Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa
File:                     8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa (raw, json)
Hash identifier:          bPFp0L9QqulHKm5IBtC4Ailed1G92q44eYFJhkL3FTE=
Subject key identifier:   D7:B5:D0:0E:A6:E1:7C:20:40:C5:7D:1E:2E:23:3B:1F:2F:33:29:AE
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584E0865E7C4C1BA9D32798DE380
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     46261
IP address blocks:        64.79.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e7:c4:c1:ba:9d:32:79:8d:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=3856f2ab-2be3-49a6-b6a8-89a1f0910f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:08:57:f9:07:ad:26:bf:20:1d:8a:e6:8c:
                    80:0d:1d:c0:08:b5:08:1c:03:f6:26:fd:5e:23:f6:
                    d0:20:4c:af:04:25:e3:31:34:79:86:cc:ca:f4:77:
                    f6:ef:93:b8:18:e0:66:ba:2a:2f:20:dc:a1:dd:2b:
                    31:c7:4c:d0:4e:f2:30:39:17:ce:8d:20:28:fa:50:
                    9f:93:0f:50:e7:db:aa:11:30:bd:91:c2:98:1d:79:
                    e7:56:49:bc:ec:00:8e:1c:e0:ab:bf:5a:cd:3f:5e:
                    e9:3b:5e:2a:ef:64:42:31:b0:1f:93:fa:da:35:c2:
                    3f:b4:34:72:14:19:7a:aa:0f:f0:3d:02:55:82:80:
                    3a:6f:03:a2:17:2b:4e:a4:90:2e:68:5d:d2:88:88:
                    3b:c9:d4:30:4e:bc:54:2f:15:0a:6d:c3:f0:16:9c:
                    42:b2:98:c8:76:b6:c7:e4:e7:e8:85:91:aa:03:6d:
                    d0:4b:9d:37:05:53:8f:06:d5:27:11:53:de:1b:ff:
                    b3:f6:ca:a9:ec:0d:b7:9c:76:a7:c5:b2:b9:3d:14:
                    13:24:4f:8f:b4:15:ae:f6:9d:e1:4b:c1:5a:06:4a:
                    87:8a:fb:26:00:07:24:8d:4f:68:a8:aa:c3:b7:30:
                    85:d6:76:92:b7:9b:f6:6b:80:ba:04:76:bf:7d:e9:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B5:D0:0E:A6:E1:7C:20:40:C5:7D:1E:2E:23:3B:1F:2F:33:29:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0b:2e:af:83:e0:e0:17:0a:f9:93:e7:74:89:67:84:74:5f:
         02:c7:f1:10:90:4c:b7:60:2a:3b:70:d5:e5:88:86:5a:d5:79:
         34:41:bb:8c:45:fa:4e:96:22:88:5c:45:b4:e3:c3:08:30:82:
         6b:67:57:4e:8e:24:1c:c6:6c:db:70:72:05:6a:77:be:83:6f:
         3b:04:ba:08:58:67:74:5d:4c:4f:ab:86:c4:4d:d6:c4:00:3f:
         d9:e2:55:ad:ea:c6:dc:05:45:74:6b:fe:a8:26:e9:7b:18:2f:
         f7:67:b7:15:0a:6c:8f:48:7e:1e:d3:4a:2e:ac:ec:b0:6e:6f:
         49:f1:a1:12:f5:cf:70:ab:0a:fb:a6:0d:df:c0:31:c6:2e:42:
         ad:49:c7:a0:25:13:5a:61:34:14:01:1a:41:90:2a:52:91:c3:
         28:30:c5:bd:03:55:4c:06:e7:1f:11:20:5e:94:f8:b7:0b:13:
         df:d1:41:20:0a:d1:c5:63:e0:30:d5:12:22:f3:9c:a8:8d:39:
         52:9a:b4:11:24:24:3b:5f:31:72:89:31:7f:62:4f:4d:3c:1b:
         28:12:de:d2:f8:6c:96:a4:52:ec:c5:e9:78:cf:8f:d9:8a:78:
         36:40:22:8a:d1:05:c8:f0:33:5b:a9:e2:ee:8d:93:48:89:04:
         8c:fe:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:58:49 2026 by rpki-client