Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b/21b146b2-f2e7-3edf-96ea-42b07d831629.roa
File:                     21b146b2-f2e7-3edf-96ea-42b07d831629.roa (raw, json)
Hash identifier:          IbUoAiZqYqZeEhFf3PJNtI0dABMSIhjrvwTdRA1vSkE=
Subject key identifier:   E6:6B:DC:A3:BE:A3:59:6A:B1:5B:13:74:1A:8A:E6:76:1C:C1:0E:A9
Certificate issuer:       /CN=b5d5fc76-052b-4853-9667-e06002e0b60b
Certificate serial:       010D0C9F4328584DF4DB57B8D8CCEED529BF5440
Authority key identifier: 9B:B1:3A:54:EF:DF:30:E9:E5:79:0C:37:62:75:E6:A7:F7:A6:6C:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b/21b146b2-f2e7-3edf-96ea-42b07d831629.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     401995
IP address blocks:        64.111.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b/b5d5fc76-052b-4853-9667-e06002e0b60b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b/b5d5fc76-052b-4853-9667-e06002e0b60b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:57:b8:d8:cc:ee:d5:29:bf:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5d5fc76-052b-4853-9667-e06002e0b60b
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=36a2d618-fbc6-4bd5-bfbc-466ae4adc809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:88:a5:af:d0:10:60:88:b0:df:2e:bb:62:
                    85:6f:13:43:3a:40:ec:d1:16:b4:a1:e2:97:b6:e2:
                    a3:8e:82:7d:4a:ff:ae:de:d0:73:ea:43:6c:ef:78:
                    83:01:4c:b4:69:93:34:b0:9f:c4:bf:c5:6b:ff:56:
                    5f:e0:b6:7e:6e:0f:44:8b:95:24:47:36:14:9c:69:
                    38:2d:a5:90:ba:00:cc:ae:5e:b7:70:d1:cb:01:19:
                    db:8d:fb:61:1f:f5:5f:a6:c3:7f:84:2c:b0:e8:33:
                    e5:cc:4b:33:84:a9:d3:3d:50:f6:11:9b:ad:a2:1c:
                    d2:e4:51:46:ef:04:01:f2:24:8c:23:1a:c3:a6:c9:
                    e3:c8:f2:aa:3b:5b:32:50:99:92:8e:ba:76:67:15:
                    95:f8:98:ee:f7:7c:a5:3b:6b:81:70:92:f1:06:fa:
                    8a:f7:37:ee:ca:b5:1e:2d:74:a5:d0:7c:ac:ec:ea:
                    41:53:20:aa:18:32:54:df:94:d8:30:0a:dc:9a:e3:
                    2d:6b:2b:59:6e:94:67:98:3d:38:88:9f:3b:8f:54:
                    00:fe:3b:c2:cc:7f:e8:ed:1b:ce:90:b1:ef:9c:0b:
                    c6:db:d9:c9:a1:68:48:58:13:df:8a:eb:af:79:b7:
                    b7:27:86:91:0a:90:1c:0e:dd:cb:85:15:ad:3f:35:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:DC:A3:BE:A3:59:6A:B1:5B:13:74:1A:8A:E6:76:1C:C1:0E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b/21b146b2-f2e7-3edf-96ea-42b07d831629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b/b5d5fc76-052b-4853-9667-e06002e0b60b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B1:3A:54:EF:DF:30:E9:E5:79:0C:37:62:75:E6:A7:F7:A6:6C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b5d5fc76-052b-4853-9667-e06002e0b60b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:98:b1:3a:33:33:98:27:32:8c:d7:d3:f9:85:9c:c6:16:
         50:43:d2:8c:b5:08:f4:d7:3d:11:15:65:ea:18:5e:c1:b5:57:
         5c:5e:95:19:39:f1:82:3f:29:65:9a:60:6b:75:27:5d:52:d1:
         9c:33:a7:36:a4:8b:f0:e3:7f:1d:39:db:c6:27:3c:23:c3:38:
         28:25:e0:c0:0c:46:14:33:b4:5b:d0:a0:20:aa:95:a3:18:0f:
         6c:ad:8e:c4:81:81:84:59:ca:00:5a:11:2d:02:9f:a8:b6:6d:
         a9:56:2e:b0:78:29:16:4b:4e:83:b5:f4:ee:8f:94:38:e1:bc:
         68:16:9d:b5:ea:b0:89:48:9a:9c:28:fb:a8:e2:e5:68:8c:d6:
         b2:fc:bf:ba:72:fb:41:3c:3b:f4:d2:78:50:39:6d:9f:7e:45:
         27:3d:f9:57:ad:bd:6f:bb:47:8b:e8:f4:5c:22:03:de:0e:0b:
         b0:64:e3:92:c9:0b:07:18:cd:4f:d6:57:8e:89:78:81:c0:ca:
         46:75:7b:49:c9:0f:e1:3b:b5:09:e3:05:6a:24:ec:58:3b:87:
         59:b9:15:42:ad:45:40:3b:33:07:08:c1:b7:dd:31:2d:6e:b7:
         5c:fc:85:36:81:f9:dc:87:4b:61:d0:a2:b9:c5:bd:9e:ec:5c:
         2f:bf:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:48:09 2026 by rpki-client