Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
File:                     9bb59be7-0b44-33d9-a9d6-b806d4424238.roa (raw, json)
Hash identifier:          mG549ZuKXALHkvLdWHEIsN4jQFqs/4d7RpXNiXOxd14=
Subject key identifier:   BF:38:D4:7F:0B:1C:1F:42:1B:3C:8C:C7:49:85:2C:12:6D:BF:9E:54
Certificate issuer:       /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial:       010D0C9F4328584E3A2F229AF57D4081FB64FC00
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        65.20.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:22:9a:f5:7d:40:81:fb:64:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=c957c58a-0d2b-4528-85d1-ccb8f7888900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:21:30:33:67:f2:ef:b0:db:45:71:3a:8b:
                    8b:72:ca:27:75:27:a0:73:8f:20:03:89:db:42:81:
                    a2:58:7b:c7:70:bf:87:7f:4d:01:04:76:48:1c:47:
                    e7:6d:e1:08:d2:94:25:89:68:ff:16:9b:7a:f8:0c:
                    cd:f8:8d:45:c1:c5:0d:ee:71:e5:7e:71:99:3c:6c:
                    26:40:91:91:78:03:0b:ce:78:90:30:9c:fe:a1:00:
                    cd:b2:ee:5b:5d:68:d4:20:6a:fd:33:29:b6:e7:0e:
                    6a:26:5d:49:4b:a6:2a:cf:65:76:c7:f0:23:59:7e:
                    02:cd:39:93:d9:d7:71:69:ed:a5:50:6b:5f:ea:cf:
                    54:9d:39:3f:9c:c9:ac:d4:c0:c6:f3:41:58:db:e6:
                    56:47:d9:18:a6:1a:08:90:d2:77:db:18:01:f3:9d:
                    ef:0d:d4:db:00:a1:85:5b:56:a3:c3:a7:91:d0:3c:
                    63:fd:54:91:ec:e5:a1:1c:a1:b3:37:a3:c0:9f:43:
                    87:95:2b:01:2f:b0:8e:56:4f:d1:10:89:5b:ef:b8:
                    ef:8f:b5:27:c3:b9:83:da:ce:d3:ce:10:1c:19:67:
                    d7:77:f0:2f:d6:ba:1d:9a:03:88:a1:fd:04:c3:f6:
                    c2:ee:a9:57:7c:63:a5:38:c7:73:b6:f0:0b:b3:3d:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:D4:7F:0B:1C:1F:42:1B:3C:8C:C7:49:85:2C:12:6D:BF:9E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/9bb59be7-0b44-33d9-a9d6-b806d4424238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl

            X509v3 Authority Key Identifier:
                keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ff:5e:c4:24:c4:7c:41:1e:f4:aa:cc:9e:8c:d2:5f:79:f4:
         cf:16:89:d3:ab:00:f4:24:18:52:7d:0e:36:0c:cd:e1:48:8d:
         b2:6f:6f:2e:30:e2:91:20:7d:4f:b1:98:da:a3:be:54:40:e9:
         18:61:72:48:a8:d6:a4:46:d4:77:b8:92:8e:81:6e:9b:0a:d3:
         29:2b:50:e2:eb:c5:10:4b:97:1a:f7:2e:66:ed:62:cf:f3:97:
         62:31:72:ef:5e:6b:3f:5d:58:5f:6c:ad:e1:8f:5d:9c:20:e1:
         5d:de:6c:02:f2:88:be:3d:fe:f4:3d:7f:7a:9d:a7:49:9d:4b:
         81:7c:83:67:3b:7b:73:66:6f:d3:50:b8:0a:14:3b:51:1c:e6:
         fb:fd:2b:a9:69:26:c6:4b:63:93:da:82:64:21:05:f1:16:44:
         c4:0e:44:84:bd:6e:0b:cb:88:17:12:b5:16:35:3c:2d:29:b9:
         91:2f:55:77:3d:c6:d5:c1:9c:e5:37:53:12:45:54:9f:67:78:
         05:05:70:fe:11:0c:08:b6:12:20:ab:80:bb:71:1f:27:d5:9a:
         e7:7e:a7:72:7b:b0:86:34:1f:02:27:44:cc:85:65:c8:b3:21:
         9a:f1:fd:32:72:00:0a:01:b4:6e:71:1b:fd:b6:84:e8:11:53:
         57:59:6d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:49:11 2026 by rpki-client