Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/dd6ee553-32c1-334f-8156-64c37a894a34.roa
File:                     dd6ee553-32c1-334f-8156-64c37a894a34.roa (raw, json)
Hash identifier:          BZF8FyS4MDKNZxWH2/lTL9Q5yitLrbmoMZ8aHwGIQ3k=
Subject key identifier:   3E:56:8D:69:27:53:88:FC:8A:85:2B:D1:BC:51:2D:97:5A:01:6C:49
Certificate issuer:       /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
Certificate serial:       010D0C9F4328584E2D9F1432D3F1EEE98C68A6A0
Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/dd6ee553-32c1-334f-8156-64c37a894a34.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     40555
IP address blocks:        208.87.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:14:32:d3:f1:ee:e9:8c:68:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ba52c396-c690-4997-8ba7-0828cb21eecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:85:f9:f3:d6:dc:78:74:2e:aa:7b:d5:38:
                    fb:27:dc:f3:75:4a:93:cf:2f:a0:4e:0a:af:d4:7b:
                    28:98:c5:97:eb:87:96:7c:53:da:d4:5f:b0:28:b5:
                    e8:09:bc:02:9f:8d:11:1f:43:53:55:50:78:e4:6c:
                    04:33:a5:71:62:44:36:0c:d0:86:91:d0:cd:a3:37:
                    28:eb:df:69:80:f7:d8:b6:ed:1e:44:54:73:9a:32:
                    1f:f0:a6:4e:12:bd:43:c8:af:5d:1c:64:34:2e:4a:
                    f7:33:f0:05:70:e9:3e:14:96:28:d5:d2:b5:b3:09:
                    be:21:94:48:60:e7:39:ee:ce:a9:a3:4a:a4:8d:7d:
                    97:b0:16:11:0c:fd:e9:de:59:9c:28:4f:c5:ee:08:
                    49:f3:4f:ee:d7:67:d2:d0:9b:af:9b:da:fa:fa:2b:
                    e9:c4:b0:82:1a:3f:1b:9a:8a:60:16:7f:2d:7a:f8:
                    c4:07:16:6e:45:7d:c4:82:22:ba:72:38:b4:43:e0:
                    c5:d6:66:94:17:20:32:9b:3b:e6:2e:9c:e6:50:24:
                    10:e7:87:0c:6b:62:df:0d:cd:21:3d:23:83:9a:73:
                    87:fc:31:06:7c:16:e7:97:02:b3:f2:52:e5:c2:bc:
                    e1:d8:f9:90:7e:ad:99:98:2d:9a:a5:4d:07:0f:1a:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:56:8D:69:27:53:88:FC:8A:85:2B:D1:BC:51:2D:97:5A:01:6C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/dd6ee553-32c1-334f-8156-64c37a894a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl

            X509v3 Authority Key Identifier:
                keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:44:85:8d:45:c6:fb:75:05:72:b6:8b:84:5e:c4:cf:18:
         93:13:ba:6e:5e:bb:d0:52:2e:67:ad:0b:31:5a:c4:ee:10:02:
         28:70:bc:a9:3e:72:e8:37:c9:6d:16:45:58:de:e2:4d:48:d2:
         62:be:da:3a:63:c0:b8:4d:cc:85:bd:fa:93:3d:23:d3:27:0e:
         01:56:cc:8a:eb:38:02:59:ce:81:3e:70:7e:bb:4b:e7:d1:24:
         c0:48:f2:e9:01:16:e8:4d:b1:10:d3:45:4e:6e:02:ab:53:a1:
         26:a5:e4:3f:de:6a:bf:3b:65:58:ef:a9:6b:75:eb:07:b8:16:
         43:a3:b8:c0:1e:d8:90:0d:ff:d3:f4:37:7d:f8:ab:60:d2:ba:
         ea:94:49:bf:24:d7:14:f8:01:77:ae:f3:e9:e6:42:c1:56:a0:
         7e:20:2c:d2:3c:5e:85:6c:9a:9f:a5:a0:27:ab:ca:ff:94:1f:
         45:b4:ee:d1:a2:a3:a6:09:90:1d:62:a7:11:9b:3b:f0:04:da:
         bd:20:c9:4c:18:23:d9:65:ff:3e:fb:83:9e:10:ea:1c:d9:c5:
         86:08:0f:bf:ea:c4:a0:10:05:d4:fe:f3:bd:e7:b4:31:d7:13:
         93:2f:f2:1f:c2:3e:7a:b0:ef:9d:77:1f:c5:f7:ba:cf:99:a5:
         88:08:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 23:03:49 2026 by rpki-client