Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/3cfd8226-c34e-3840-824c-874ca059667c.roa
File:                     3cfd8226-c34e-3840-824c-874ca059667c.roa (raw, json)
Hash identifier:          kkyfIZf1B/TIWpgbB7XJem4PhWOHePZTMluGXT9+8LI=
Subject key identifier:   AC:B4:F5:96:F5:A3:E6:EC:91:AE:04:EF:0E:06:55:26:12:78:82:06
Certificate issuer:       /CN=51b6f239-2daf-4afb-a5b6-78bf5a8e6369
Certificate serial:       010D0C9F4328584DF640A79A1D5D8316DA4D4800
Authority key identifier: F9:3B:5F:0D:C9:B9:DA:00:0C:19:2C:87:75:EA:5D:DC:1E:28:9B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/3cfd8226-c34e-3840-824c-874ca059667c.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     53340
IP address blocks:        64.112.60.0/24 maxlen: 24
                          64.112.61.0/24 maxlen: 24
                          64.112.62.0/24 maxlen: 24
                          64.112.63.0/24 maxlen: 24
                          199.43.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a7:9a:1d:5d:83:16:da:4d:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b6f239-2daf-4afb-a5b6-78bf5a8e6369
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=fd3eec4b-da17-4bd4-9adb-015c95415684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:81:bf:69:b9:b7:f2:c1:f1:dc:17:8e:3b:
                    8c:87:40:67:d0:8a:5f:d3:5c:bf:3b:26:81:48:8a:
                    54:ee:cc:8c:bb:5b:ad:1f:4c:fd:54:88:55:cb:5d:
                    20:55:a3:ca:e9:f5:05:e5:b8:82:39:36:62:08:0b:
                    d3:aa:88:c0:c0:07:b2:fd:11:89:9e:38:e9:8a:4f:
                    9d:f4:63:63:22:e9:03:5d:e9:20:36:19:c1:f6:5b:
                    df:ce:e4:17:41:78:9d:4e:0c:f8:ea:a5:4f:c4:bc:
                    0d:64:f1:a2:83:93:58:cf:be:9e:54:e0:1a:3c:73:
                    db:27:83:cb:d6:fe:e0:c4:be:99:0c:e4:87:ed:75:
                    41:a2:55:e1:a4:c4:ab:07:65:13:11:f3:58:86:02:
                    46:5f:36:53:1c:56:08:02:9c:09:bf:c9:ff:20:fd:
                    91:7a:a2:59:93:2f:ee:14:5b:55:c1:25:12:c3:b5:
                    ad:ae:2d:f1:ee:5b:ec:64:40:7e:82:d5:59:80:5d:
                    13:3c:7b:8d:33:7e:16:00:2c:c5:03:d3:ee:f2:e5:
                    00:59:f3:26:60:48:90:c5:d8:22:c7:36:cc:38:83:
                    19:e5:a8:8b:97:0d:7d:b2:56:6b:42:74:60:5e:35:
                    da:75:f1:50:18:3e:ea:5d:41:b4:bb:18:fe:cb:33:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:F5:96:F5:A3:E6:EC:91:AE:04:EF:0E:06:55:26:12:78:82:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/3cfd8226-c34e-3840-824c-874ca059667c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.crl

            X509v3 Authority Key Identifier:
                keyid:F9:3B:5F:0D:C9:B9:DA:00:0C:19:2C:87:75:EA:5D:DC:1E:28:9B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.60.0/22
                  199.43.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:35:dc:56:a4:20:03:17:94:44:ed:bd:56:de:8b:dd:e9:
         5f:26:cb:f3:e9:8f:66:5c:97:3e:60:ca:dc:d9:f6:b1:53:6e:
         e9:8a:4b:6e:74:6b:c8:ea:fb:b1:1e:7a:f1:b1:dc:5e:c3:a3:
         8b:b9:d2:5e:51:2c:19:4e:11:c0:c2:5a:dc:61:39:f0:86:4c:
         3d:cd:27:f2:01:41:89:87:00:8e:c9:95:de:05:b4:4d:b8:7a:
         b9:7c:14:1c:e9:09:70:e1:2a:bc:9c:64:18:fc:39:50:85:60:
         18:e6:e9:8b:bb:05:1e:23:01:7e:e8:7f:ca:37:05:12:af:5c:
         93:cc:c9:db:00:5c:99:12:e1:3d:c5:43:6b:93:65:16:bb:20:
         2d:81:85:e5:32:6e:8e:24:54:9b:e0:71:ec:89:89:c1:02:0c:
         3d:04:0d:c6:75:16:94:95:b2:48:f8:96:ec:44:46:e5:3b:39:
         b4:4c:81:2d:90:1b:1f:f7:a1:e2:35:ef:38:29:71:c3:ed:83:
         0e:32:57:54:e7:83:05:ef:e8:02:67:9f:c5:47:ae:4c:b8:90:
         c3:8c:0c:07:fb:fc:75:38:97:3c:30:b6:7e:b9:07:d5:93:06:
         17:ad:0a:a2:4b:ad:52:ab:23:c2:96:b5:f6:78:19:fe:2a:7a:
         60:94:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:41:22 2026 by rpki-client