Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa
File:                     6b8157d7-528a-355c-8d23-f69435bf6d41.roa (raw, json)
Hash identifier:          cr+IqsF2bdGn93g9g6Tlz0sgBAm+6QC6mH+4OQ+w+pY=
Subject key identifier:   E5:97:B5:0F:A8:1B:A3:3D:0F:35:DE:30:B8:4D:05:CB:15:45:9E:A0
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D8EF572AEEC42CB8A0832F380
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     398391
IP address blocks:        64.226.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:72:ae:ec:42:cb:8a:08:32:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f785fc55-0302-42f6-b2f3-e8b623cd2231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:d4:4d:ee:c7:47:bf:9d:3e:1c:4a:7f:7f:
                    52:e9:42:d5:cd:0d:b6:c9:41:75:17:5e:7a:8e:d0:
                    c6:15:51:50:90:c8:d4:8b:58:85:39:0f:1e:18:04:
                    bc:ca:e5:e0:5a:c4:f6:b7:d3:51:fa:26:06:fa:05:
                    c7:c1:60:a2:53:db:db:d1:6a:b1:52:67:c3:e4:68:
                    6f:a1:84:b2:aa:78:96:65:56:f7:47:4a:0d:fe:03:
                    be:8c:72:05:70:26:74:fc:18:af:55:c7:60:70:75:
                    c7:f3:ca:2a:c7:96:ec:80:1d:8f:bb:9c:78:14:56:
                    c7:20:f3:cd:fe:13:56:b5:96:64:c3:27:27:d6:4f:
                    3c:8e:c9:92:4e:4b:4c:0c:cd:69:2d:ab:9f:54:8d:
                    59:cd:22:ba:46:9d:98:26:43:ff:37:fc:0d:33:ee:
                    36:d5:7f:dc:9f:01:1b:37:c4:bf:c3:04:a9:ff:11:
                    3d:05:54:7b:5d:88:9e:74:e6:52:f8:a0:fa:2b:18:
                    76:f3:9b:58:9c:d4:14:c8:c4:4d:fa:0a:21:5d:69:
                    43:60:03:47:2a:03:c3:6d:d4:17:bb:f9:c6:09:f3:
                    d1:8c:2d:55:53:c9:7e:13:8a:a3:38:14:5e:15:df:
                    e6:c5:38:d0:bd:7f:6c:5c:09:81:6e:28:25:bf:c8:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:97:B5:0F:A8:1B:A3:3D:0F:35:DE:30:B8:4D:05:CB:15:45:9E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/6b8157d7-528a-355c-8d23-f69435bf6d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:fa:00:f2:83:64:77:19:22:fa:70:bf:52:f3:7d:97:f0:
         e3:04:b6:e1:88:65:93:3d:fc:0d:c2:d1:ca:f2:8a:39:fb:72:
         e6:23:fd:98:83:65:ec:34:6d:6d:70:c5:fb:1b:12:95:51:1a:
         e0:eb:c6:1a:3d:f8:80:23:08:1a:f8:79:11:43:4a:86:95:6b:
         de:5f:6b:dd:9b:8b:77:b3:5a:36:ea:e6:d4:10:ab:25:51:0a:
         e5:0b:39:55:21:97:d5:2c:ef:b1:6f:90:73:74:0c:45:7d:37:
         16:b0:06:d3:2e:a9:15:cf:7e:0a:6e:9f:3b:48:a0:ca:b2:31:
         88:d8:eb:26:27:b0:ac:3d:31:33:57:86:67:b9:12:2b:b8:35:
         aa:07:75:52:bd:d5:f3:39:9b:7f:d1:6b:40:f2:bf:b1:b1:92:
         7f:bd:b0:52:bd:a4:1d:5a:b8:2b:0b:2f:81:b2:ee:1d:e2:45:
         e8:ba:14:a1:47:cb:a3:ed:09:bf:e4:b7:76:f6:30:23:96:f7:
         e2:f2:fe:c7:51:9e:e0:b3:3a:12:4e:54:e0:7d:5c:45:ee:b5:
         e9:36:e7:50:4f:6e:a4:3b:d0:2c:18:cd:0a:ac:42:1b:c7:25:
         fb:61:3b:d8:4f:77:90:54:0b:6e:c2:e3:49:2b:7b:d7:34:13:
         1c:92:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:26 2026 by rpki-client