Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
File:                     0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json)
Hash identifier:          jtXxshUXFyXhczl4uej4/LmhXhIgvp6k6pLLjVCQh9g=
Subject key identifier:   00:84:84:D8:C9:02:06:70:8A:81:2D:BF:D9:D7:BB:E7:64:CC:3C:89
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584E31CF0B1390A6189A72011780
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     24439
IP address blocks:        64.86.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:0b:13:90:a6:18:9a:72:01:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=5ec1e32a-cf65-4ca5-91fe-12b0d03a3d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:0e:9d:c7:bb:61:9d:74:4f:2b:7e:12:a2:
                    0a:74:44:70:49:cf:5f:15:11:44:36:69:fd:50:5d:
                    7f:70:bf:e3:b3:96:b8:25:d4:65:9b:4a:ab:fe:e5:
                    a6:df:c8:8e:fd:a2:55:ba:2a:00:30:48:bb:db:b5:
                    f9:90:b4:bc:a8:92:eb:1a:0f:7c:e9:a2:6b:18:18:
                    03:3b:c3:62:af:bf:6e:16:ff:b3:a8:50:ff:49:62:
                    1b:c2:ec:c0:d1:66:44:32:ce:64:d1:c6:f6:94:cb:
                    94:7b:7d:11:1a:b8:d7:d0:79:42:3b:18:b5:76:77:
                    74:ff:c6:b3:d5:1c:ee:bd:da:ae:5f:88:dd:a4:69:
                    4d:b2:ed:7e:c1:10:97:24:1e:96:66:47:9e:ec:56:
                    af:0a:9c:74:7f:67:a0:02:06:22:9b:9a:6f:4a:e3:
                    c8:1b:55:ec:99:d8:72:fa:38:86:c3:61:de:f5:14:
                    a2:80:89:e5:08:0c:9b:ca:8e:bd:66:58:81:62:9d:
                    59:98:2e:31:94:ca:4b:ec:e7:5c:a4:6d:47:d1:71:
                    2a:be:9e:c9:dc:05:d3:e5:1f:02:0f:ab:8b:fc:ee:
                    99:51:df:86:12:ec:2f:34:23:0a:b2:ea:93:fe:fa:
                    f7:95:13:43:c4:cf:a8:8f:cc:81:41:1a:a7:1b:bc:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:84:84:D8:C9:02:06:70:8A:81:2D:BF:D9:D7:BB:E7:64:CC:3C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:bc:95:c0:3e:00:5d:73:35:d3:53:f6:35:b7:75:1a:6c:
         cf:e8:79:e0:70:b6:16:f8:da:17:c0:01:9b:52:45:35:45:d5:
         30:a6:e4:c5:47:4f:5f:8c:25:d5:4e:8a:27:03:0c:cf:74:c5:
         52:51:9a:75:b3:47:df:c8:a7:d5:14:40:6b:a2:2a:46:6c:ef:
         07:a7:56:71:df:40:9f:07:33:6e:9a:f1:53:94:95:63:73:46:
         ff:4b:08:e2:6a:22:e3:f3:ab:af:5b:31:e9:f9:af:cc:79:ca:
         65:7a:01:28:ed:80:05:6d:bb:be:3c:61:a4:7e:69:d0:5e:46:
         bd:bb:83:6e:ed:5a:5a:b5:f0:ff:8c:f3:76:88:eb:8e:59:37:
         12:56:ac:4f:e0:d6:49:c4:15:d6:80:78:3d:f1:b1:38:55:d0:
         33:ca:79:02:d5:96:e0:62:05:9f:42:2a:fe:07:09:4c:20:c5:
         c5:4b:1c:30:8e:8f:98:ee:ae:0c:79:2f:9d:c6:11:e9:f8:0c:
         12:df:40:f8:6f:02:9e:c3:57:02:34:cf:16:ca:2d:50:50:6a:
         65:1d:39:c7:ef:13:57:12:d0:19:86:90:dc:da:ce:02:2f:ee:
         cf:d6:b5:aa:d1:bb:47:5b:f1:6f:b9:e2:da:ea:bf:b5:7a:fb:
         3d:eb:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 03:40:28 2026 by rpki-client