Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0daa7be5-b293-3d21-9cd9-153941bb7130.roa
File:                     0daa7be5-b293-3d21-9cd9-153941bb7130.roa (raw, json)
Hash identifier:          SrDUWZiqKe2yGdcko3Al4zzqTN5pndXoXBKu8wD8vuQ=
Subject key identifier:   D5:BF:15:A7:48:FD:E8:C5:E6:4B:35:18:79:FC:7B:43:40:34:38:CA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F67CCA9B7B30BDB79BEE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0daa7be5-b293-3d21-9cd9-153941bb7130.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     27424
IP address blocks:        64.62.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:67:cc:a9:b7:b3:0b:db:79:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=7fadce05-d819-444a-b7ce-b9d9fb9baf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:af:34:95:a1:2f:7f:76:14:a0:00:71:fd:
                    3c:8d:8d:d9:e8:a8:4f:0a:3d:ed:62:1c:c1:48:cf:
                    97:47:3a:90:80:1a:44:c8:88:44:ef:a4:4f:44:52:
                    06:50:c5:c2:18:5e:d0:bb:10:07:53:1f:c4:bc:1b:
                    61:f8:fb:79:d5:66:5d:25:93:bb:ce:e5:d8:d0:2d:
                    fc:fc:c3:22:eb:e4:8f:55:80:fe:32:03:6c:db:07:
                    b5:00:bf:da:42:bf:53:a9:42:89:a5:39:a2:5b:58:
                    2c:ad:2b:d1:75:e1:91:fc:3f:63:44:ba:ec:1e:84:
                    cf:5b:29:fa:01:2f:27:15:c1:d4:86:38:67:9f:78:
                    59:53:ad:57:b0:12:5a:3f:c8:68:1e:09:34:43:2b:
                    fd:4a:e6:ef:02:65:2b:a2:97:af:f6:03:64:a8:ed:
                    8d:d9:33:07:9f:df:5d:21:0a:1f:bc:21:7b:f7:71:
                    fd:18:eb:96:9b:fc:5d:14:79:25:25:f1:ae:24:80:
                    59:b0:24:0c:fc:ae:79:14:94:54:62:ae:51:13:b6:
                    8f:b5:85:80:9b:fa:eb:44:2b:31:b7:e6:86:c5:17:
                    0f:37:e1:6a:a1:86:c6:65:58:1a:a5:a1:26:06:66:
                    01:04:16:6e:5c:73:3c:b1:b5:3c:8c:64:b9:a7:aa:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:15:A7:48:FD:E8:C5:E6:4B:35:18:79:FC:7B:43:40:34:38:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0daa7be5-b293-3d21-9cd9-153941bb7130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:66:73:71:a7:89:29:8e:84:f7:7f:4a:f2:22:d0:6b:27:c9:
         ee:66:46:06:56:4f:70:f8:19:55:94:fa:f1:c4:4f:9b:16:7c:
         c7:67:eb:b6:56:65:3a:cf:c3:de:fa:f6:88:b1:5e:8c:6a:30:
         61:44:b3:f7:95:36:3a:6c:eb:fd:75:f7:67:c8:75:00:e7:b5:
         89:6f:4b:3e:8d:92:71:c7:cf:db:6c:2f:90:a6:9b:03:27:66:
         e0:ec:ae:1e:57:b0:83:62:7f:e8:47:e6:c2:04:0f:25:b2:17:
         56:44:64:25:1b:9f:ac:6c:77:ba:71:c6:f2:28:4b:9f:4d:a4:
         13:19:bc:db:f8:4c:f5:29:d5:53:c8:1e:5f:b6:22:34:f3:26:
         12:f7:a4:61:7c:3a:af:92:4c:6a:96:83:d6:5c:88:a8:a8:bd:
         c4:a5:c8:ef:98:aa:90:b8:34:0a:31:ef:3a:20:1f:c7:68:91:
         be:0b:ca:fc:10:78:9f:65:7d:e9:cd:8c:d1:e9:9d:3a:68:d1:
         b8:4d:89:6d:31:44:5b:2c:ec:36:26:6c:8b:dd:8a:a7:50:b7:
         95:52:39:c3:70:f6:1b:f4:98:7b:16:4c:10:73:ff:5d:94:2d:
         80:e5:c4:f6:1f:a6:9f:bc:0a:ed:68:47:82:4a:c1:c7:ce:fb:
         a5:6e:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:04:48 2026 by rpki-client