Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa
File:                     de598f48-d731-346b-a43b-97507f63c750.roa (raw, json)
Hash identifier:          vYUr1+YZdDrCxdyYo/BJrlQcukM3aDCcCCzLq13MbVc=
Subject key identifier:   74:59:58:CE:B7:C8:9E:D5:9F:A6:C4:0E:9A:6C:36:BF:73:EA:8A:77
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584E1E44449C375F7B011B497880
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        64.79.227.0/24 maxlen: 24
                          64.79.229.0/24 maxlen: 24
                          64.79.236.0/22 maxlen: 22
                          64.79.240.0/23 maxlen: 23
                          64.79.244.0/22 maxlen: 22
                          64.79.249.0/24 maxlen: 24
                          64.79.250.0/23 maxlen: 23
                          64.79.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:44:9c:37:5f:7b:01:1b:49:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=e2fccbbe-dab1-4c01-9f87-4c36d5c452ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:3e:d8:00:df:89:59:66:13:a5:d4:41:c7:
                    99:df:e5:fa:e2:6b:1a:25:cb:ec:2a:fd:9b:38:51:
                    4a:65:28:f6:60:f2:89:a3:04:79:7f:8d:66:41:5f:
                    34:7c:a6:55:25:36:d9:58:48:53:81:a0:08:a4:01:
                    32:40:02:dc:09:73:2f:70:9a:ec:9d:63:2e:ee:d9:
                    24:b0:f9:35:0a:92:88:74:74:05:f2:ff:59:3d:30:
                    40:b4:4b:9e:fa:7a:46:7f:cb:64:74:56:be:94:e8:
                    da:cc:15:e9:d9:66:4c:65:c8:8e:ae:2b:ea:f0:71:
                    6a:aa:40:ba:68:43:78:98:41:14:17:d5:29:0a:b0:
                    5a:9b:06:51:14:1b:8b:d5:b0:48:ae:7e:96:16:db:
                    34:01:3d:61:74:b4:57:6f:99:6c:9d:b6:ac:3d:eb:
                    2b:98:a9:90:1f:d7:59:75:e8:f9:1f:90:7e:73:ae:
                    c4:2a:89:61:7f:5f:37:a6:2e:e8:3e:e0:93:a1:9e:
                    67:3b:7f:84:d9:b8:13:5e:59:7c:9e:06:b5:96:05:
                    6a:0c:b1:eb:70:41:4e:b6:4e:fd:54:86:b8:a3:a6:
                    3d:1c:d8:ae:21:2d:7d:29:39:42:be:54:d9:87:15:
                    75:cb:b1:28:99:ea:2e:01:cf:10:be:a8:9f:d1:87:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:59:58:CE:B7:C8:9E:D5:9F:A6:C4:0E:9A:6C:36:BF:73:EA:8A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/de598f48-d731-346b-a43b-97507f63c750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.227.0/24
                  64.79.229.0/24
                  64.79.236.0-64.79.241.255
                  64.79.244.0/22
                  64.79.249.0-64.79.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:4b:9c:6a:38:46:aa:e7:f5:30:98:40:a8:2c:a5:00:33:
         d5:13:3c:0e:79:e3:44:7b:a6:1b:09:19:e7:d9:74:ac:a1:08:
         c3:32:c8:59:ce:07:40:e4:9c:e1:0f:08:65:1e:c0:30:9f:ae:
         0e:83:9c:f4:62:95:18:ac:3e:b4:6d:07:f9:be:cc:ce:82:2e:
         3e:fb:2b:21:3f:ca:8a:71:b3:97:1c:ad:fc:a7:38:86:50:4d:
         89:fa:83:9f:45:c5:83:f9:92:ef:4e:86:03:41:1b:f4:87:77:
         50:83:f4:22:15:7a:ee:78:9e:e1:d5:04:bd:39:06:07:e2:2f:
         b1:34:50:ad:06:68:c5:6a:a8:b2:ba:72:85:86:54:03:50:1d:
         d7:74:f1:d5:1c:4c:e0:38:47:23:e5:62:dc:d1:29:f5:f1:18:
         68:ef:d6:6a:0b:9c:a2:43:a9:83:fe:04:e9:f8:a9:b7:e2:35:
         80:9c:a0:f0:33:2e:d0:75:aa:e7:c8:e0:57:38:a5:40:7b:7e:
         7d:ab:30:4a:da:9f:db:6d:90:68:96:81:6d:ca:b9:63:78:96:
         a6:63:24:67:0b:f1:1d:00:d1:f9:90:82:3b:01:aa:f5:1e:71:
         6d:3a:c0:cb:e5:bf:fe:85:6e:ef:a0:a2:76:5c:a6:60:f6:1c:
         c4:e7:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:11:03 2026 by rpki-client