Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa
File:                     eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa (raw, json)
Hash identifier:          hxvtwv0TQ+Ued0Uhso1SoZHjuQswJc5dcYmtnnAQjXE=
Subject key identifier:   BF:E7:B9:E3:5A:B4:8D:BF:5B:B8:17:6B:EE:87:C5:7D:AE:A4:00:34
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584DE84B3DAD59FE737BBC0F4380
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     8075
IP address blocks:        64.18.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3d:ad:59:fe:73:7b:bc:0f:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=72ddff78-6f83-4368-b2aa-80a110d19124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:87:fa:28:8d:f5:96:60:b8:b4:88:0c:fd:
                    6b:af:c0:44:a8:42:35:f0:3b:d7:cc:0f:41:0f:2d:
                    23:9a:29:bb:c0:b8:05:ec:03:2f:16:66:81:5a:9a:
                    13:3a:b1:93:4d:d5:fb:c7:fe:3e:86:77:25:a1:48:
                    f8:4f:e7:88:b2:9f:c9:68:66:11:f3:46:86:4f:5d:
                    3f:ea:4d:68:16:6f:4b:a6:c8:ac:41:0d:60:2c:38:
                    18:a7:fa:11:2b:d5:1f:2d:0a:5c:29:46:99:cb:e9:
                    93:d5:53:8b:9b:3a:47:20:48:7c:d3:f7:e4:fc:5e:
                    5d:3d:30:e2:a9:27:36:88:77:1f:83:ba:de:69:c6:
                    34:a4:09:e8:51:6c:53:cf:60:60:66:41:83:2d:fe:
                    80:8f:aa:bf:60:8f:5f:68:ea:47:6d:fd:23:67:9e:
                    bf:4d:c2:cb:a8:56:ff:06:d4:50:98:a4:70:3f:5c:
                    fe:2e:f6:89:5c:c3:51:66:f1:36:f2:3c:78:fc:6f:
                    a3:3b:10:5e:bf:e1:7e:9f:32:9e:d2:1f:3f:7f:26:
                    ec:f6:19:a2:64:c5:f1:f2:85:13:e4:f4:db:c3:ce:
                    29:1b:f4:c7:7c:f3:88:f5:cc:e4:c8:a7:39:3e:25:
                    3f:b2:ff:f4:56:37:9a:79:bb:50:9c:7a:97:23:f5:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E7:B9:E3:5A:B4:8D:BF:5B:B8:17:6B:EE:87:C5:7D:AE:A4:00:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/eb870b14-ac83-3f4c-816f-22bbf5fedd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:6c:82:95:3e:0a:af:ad:21:b7:67:fb:e0:67:34:0a:e7:
         87:a8:a8:52:37:6d:fa:01:72:82:49:2f:74:4f:40:65:fa:64:
         70:2e:f3:e5:ee:19:7e:30:f9:8d:5a:be:5a:06:04:eb:74:03:
         05:e9:6f:1b:a4:4f:b5:52:19:9a:6c:15:d6:1f:1d:ff:ca:00:
         8f:4a:92:ee:6e:8b:da:15:d2:3e:2f:f3:75:6b:14:a0:38:7b:
         42:68:e8:93:28:ce:cc:2b:1c:7c:ac:53:2c:ae:9b:6b:c6:60:
         62:f5:3e:24:8a:99:4c:c3:0e:08:a8:e2:a9:a6:62:3c:96:22:
         d0:44:e8:ef:31:37:13:dc:8d:a9:7e:af:a1:15:34:53:66:2b:
         4f:2d:34:6f:87:d5:cd:06:78:96:24:34:3e:0b:a7:63:1d:2e:
         24:83:81:eb:cd:af:8d:1b:9c:a9:22:91:0d:6c:99:55:0a:5a:
         92:b4:8a:5c:e8:a4:eb:59:cf:6a:ac:5d:73:03:c6:88:df:8e:
         94:50:f9:33:fb:b3:ce:f3:78:f1:02:b7:aa:34:f4:b2:6a:39:
         07:63:c3:e2:0e:fe:08:d4:aa:d7:35:b0:54:be:74:c7:a7:99:
         10:e2:4a:e1:3d:85:0f:18:c2:8b:79:7c:ac:2e:7b:2b:b9:4a:
         7d:81:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:47:23 2026 by rpki-client