Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/8f3cb793-1073-3fbb-806d-92e225342bfe.roa
File:                     8f3cb793-1073-3fbb-806d-92e225342bfe.roa (raw, json)
Hash identifier:          xKrKNBpt5lkc1fhy4zMEDcDtKoN20nYiZ1lGcoDdFww=
Subject key identifier:   27:28:42:F8:01:30:EF:14:B9:A4:39:39:9C:ED:9D:FF:18:8F:98:51
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584DDE2A09808473C8B314714900
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/8f3cb793-1073-3fbb-806d-92e225342bfe.roa
Signing time:             Sun 17 May 2026 21:55:44 +0000
ROA not before:           Sun 17 May 2026 21:55:44 +0000
ROA not after:            Sat 15 Aug 2026 21:55:44 +0000
asID:                     13406
IP address blocks:        64.56.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:2a:09:80:84:73:c8:b3:14:71:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: May 17 21:55:44 2026 GMT
            Not After : Aug 15 21:55:44 2026 GMT
        Subject: CN=5aebf63a-583b-48cf-9906-cffea203ad13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:0e:2e:28:2a:74:52:7b:8a:74:ac:26:ac:
                    9e:af:03:98:05:b1:2d:3f:ad:89:55:8c:ac:32:88:
                    22:00:1f:54:38:f8:39:87:aa:57:06:66:25:ea:d5:
                    ef:8a:3f:7c:e6:cb:b2:0f:d9:f6:56:33:59:f0:2e:
                    c8:db:e6:7e:91:51:0b:40:cd:e6:cf:97:16:02:9b:
                    93:cd:17:39:af:3f:a0:90:e4:8d:2c:3b:29:9d:44:
                    b4:ce:5c:56:41:e4:7a:86:d0:40:60:19:a5:73:b9:
                    08:7b:09:f9:49:f4:5c:74:04:e6:2d:97:f3:f4:63:
                    f6:46:bb:1b:23:b4:4d:4a:a4:e5:fa:9f:5e:23:eb:
                    57:5a:33:b7:a7:64:96:9c:2f:61:a4:bb:be:c7:be:
                    7a:20:14:80:1b:27:b0:a2:9f:e1:58:8d:0f:92:bb:
                    33:81:43:76:f6:be:8f:93:9b:23:0a:dd:06:32:06:
                    d3:e1:1d:2a:1e:bb:7b:4c:bd:8c:25:f9:f3:ca:13:
                    d9:d9:91:2c:8c:0a:27:8d:e2:04:ee:88:eb:aa:d6:
                    94:c0:12:95:d9:68:1d:3c:67:78:9e:de:13:e3:e7:
                    e5:2c:aa:e0:86:ff:64:77:ba:61:10:67:a8:ac:b5:
                    90:6d:f4:3e:50:b3:f7:08:c6:18:b2:5a:e1:29:b4:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:28:42:F8:01:30:EF:14:B9:A4:39:39:9C:ED:9D:FF:18:8F:98:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/8f3cb793-1073-3fbb-806d-92e225342bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:95:e7:45:61:41:91:d4:c6:0e:b3:59:c2:98:47:96:38:
         d0:aa:ad:d7:04:84:4e:cf:0c:43:80:46:ca:91:c4:ed:69:81:
         ea:87:c5:e2:63:b4:3e:9c:5e:0a:fb:e4:f3:29:1f:f1:57:59:
         1b:0a:1d:8b:fb:ef:97:b0:06:3d:d9:e4:a7:48:dd:27:83:c0:
         66:0a:4b:f4:07:e3:41:20:70:93:3a:d0:04:23:e3:cc:98:3e:
         6a:02:a4:91:23:e1:41:f9:7e:7e:77:8f:1f:9f:5e:7b:b1:b3:
         0d:67:22:97:9f:ca:a4:b2:91:12:53:11:f6:b4:3c:57:36:d6:
         92:5d:a9:39:08:8e:49:a5:1c:74:63:2b:51:56:b2:10:70:57:
         58:66:c8:99:45:9e:01:8b:c3:38:6e:4a:8d:b8:46:cb:e6:44:
         58:67:c1:50:58:29:3c:b2:03:69:46:bd:69:ff:63:9c:1d:43:
         2a:b6:a3:a9:df:32:88:05:48:1e:cf:77:10:5b:b3:cc:44:e5:
         b4:50:74:95:ae:75:4d:61:5a:1f:18:4b:ce:c2:80:97:f7:1d:
         c3:59:fd:73:4d:fd:ac:49:5b:00:ba:be:95:fd:0b:c1:10:c4:
         ae:0c:f8:61:5a:e5:35:86:dd:2b:b9:41:cf:99:03:c9:9e:10:
         49:e7:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:13 2026 by rpki-client