Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa
File:                     472a87dc-5a34-3721-9aec-494ce65fdcb4.roa (raw, json)
Hash identifier:          kTcttepSnfeVIXo3xBiUhToloRjxnhVNXVYZkYzJIjM=
Subject key identifier:   F0:1E:61:A3:5A:2C:9C:F3:34:18:88:F2:25:EA:AD:8E:89:1A:0F:23
Certificate issuer:       /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Certificate serial:       010D0C9F4328584E3A2F29399BBFA9D0B0DD3000
Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     395035
IP address blocks:        64.239.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:29:39:9b:bf:a9:d0:b0:dd:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=1dff3ad0-9646-479f-a678-44d4082498d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:8f:69:ac:9e:16:04:82:c6:77:ac:1a:a8:
                    ca:8e:bc:7f:01:57:b4:1a:13:de:00:3b:51:d1:82:
                    3e:97:2b:27:32:ce:4e:09:0c:6c:1a:fb:e2:f7:9f:
                    b4:51:e8:f8:49:0b:5d:df:a6:86:d1:37:d3:b3:e8:
                    f4:ab:3c:a2:0a:1c:74:c4:46:6a:e1:f4:fc:ae:84:
                    5d:2d:54:6b:b9:99:4a:b1:a0:4d:fb:78:f8:28:57:
                    11:2c:07:31:8d:6c:de:ea:d6:10:85:22:c2:65:63:
                    5e:61:ea:02:73:51:fc:f0:04:e6:29:48:d0:f0:98:
                    4f:28:33:10:29:52:9e:65:b6:dc:31:0c:cc:fb:fc:
                    06:88:3e:62:72:c6:97:60:60:c3:ed:8b:5b:0a:9e:
                    58:d8:67:0f:74:2f:da:24:4f:e8:17:64:de:32:ce:
                    d5:64:8c:bf:b3:4e:1f:e3:d6:b2:9b:6c:eb:55:d7:
                    68:0d:9a:47:eb:c9:27:f2:98:1e:e5:d8:68:ec:fd:
                    2a:6c:0c:8c:0e:fc:28:36:eb:eb:b4:24:ac:0c:b8:
                    18:57:27:eb:82:38:9e:6a:4a:e1:e5:ac:16:dc:1a:
                    36:4d:83:30:92:30:db:0a:dc:46:34:8e:44:d7:aa:
                    44:49:3c:7a:a9:63:83:eb:f9:9e:43:71:d3:e7:7b:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:61:A3:5A:2C:9C:F3:34:18:88:F2:25:EA:AD:8E:89:1A:0F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/472a87dc-5a34-3721-9aec-494ce65fdcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl

            X509v3 Authority Key Identifier:
                keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:c1:ff:37:8b:0d:ea:13:62:46:4d:7c:5c:cd:15:ff:00:
         e9:41:d0:be:86:b8:b3:27:bd:6e:0c:37:47:99:42:99:b6:cd:
         b8:4d:cc:1b:80:d3:7e:0b:53:e1:c4:3a:03:63:a3:ee:9c:05:
         55:e1:09:62:78:55:e0:01:e7:9d:62:65:cd:04:a6:db:92:28:
         7d:d3:6b:5d:ad:0e:07:5b:5b:6c:e6:d1:ae:cd:3a:0c:e2:b5:
         ee:2d:c7:44:32:89:09:43:cd:72:79:7a:fc:92:91:c3:1c:32:
         82:f9:c7:55:e9:4b:01:21:e2:4e:59:7d:60:5a:90:74:43:f5:
         90:11:ae:4d:7e:b7:99:da:a5:64:85:48:78:9b:0c:0e:57:01:
         a3:d1:c3:10:d8:2d:50:23:cf:2c:ca:09:6e:14:bd:ec:ac:70:
         1e:76:da:ee:bc:54:d9:ce:69:df:66:22:90:39:90:ad:64:1c:
         64:99:3f:ba:20:a8:bf:cf:81:d5:65:ec:1c:40:93:09:f9:ff:
         3e:04:d2:63:45:8e:18:b7:c8:2f:d6:09:27:41:b3:34:19:d5:
         83:6a:34:46:18:cf:1a:60:cd:67:26:58:9b:ba:57:80:26:55:
         9a:2c:97:9c:92:aa:a2:98:2d:3c:11:ca:78:11:f9:5e:4a:ef:
         2b:6a:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:53:54 2026 by rpki-client