Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa
File:                     e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa (raw, json)
Hash identifier:          ENje6QIQ00amU17u+JUJ/SNu27jqsgTyZpw3WGOs0to=
Subject key identifier:   C7:DD:1A:40:E1:14:EA:BD:0F:D6:2B:45:84:C6:8F:55:6C:02:63:E4
Certificate issuer:       /CN=3d1c553d-7b57-40d6-a02c-deff888b678d
Certificate serial:       010D0C9F4328584CF58792729937B47E0A711A00
Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        64.65.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:92:72:99:37:b4:7e:0a:71:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=1b14fd11-c63d-494c-82a3-d51e4c865874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:81:63:1d:85:6b:7d:6d:44:12:8b:3d:03:91:
                    16:fe:2c:bf:72:eb:31:33:6c:81:8f:cd:1c:1f:d7:
                    83:c1:0f:31:b8:8d:9d:a1:1b:ec:ca:01:94:58:d0:
                    99:6b:09:37:0c:77:47:3e:58:c0:5c:10:cf:97:ea:
                    69:71:f3:96:64:57:23:4a:76:ba:62:a0:90:d2:57:
                    e7:17:dd:97:7b:ff:6a:a7:88:b5:36:5e:78:bb:db:
                    39:0a:10:f9:97:8c:7c:67:d0:ae:d0:d5:2f:7a:ca:
                    34:ab:d2:13:80:96:56:3c:47:fb:f8:10:9d:20:1d:
                    8e:1e:0f:30:77:14:4e:86:0a:be:8d:af:6a:46:21:
                    7e:36:69:9e:ce:60:da:16:23:87:b3:b0:46:4b:d5:
                    bf:f6:62:e0:a3:65:cf:45:20:dd:20:cd:c3:e4:5f:
                    ae:2b:4e:af:de:cb:11:46:30:16:83:e1:4f:89:f7:
                    66:77:80:03:f7:af:38:35:4a:1b:a0:24:2b:58:d8:
                    e8:d2:74:51:a0:b0:6f:ee:3d:77:a0:2d:41:b6:5b:
                    86:0b:25:5f:d0:dc:8d:4e:a3:5a:c6:11:02:83:9b:
                    cc:98:1a:28:45:d3:15:c0:cf:3e:c3:98:9d:28:ec:
                    87:38:6a:ed:80:ed:51:56:d4:ca:37:5f:ce:a8:88:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DD:1A:40:E1:14:EA:BD:0F:D6:2B:45:84:C6:8F:55:6C:02:63:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl

            X509v3 Authority Key Identifier:
                keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.65.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:84:01:8e:f6:de:02:27:ce:53:6f:db:84:27:71:95:f4:6f:
         ff:a1:f3:3a:a0:d8:4c:41:07:f3:65:90:c4:63:4d:8c:b4:7f:
         0a:f8:8a:d0:5e:c8:6b:f7:8e:68:76:d0:0f:96:ad:e9:7c:5d:
         be:59:bf:40:2a:d6:9a:88:11:29:81:e2:f1:c6:3f:0c:55:ec:
         53:58:f5:80:e9:87:16:7c:a2:fb:c6:ab:04:5a:00:1f:72:d7:
         76:e3:e1:f9:6d:2b:0c:06:2f:89:c7:27:8a:fa:1b:01:97:4a:
         49:8a:bc:52:ed:09:fd:72:e5:db:fb:28:44:2b:fc:95:85:d3:
         11:c5:06:ec:19:b0:03:be:f0:91:71:f9:d1:69:81:49:7f:a4:
         03:a2:4d:25:30:73:fa:c0:51:13:e5:b0:06:97:ba:e6:32:86:
         7e:b2:72:64:33:90:cf:23:76:a3:09:1a:58:ac:9b:35:3a:ec:
         e1:ba:23:20:45:51:27:86:8e:ea:c5:0c:a0:6b:7d:e7:9e:5f:
         10:26:de:3b:be:4c:70:cb:7d:0f:c3:4c:19:a5:52:89:0e:d2:
         84:4c:65:e2:93:cc:de:1c:1e:7d:c8:1e:e0:b1:95:4b:99:f5:
         b0:33:49:bf:ea:97:26:f9:c3:cf:38:ff:3b:46:ac:6b:74:41:
         c6:82:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:28 2026 by rpki-client