Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/8ea6160c-cdfd-3659-8fbd-ed9fe3653af3.roa
File:                     8ea6160c-cdfd-3659-8fbd-ed9fe3653af3.roa (raw, json)
Hash identifier:          6gLu2AElHgTE44/hQ+2xW85NhUqlhcTWhIZEKNP1IdU=
Subject key identifier:   64:40:AC:F3:F7:D1:C7:39:FD:96:FB:B6:BD:33:85:FE:AD:9B:73:B6
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584E34778C8DEA6551433EEA6540
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/8ea6160c-cdfd-3659-8fbd-ed9fe3653af3.roa
Signing time:             Wed 17 Jun 2026 19:51:25 +0000
ROA not before:           Wed 17 Jun 2026 19:51:25 +0000
ROA not after:            Tue 15 Sep 2026 19:51:25 +0000
asID:                     3599
IP address blocks:        64.73.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:77:8c:8d:ea:65:51:43:3e:ea:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Jun 17 19:51:25 2026 GMT
            Not After : Sep 15 19:51:25 2026 GMT
        Subject: CN=63412ce8-3cfe-4c69-b9a0-8af17ef14738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:b4:d1:20:53:0f:b2:f4:0d:67:db:9e:1b:
                    1f:0e:fd:2a:a7:c9:78:e4:f2:23:64:02:81:4b:b8:
                    3b:cf:db:21:be:1e:64:63:b4:e4:07:42:95:7f:dc:
                    37:2e:0b:b3:77:27:64:32:b4:f7:92:37:de:64:d7:
                    73:e8:fb:d0:1c:56:48:7c:bb:c7:0a:a4:e5:8e:79:
                    69:45:c3:e0:9a:ec:88:23:f5:e9:06:75:b8:27:a2:
                    74:e6:01:13:03:01:81:b6:30:24:ed:d5:5d:d1:9a:
                    11:35:3d:40:24:da:9d:dd:03:0a:b5:3d:d0:95:23:
                    43:62:67:57:0e:6b:46:02:5b:90:a7:81:7a:39:91:
                    57:72:97:dc:de:45:ca:ac:52:f2:a5:a3:b5:d7:73:
                    65:57:a2:c0:70:31:33:78:ad:34:52:34:65:cd:77:
                    7d:4e:44:73:e9:77:9e:bb:29:6f:37:da:d8:0c:b1:
                    54:1e:9c:2e:7e:02:53:e9:ab:b5:31:3e:65:b1:a0:
                    d7:da:a3:b4:d5:8c:2a:fe:dd:d6:98:9a:bb:48:09:
                    c1:c7:e8:d6:95:64:f1:d7:a8:f3:c4:7a:c7:ba:c4:
                    41:bf:02:ac:73:5c:92:d1:7e:57:b3:77:e0:09:0b:
                    c5:4b:9a:9b:eb:51:78:36:a7:10:36:35:44:e1:f0:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:40:AC:F3:F7:D1:C7:39:FD:96:FB:B6:BD:33:85:FE:AD:9B:73:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/8ea6160c-cdfd-3659-8fbd-ed9fe3653af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.73.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:11:fb:d4:3b:96:16:c3:5a:1d:d4:14:e8:2e:27:2f:69:
         cf:70:46:76:c7:dd:46:3e:65:46:0b:e2:e5:61:c6:67:6f:fd:
         ad:e2:1b:5a:e6:22:b9:58:7e:dc:f6:0b:62:28:67:b3:0a:13:
         1d:48:5b:44:3c:a1:eb:48:88:82:02:b4:74:8d:88:18:33:0d:
         d8:9f:dc:98:b5:47:0d:4f:e9:1e:41:d6:ae:53:f5:52:9f:c5:
         37:f7:9e:aa:89:b3:e5:40:5d:64:05:45:a7:bd:bd:fa:dd:12:
         29:a8:50:4c:24:ce:d3:36:95:1d:ff:06:c8:77:10:fe:0c:cb:
         01:57:97:a3:3e:00:f5:d7:4f:48:c8:9f:f1:a6:59:1f:f8:6e:
         c6:ca:ac:c6:b3:63:44:cb:ca:ad:29:a1:a5:bf:0f:88:c5:91:
         e8:8c:86:7b:5b:40:13:cf:b3:da:2d:05:0d:49:c3:62:fe:af:
         31:37:c9:d5:f8:1f:3d:7c:f8:8d:26:14:f4:1b:62:98:e4:48:
         49:3a:80:9b:73:90:be:1e:86:95:6c:c0:2c:bb:56:1c:8c:e9:
         aa:5a:38:81:58:c5:78:26:7e:22:12:e0:6f:bd:67:89:e1:b8:
         f2:a5:35:26:89:3c:c2:23:10:12:bd:01:c3:b7:27:e1:3b:3b:
         a8:e7:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:09:53 2026 by rpki-client