Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa
File:                     cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa (raw, json)
Hash identifier:          HqQLQQbTTlDnp7zYXRtRZSFfi5EDhTaiCaYByXFzSEE=
Subject key identifier:   6E:24:3F:7B:F2:1E:B0:58:95:B3:25:A4:44:DE:37:55:9D:C0:AD:76
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584EAE819E7481D95F3820FAE480
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     11090
IP address blocks:        64.4.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:9e:74:81:d9:5f:38:20:fa:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=7b495327-a1f3-4660-902b-9ebcbeae2fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:3f:ff:ca:f0:a1:52:aa:1f:75:92:cd:a0:
                    3d:be:26:40:46:ef:1d:7b:45:30:fb:ef:eb:61:16:
                    1f:78:15:2d:d4:6c:5f:3c:0e:d1:31:0f:09:3f:71:
                    0e:ee:fd:4b:d2:f7:9f:1a:72:ad:71:ea:b4:8d:f5:
                    4b:e2:26:ae:e7:02:ac:24:d2:45:c2:9b:ff:24:7f:
                    0d:aa:2d:78:c2:62:c8:6b:33:e9:06:79:7e:01:60:
                    69:87:92:9f:38:a4:7e:23:b2:dd:e4:86:2b:10:bd:
                    02:65:c5:6f:ae:59:0a:bd:e3:3e:1b:ee:5e:66:ec:
                    af:78:ee:3e:85:29:1d:b0:0d:76:85:11:4f:8d:c5:
                    e0:92:0a:9d:74:35:49:f3:e7:4a:be:c3:b7:91:9a:
                    c6:4a:20:8c:c9:20:9f:bb:8a:0e:ea:38:b0:17:4d:
                    eb:e0:b9:62:5e:b7:98:e3:13:92:01:f1:2b:d2:dd:
                    7f:24:7e:2a:fd:4e:65:90:78:d6:e7:2d:96:13:29:
                    07:6a:ed:50:75:54:dc:fa:21:96:7e:d1:e5:e9:41:
                    32:85:88:91:6a:91:12:9d:1d:89:cf:a5:fd:53:34:
                    bb:ce:6b:ac:19:18:e6:fe:41:1a:01:d2:95:04:6a:
                    a9:6c:00:90:30:a0:22:72:59:10:73:76:01:5f:e3:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:3F:7B:F2:1E:B0:58:95:B3:25:A4:44:DE:37:55:9D:C0:AD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/cb7308f9-7051-33bc-ad9f-9ff79b88b811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:a1:b3:ea:70:55:75:1b:90:e1:64:c6:3c:45:05:f4:e5:
         60:60:4e:6e:18:e0:ce:4b:d5:b4:b3:16:12:a6:b9:50:12:88:
         7f:05:08:33:0a:f1:78:96:ca:7a:ce:9e:b7:cd:18:a3:3b:b3:
         bd:c9:de:8a:5b:f3:e3:c1:24:af:1f:f8:aa:b8:a2:e1:48:15:
         a7:1a:06:fb:ae:2e:55:fb:82:b9:d6:00:41:16:81:c5:48:ac:
         f6:9d:d1:6f:2a:ba:ea:21:70:45:59:f6:74:cc:58:1a:44:12:
         5b:73:29:a6:f4:f8:75:bc:3f:78:b6:d4:e9:fa:7b:90:9c:a3:
         1d:8d:83:af:49:a6:5c:2a:89:ab:ef:d8:32:e2:8a:4a:84:c1:
         f8:3f:a7:e6:5a:25:ee:34:87:eb:23:c3:1f:9f:f4:ed:1d:c8:
         50:db:ad:d3:b4:7a:17:0d:63:06:72:24:8a:c0:ea:43:b1:9f:
         4f:c1:6f:9f:43:6a:d2:5c:43:17:bd:eb:12:f2:b3:77:ae:3a:
         51:a1:34:a1:de:61:58:fd:50:ea:6b:f4:37:65:9e:36:07:86:
         15:6c:76:49:80:5e:dc:ac:5d:60:74:9f:d5:f7:bc:0f:09:9f:
         d6:8b:47:ce:ec:c2:33:64:9d:36:5c:ed:91:1d:4f:70:d4:74:
         ca:4d:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:57:44 2026 by rpki-client