Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069/c6bcd6b4-5237-3d55-af42-8d2e39aa825a.roa
File:                     c6bcd6b4-5237-3d55-af42-8d2e39aa825a.roa (raw, json)
Hash identifier:          L6wfYHHhtXD7QFfqmjuUkDXhhRFiAnikioOydJ7UNWY=
Subject key identifier:   4C:FE:55:41:3E:49:68:E0:2F:96:0A:87:63:8F:F8:EE:67:30:B0:9E
Certificate issuer:       /CN=0dc4527a-e20b-47c9-87ae-b3d106988069
Certificate serial:       010D0C9F4328584D11725AFAA233EF2CF40829C0
Authority key identifier: B4:A0:C9:12:6A:D5:C8:F1:FB:12:2C:65:4A:91:31:EA:B0:85:52:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069/c6bcd6b4-5237-3d55-af42-8d2e39aa825a.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     54302
IP address blocks:        64.34.56.0/22 maxlen: 24
                          136.242.80.0/23 maxlen: 24
                          2602:fa27::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069/0dc4527a-e20b-47c9-87ae-b3d106988069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069/0dc4527a-e20b-47c9-87ae-b3d106988069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:5a:fa:a2:33:ef:2c:f4:08:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc4527a-e20b-47c9-87ae-b3d106988069
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=22cfbc53-a7e3-4bfe-83e5-cedbb5d8ea48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:13:91:24:7f:f9:d3:7b:88:67:97:eb:08:d6:
                    b2:6d:f8:2f:4b:b5:e0:7b:1b:e0:95:9f:8f:dd:77:
                    a3:83:80:a0:3f:fc:7a:8e:09:a2:c0:c9:df:bf:a2:
                    0d:b8:90:0a:a0:30:30:f2:8d:4a:83:08:6f:35:02:
                    ae:53:de:cd:d4:ad:4e:82:bb:b3:8a:8c:fc:08:06:
                    07:c2:9a:f2:40:5a:45:ba:03:63:ed:52:61:b5:59:
                    b9:ab:6a:92:ac:51:64:04:b8:1d:24:d7:a6:7b:3e:
                    39:e7:7a:9d:74:66:52:24:52:45:34:8c:90:9f:61:
                    86:23:a7:51:f1:8c:28:52:bf:94:27:5a:86:6f:33:
                    d9:a3:37:df:e4:6c:12:ad:7f:45:10:54:f5:86:9b:
                    08:ec:f3:2c:f1:18:56:4f:a2:83:f2:84:38:a7:10:
                    00:6a:5f:1c:98:72:05:b7:16:b9:6f:7c:7f:72:7e:
                    35:e3:a2:3b:17:5d:ff:9f:b9:7d:ae:b7:80:87:ae:
                    c0:20:f9:92:e3:65:0e:d8:b2:ef:70:62:65:f6:4d:
                    d8:13:3e:64:c2:e1:f6:f9:51:13:55:81:b7:9c:b3:
                    e3:46:08:80:87:cc:42:3b:e7:88:93:09:3e:00:b7:
                    82:05:31:ca:28:a4:f7:03:9d:2d:4f:7d:c4:77:a8:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FE:55:41:3E:49:68:E0:2F:96:0A:87:63:8F:F8:EE:67:30:B0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069/c6bcd6b4-5237-3d55-af42-8d2e39aa825a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069/0dc4527a-e20b-47c9-87ae-b3d106988069.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A0:C9:12:6A:D5:C8:F1:FB:12:2C:65:4A:91:31:EA:B0:85:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0dc4527a-e20b-47c9-87ae-b3d106988069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.56.0/22
                  136.242.80.0/23
                IPv6:
                  2602:fa27::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:36:4e:f1:52:92:0d:80:58:93:7c:7f:75:ba:a2:b4:73:
         7c:f7:10:a4:4d:c7:96:73:8c:c6:f9:af:7c:70:ae:83:f0:2f:
         04:9f:a8:a8:22:ab:03:01:7e:c5:a8:42:cf:81:e8:5e:e5:72:
         d9:7b:87:11:08:eb:cc:02:a1:af:33:a4:7c:96:2d:f3:c9:50:
         48:ea:09:86:27:1d:24:c3:44:b8:4b:88:2b:bc:a9:3c:37:6e:
         b9:98:76:fc:cc:7f:c7:6e:62:0e:a8:84:56:11:ac:cc:42:b5:
         44:fb:90:02:8d:bf:26:bd:b4:f2:18:e6:4d:2a:de:0b:b1:13:
         1a:f3:5e:35:94:f6:a6:c8:e6:77:17:6e:05:80:e4:35:90:4f:
         af:77:06:48:ce:df:92:e3:63:f8:19:f7:de:d4:76:5a:90:4a:
         72:82:91:8c:90:e6:d7:8c:bc:e8:02:ae:23:80:58:b8:d0:46:
         19:1d:db:55:63:0c:ab:e2:09:8f:f2:72:36:07:91:9b:21:31:
         1c:7d:3f:2d:13:55:53:ad:42:cf:38:dc:be:69:07:75:52:68:
         21:56:79:64:0f:5a:71:ed:73:0e:8f:8d:e3:40:f3:88:2a:3b:
         32:0c:a4:81:75:6f:0e:ce:97:31:59:6e:bc:7c:af:fa:f2:c6:
         b1:d3:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:04:14 2026 by rpki-client