Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/a47df47e-0c85-3eb0-8802-366b288dc185.roa
File:                     a47df47e-0c85-3eb0-8802-366b288dc185.roa (raw, json)
Hash identifier:          FqbsNu3q548PxmChqmiDnHHAf0Uyxt02hghj4WLf70E=
Subject key identifier:   42:C1:3C:7A:1F:A4:A0:88:D5:3E:7F:D8:BF:87:1F:31:B9:AF:A1:90
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584E394FF41E1C3DFDA94C1C6B40
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/a47df47e-0c85-3eb0-8802-366b288dc185.roa
Signing time:             Fri 19 Jun 2026 13:30:41 +0000
ROA not before:           Fri 19 Jun 2026 13:30:41 +0000
ROA not after:            Thu 17 Sep 2026 13:30:41 +0000
asID:                     3599
IP address blocks:        64.73.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:39:4f:f4:1e:1c:3d:fd:a9:4c:1c:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Jun 19 13:30:41 2026 GMT
            Not After : Sep 17 13:30:41 2026 GMT
        Subject: CN=35d51359-9443-4d77-844a-936d2fc83703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:ce:a5:0a:14:1a:87:8a:6c:24:cc:2c:07:
                    4e:52:03:f7:56:98:ef:ae:87:c9:ff:4f:f8:ea:f5:
                    01:e9:17:f8:42:3b:d4:26:a0:1d:2c:f3:5e:20:a7:
                    ec:cd:31:1f:4e:bc:c8:85:32:01:69:a7:51:da:57:
                    53:53:7f:47:1f:bf:53:f0:3b:ec:c6:ee:5c:c4:15:
                    5d:8d:4a:d6:5f:47:0e:ab:1a:eb:4e:d2:5b:af:ed:
                    5a:12:e7:9c:17:32:61:a7:55:9b:e7:59:0a:53:85:
                    52:f1:db:bf:52:4c:92:06:13:f0:3b:2a:99:e1:24:
                    22:4b:be:f7:84:93:ad:ad:9c:57:bd:59:05:06:b2:
                    ef:1f:87:a1:5a:70:42:43:fc:5a:0f:11:97:0b:e8:
                    2c:ee:6c:b4:bc:6a:06:30:4a:9d:eb:1d:82:fd:dc:
                    42:1e:fd:26:07:81:47:d0:50:95:10:1f:16:bf:fc:
                    62:79:a6:88:5c:86:4f:62:12:cf:f4:c5:2b:d8:1d:
                    84:34:12:08:00:93:f8:dd:22:f6:ae:34:d2:c6:5f:
                    45:7f:7e:74:10:78:4e:f7:b7:10:86:33:a6:8c:83:
                    cb:c8:f3:c8:37:2f:22:dd:e5:02:1e:73:13:20:a5:
                    ce:7f:60:4d:62:f0:83:92:3b:70:14:22:4c:98:c2:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:3C:7A:1F:A4:A0:88:D5:3E:7F:D8:BF:87:1F:31:B9:AF:A1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/a47df47e-0c85-3eb0-8802-366b288dc185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.73.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:14:03:51:1e:60:04:07:69:92:d7:c3:0e:a4:0d:50:34:fc:
         8a:95:51:cc:54:da:d2:ef:20:51:14:86:7d:61:88:75:5b:24:
         ed:10:9e:1c:d9:64:03:4b:2c:91:e0:6a:e5:6e:41:c8:8c:6b:
         f1:3a:2b:d8:5d:1f:28:7d:f7:b2:06:f0:02:4b:6a:aa:65:33:
         6d:28:00:d0:01:13:cd:63:c9:b7:08:8f:ed:12:32:67:05:8b:
         30:01:b6:cf:90:39:b7:4b:9c:24:ce:23:fb:c6:2d:93:f0:06:
         0e:0e:b4:25:6d:60:6a:0a:fb:ae:91:2e:7b:80:57:0a:4f:bb:
         61:d5:e5:2f:ae:95:f1:41:18:e5:6d:27:3f:86:60:ea:04:6d:
         fb:02:33:3c:9b:0b:ba:7d:fb:8f:3c:26:36:6f:85:56:64:35:
         24:84:d7:8d:73:7b:c3:e4:da:46:26:15:5d:6c:6a:2d:4c:f3:
         78:d3:b7:f7:2b:d4:ae:dc:f0:97:ac:e3:86:c6:ad:a0:ad:77:
         fb:56:5b:72:60:11:ea:5d:45:44:4a:90:ac:84:0d:3e:0d:ba:
         9e:89:2f:87:fe:8c:93:1f:b2:62:08:bc:48:60:e2:c3:a8:77:
         85:dd:1f:06:8d:35:5c:0f:a3:81:a0:3b:b1:a1:0f:92:cc:e2:
         85:d9:72:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:09:48 2026 by rpki-client