                     319e4ff6-08d2-348a-9751-6bef549e7c25.roa (raw, json)
Hash identifier:          BW7RPNqUZovjurUIfVL1NCuh5Ed/NqxKvtEG93StZMk=
Subject key identifier:   A2:0F:28:D8:D4:5B:A0:D7:ED:46:D2:EA:9B:85:9C:B8:08:2B:13:A9
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584E4AEF72FE005BBF02123D6D00
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/319e4ff6-08d2-348a-9751-6bef549e7c25.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     834
IP address blocks:        64.113.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:72:fe:00:5b:bf:02:12:3d:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=87cbe335-81c7-4105-9ece-76271491e3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b2:c5:4a:b0:58:a4:55:12:97:9a:6e:ec:05:
                    5f:71:61:e4:3f:1e:14:c6:55:64:1e:26:43:6c:b7:
                    df:57:dd:b3:53:48:61:5d:6c:60:fe:2f:9b:cf:e5:
                    0b:22:c0:fd:ca:c8:d7:6b:83:d0:df:de:13:24:9f:
                    70:67:8e:7b:28:ff:0f:8e:ec:f3:da:70:db:d4:00:
                    29:72:09:21:a5:09:19:28:6f:87:a2:9c:55:09:b9:
                    13:c8:a7:6f:5e:7c:12:09:b2:e9:b2:f8:ad:02:4d:
                    35:eb:72:27:18:0e:c8:d5:29:76:3e:11:2c:cd:09:
                    09:8c:00:fc:0e:e1:ed:73:fb:18:f4:9f:51:b6:4a:
                    10:93:f9:96:51:a1:9e:78:10:ed:12:dd:d8:42:a9:
                    08:bf:84:ea:ec:9b:1c:97:83:6c:fa:7d:11:35:e4:
                    63:0d:8b:0e:9c:e8:a8:05:44:60:c9:ab:db:18:3e:
                    8e:ca:70:c0:ef:a8:92:96:e4:43:ee:f9:75:79:d9:
                    95:cd:4e:b9:ac:04:ec:f4:5d:17:eb:75:68:fb:0e:
                    8c:7e:f2:0c:c7:a1:f6:38:5f:80:b4:f2:af:6f:de:
                    de:76:57:ee:a1:4e:82:b6:db:4f:76:e2:0f:4b:ab:
                    78:f4:52:94:bd:c8:c8:cb:2c:78:13:c1:47:b1:42:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0F:28:D8:D4:5B:A0:D7:ED:46:D2:EA:9B:85:9C:B8:08:2B:13:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/319e4ff6-08d2-348a-9751-6bef549e7c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:49:28:cb:91:71:0f:4c:45:a5:00:ed:d9:c6:45:6e:25:86:
         76:0f:4f:40:e6:a2:c6:56:83:ab:ae:d8:80:13:69:3f:6a:3c:
         a4:0d:57:5f:7d:c6:0f:c7:a9:8d:a1:d7:cd:1b:33:53:f1:30:
         b5:2c:07:bf:21:c9:92:75:a1:a4:6c:c2:5e:4e:3f:6d:41:73:
         b0:f7:d3:e3:55:ed:30:e6:cc:54:35:eb:64:ac:1e:ad:f2:21:
         cc:37:65:9c:b6:38:73:89:41:51:6b:02:a4:2f:c9:4e:9f:85:
         b3:6a:88:b9:3e:d6:78:63:35:c3:17:64:67:3c:40:bb:c0:41:
         77:bc:ba:5b:41:33:f6:55:99:f2:7f:fe:a1:39:a6:99:09:8f:
         e2:9b:a9:10:f3:77:db:0a:38:7f:2b:bd:dc:09:c7:ad:79:2b:
         c5:54:fa:90:bf:aa:fb:de:b4:88:d8:1a:d1:8f:c4:9c:30:d9:
         7e:d4:33:78:3f:1c:29:72:ba:14:d3:84:db:8b:9b:ae:21:d4:
         c7:c0:7c:74:bd:c8:c2:e2:7a:ff:4e:63:c9:38:7e:39:c4:54:
         6c:f2:2c:4f:0a:24:85:19:95:ae:9a:96:eb:61:53:30:91:dc:
         ef:3d:1d:19:66:31:de:ca:7a:90:33:e4:14:d1:26:69:ae:65:
         0b:39:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:26:10 2026 by rpki-client