Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa
File:                     5770cdd8-1ebd-3582-874c-5afa608b6756.roa (raw, json)
Hash identifier:          AMD7GaAvs5JdoT/TbYxgmhe6yeyt+7WopcOn313Lao4=
Subject key identifier:   3C:E8:18:DC:49:B1:51:E6:50:81:80:71:CF:BF:7A:86:6C:15:F2:14
Certificate issuer:       /CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
Certificate serial:       010D0C9F4328584E37646DA8BCEC681B07F8B380
Authority key identifier: F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     398841
IP address blocks:        64.190.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6d:a8:bc:ec:68:1b:07:f8:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=424ebb39-9445-48e9-82ac-776db3302aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:3a:68:da:15:9d:ab:aa:2d:dd:b0:05:70:
                    64:be:06:d2:a5:36:71:92:ad:8e:aa:59:da:52:39:
                    55:01:e1:b6:c9:67:d8:ce:87:ed:07:06:29:dc:11:
                    0e:88:1e:c6:6a:9f:6e:9f:d7:c3:f4:c7:8b:9b:a4:
                    21:e4:ea:7f:4a:99:8b:e8:53:2b:bd:e1:52:03:9d:
                    8c:09:af:52:ea:5e:23:0d:95:18:d8:e7:27:9e:60:
                    f5:82:63:da:3c:18:62:11:3c:e6:93:f0:b6:03:28:
                    ca:3a:73:b6:1c:16:d2:4c:64:0e:ea:f6:73:2f:34:
                    18:24:e1:04:bd:94:28:ba:40:11:af:c0:0a:a2:f9:
                    cf:5e:91:90:13:67:c4:ef:c3:3f:ba:25:43:85:17:
                    3d:e0:9f:32:2c:5d:be:ce:03:6f:ea:8b:cc:ee:0e:
                    a7:fa:f2:fe:c8:da:10:44:8b:d1:13:2f:bf:85:55:
                    23:ab:06:04:da:8f:47:b7:d6:92:8f:5a:a7:86:48:
                    65:e5:6b:cf:06:b4:19:37:15:a0:00:36:96:e4:c5:
                    4d:c1:0e:b8:cf:ac:d1:c9:91:e8:65:86:3a:a2:c7:
                    00:b9:c9:b7:f8:19:3a:50:e3:46:4e:41:50:70:50:
                    20:93:0d:87:2a:ff:ba:0e:36:25:61:25:b4:36:1b:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:18:DC:49:B1:51:E6:50:81:80:71:CF:BF:7A:86:6C:15:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/5770cdd8-1ebd-3582-874c-5afa608b6756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.crl

            X509v3 Authority Key Identifier:
                keyid:F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:0a:d3:7f:ed:fd:9d:56:42:af:2d:54:84:34:7a:8f:99:06:
         8f:48:a0:1d:a8:06:7b:57:3b:10:3d:2f:45:51:1c:47:9e:66:
         79:05:57:19:bb:4e:49:f2:2a:af:37:66:e6:4f:25:91:2c:a1:
         2c:bc:ea:1b:49:94:66:6e:b6:2a:f1:ab:56:19:ac:61:d5:94:
         ec:3c:68:58:63:3f:55:c8:ab:6a:ac:31:51:38:92:cd:ee:bb:
         9e:7e:5a:47:ff:6b:8a:76:4f:9d:60:ae:6c:14:1d:4e:16:23:
         e7:42:07:6f:3d:a0:b3:65:f4:6c:38:48:86:21:1d:2d:6f:05:
         0d:fd:6b:0f:52:14:e2:8a:5b:72:1e:98:6e:8f:09:6c:1a:b5:
         cc:c8:ab:d0:d2:7d:c8:2f:dc:6e:c1:4b:b4:99:d3:99:d1:b0:
         2f:71:57:da:bc:4a:8a:da:84:a6:60:ef:bc:23:b7:4e:40:62:
         16:2f:29:43:3c:7c:eb:67:7c:1d:f8:ac:6f:04:fe:4f:c0:71:
         54:93:02:78:f7:65:1d:7d:29:74:3c:18:37:21:98:4a:8c:37:
         65:36:33:87:bc:8f:a9:43:a4:53:22:73:89:ec:4b:2a:1e:e4:
         e5:97:b3:dc:88:34:15:39:87:66:7f:2f:38:37:72:d0:43:08:
         8d:87:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:56:06 2026 by rpki-client