Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/953d38eb-3d0a-3130-85f9-17221d411fac.roa
File:                     953d38eb-3d0a-3130-85f9-17221d411fac.roa (raw, json)
Hash identifier:          K/ZkdU1a22k8Z8qTRR0ZpJ4i4Y61oo7TK5Zx/+mMpxI=
Subject key identifier:   85:40:03:83:22:51:C8:78:CB:B2:42:DA:49:F1:A4:03:8F:9C:A8:9A
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584D1DE4939AE18E1CDA5D341A80
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/953d38eb-3d0a-3130-85f9-17221d411fac.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     834
IP address blocks:        64.113.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:93:9a:e1:8e:1c:da:5d:34:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=267866ab-383b-4c45-901b-9f65b1e6ae44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:f7:b8:af:fa:00:f1:b7:c9:b2:5e:f0:77:
                    b7:42:e2:56:bf:fb:52:e7:99:f4:01:f4:d0:45:3c:
                    03:16:39:0a:53:d1:32:cd:2c:ec:ab:28:e8:11:74:
                    12:f9:2d:84:ad:7b:79:26:e0:20:d2:a3:a3:e4:aa:
                    0d:d8:96:6d:3f:1d:b6:ec:5a:a7:c5:8c:d1:93:68:
                    3f:ef:4d:37:82:4b:e6:7b:90:12:51:f0:7a:da:30:
                    c7:a0:7b:c9:23:3b:0a:64:b6:40:3f:ec:3f:37:19:
                    9a:97:c1:ff:20:b1:42:1c:df:ec:3e:b0:ec:d2:a4:
                    1a:c8:ce:60:60:7a:fe:a4:28:36:bb:f6:f2:1d:51:
                    b8:6c:38:7b:fa:ed:7a:03:24:9b:82:36:04:3e:d8:
                    ac:a6:4b:61:b4:bc:77:fa:40:3d:8b:7d:fa:fe:78:
                    15:6c:e8:a7:fe:ca:ab:a3:d9:db:12:51:e2:96:31:
                    cd:7a:08:c3:43:1d:67:c1:6b:48:a4:3e:f0:fc:9f:
                    23:c3:63:32:da:8b:06:6d:a5:21:2d:c5:a2:b7:3c:
                    90:c1:ce:cd:ce:cd:16:0a:07:4c:c3:f8:c0:df:5d:
                    2f:d6:b7:f7:ef:21:56:ea:4f:ec:04:35:03:f2:91:
                    26:01:20:00:5d:4f:16:84:c1:38:28:a2:93:7e:07:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:03:83:22:51:C8:78:CB:B2:42:DA:49:F1:A4:03:8F:9C:A8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/953d38eb-3d0a-3130-85f9-17221d411fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:63:01:c6:97:4f:88:15:0f:b1:00:62:8a:14:13:0a:20:
         b4:39:bc:52:1e:f8:ad:e4:a6:66:1e:bc:19:00:09:c1:d1:9e:
         83:0e:e2:80:44:0d:0a:24:ab:96:f1:77:ff:1d:c3:1c:85:5e:
         80:ee:be:db:5e:78:91:a2:a2:57:09:07:5f:20:83:0a:26:8c:
         43:e4:00:26:af:b3:20:cc:36:99:f7:e8:bc:04:d8:d5:12:96:
         ed:34:a0:5e:e3:b4:4f:3e:26:cd:36:c7:4f:88:fd:d1:03:e2:
         31:0b:10:b4:5c:be:a4:e2:96:f8:fe:13:96:c3:78:46:d5:99:
         1a:20:b0:e8:2a:9f:52:3c:5f:b5:6c:9a:de:23:a5:3d:88:e9:
         c0:25:8c:bb:50:2a:c1:93:f4:9d:d2:44:68:b3:06:8f:e2:d3:
         da:6c:97:78:0d:4b:c4:b8:12:21:fa:de:8a:90:03:b7:eb:6f:
         97:04:0b:47:f2:ee:e7:ee:50:85:44:d4:b7:e0:9d:b7:85:41:
         12:38:10:c1:c9:b9:5d:c4:85:c9:38:ed:18:45:8c:80:9d:49:
         51:8c:ab:b1:21:fb:56:91:49:a0:ab:90:cb:01:61:02:c6:59:
         c2:d1:8a:46:b7:7b:b5:f5:c1:95:85:51:83:fc:c5:65:10:4f:
         8e:78:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:19:07 2026 by rpki-client