Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa
File:                     a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa (raw, json)
Hash identifier:          KK4L8tLcpHHAAbeONqALaBzrqXSPbvD+nkl4PD/ZF+w=
Subject key identifier:   4C:00:63:AF:1A:CD:7A:B5:A2:78:FF:44:41:9C:BA:BF:02:F0:EE:CF
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584D237A2F2D1C0F7BAD32588480
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     212609
IP address blocks:        64.40.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2f:2d:1c:0f:7b:ad:32:58:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=5325fdaf-c874-48d2-acf2-aafa0bce51f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:7d:60:3b:e7:87:48:da:b7:7c:9e:f3:22:
                    26:77:03:cf:fd:84:1e:74:37:de:f1:cd:7a:26:03:
                    24:f1:d4:77:27:35:2c:b2:85:4e:9c:d2:f3:37:09:
                    f2:ce:ae:e1:4e:58:c7:bf:e7:2e:ba:ef:e2:45:60:
                    45:1b:87:2f:b8:0f:fc:af:77:81:07:02:66:b8:15:
                    c2:04:d2:e6:13:92:1a:b9:c3:d5:1f:1e:1b:32:be:
                    74:7b:18:f4:de:d4:75:70:04:54:ce:f8:37:27:c0:
                    50:c8:c6:bf:68:55:34:83:9d:e9:50:e1:17:71:a4:
                    e7:53:35:17:9d:d7:60:e2:56:38:12:ce:39:5f:87:
                    bc:fa:94:e7:18:b9:2a:cb:de:20:6d:48:6e:80:49:
                    62:03:da:8b:fd:8b:d3:95:81:0d:f0:94:05:7d:e3:
                    ba:b0:7a:45:01:b9:5a:14:7f:df:c7:a7:7d:11:81:
                    5a:90:5d:cb:de:a6:90:cb:59:2a:2d:4f:c5:73:bc:
                    74:a2:e8:5a:7f:da:45:b6:9a:5a:ba:24:11:04:c8:
                    a7:41:48:41:9f:ca:3e:d1:3d:a8:ea:7f:8d:dc:95:
                    d8:7b:ea:cc:31:d4:bc:7d:25:81:86:7c:3f:8f:6f:
                    94:4e:ee:5c:53:0f:0e:c5:e4:06:fe:f2:53:07:ea:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:00:63:AF:1A:CD:7A:B5:A2:78:FF:44:41:9C:BA:BF:02:F0:EE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:61:83:fd:08:b8:68:99:99:8e:4d:50:99:32:4f:31:10:88:
         a4:2c:91:33:4a:61:69:bb:19:cc:8a:10:58:11:0d:f9:8c:f1:
         11:23:62:f2:ed:75:3d:be:fc:f1:63:dc:c3:c1:b2:3f:9a:c9:
         ac:89:74:96:66:32:ee:80:cb:cd:6e:a0:25:67:93:6c:fb:72:
         fd:3b:18:04:b1:52:ac:d5:ce:27:ab:9b:ee:52:45:7a:b8:c3:
         5c:b8:98:3b:5a:38:48:c3:c1:45:a2:80:34:82:f3:b0:de:6d:
         7e:75:4a:71:25:16:c6:e7:a7:34:96:0e:ec:8c:f7:4d:87:82:
         c1:1d:28:eb:fb:90:f5:19:5d:57:ae:bc:cc:3b:83:e8:cb:a9:
         c7:63:d3:01:41:c8:a0:49:fe:b1:98:7d:07:0e:18:8f:0b:6d:
         21:2d:42:8b:68:17:89:50:fa:52:50:c8:d5:3a:b7:3c:e7:60:
         28:9a:a1:f7:ab:5c:71:44:69:e1:e7:61:e4:76:b6:48:0b:37:
         30:fd:21:d4:b3:12:5d:29:b0:4c:f2:dd:d5:41:f9:59:88:b1:
         ef:27:1c:1c:2b:eb:41:fc:cc:55:57:cb:84:8b:f2:b6:05:1b:
         a8:88:86:9f:81:85:f8:83:5b:85:ed:12:d9:07:c1:f6:11:d2:
         e3:99:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 10:54:12 2026 by rpki-client