Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa
File:                     0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa (raw, json)
Hash identifier:          bf1EafpcIn0BDe+vRzK6UeKknNlIMYPaVJmljpvLou4=
Subject key identifier:   D8:1A:11:ED:1B:7A:7B:BE:84:98:AD:76:AB:2F:58:B2:26:55:06:3F
Certificate issuer:       /CN=766eb068-340f-4e16-9d08-04181e100ca2
Certificate serial:       010D0C9F4328584E1FA9A1188F69330118646790
Authority key identifier: 09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     63278
IP address blocks:        192.64.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:18:8f:69:33:01:18:64:67:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=766eb068-340f-4e16-9d08-04181e100ca2
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=be1d66d7-7f0f-46c6-8c40-153dd1de895d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:dd:f7:76:83:b2:22:e1:34:b4:dc:22:ff:
                    55:03:b6:f4:76:05:4b:3d:41:d7:14:3e:f3:52:76:
                    dd:12:0e:c0:4a:67:90:18:6a:40:5d:fe:8b:16:8b:
                    50:42:f1:7d:b5:f1:cf:45:ea:66:1e:30:0e:b9:4c:
                    aa:ab:77:60:09:ac:06:a8:65:5b:b0:6d:29:f8:eb:
                    cf:26:09:b2:5a:f6:87:f1:d2:dd:8d:b4:d7:cc:dc:
                    14:6e:0b:b9:b6:65:42:d3:c8:1d:a6:89:d5:98:1c:
                    3c:74:fc:55:66:e3:a2:de:bd:46:d2:e3:f0:56:f1:
                    b8:35:ee:c6:2d:3c:6f:8b:dc:8d:d3:d8:5e:91:5a:
                    7a:98:36:16:52:54:27:4e:90:03:90:4c:6f:a0:72:
                    52:0b:52:97:cb:f3:e9:89:c9:fe:16:da:92:fc:7a:
                    cd:28:aa:d3:54:04:8f:79:99:7c:68:60:7b:f1:0c:
                    50:38:ce:ae:dd:df:68:0e:8a:a8:40:79:29:b3:c9:
                    21:6d:4f:7f:a7:f3:82:21:ac:ce:c4:da:d9:73:ed:
                    b6:bf:17:53:17:c3:31:07:44:35:af:84:c4:d4:b8:
                    1b:08:02:27:ba:3d:d8:7b:c2:05:58:c4:74:95:8d:
                    b1:e1:c6:25:4a:4c:03:ee:ab:ae:d0:03:10:15:43:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1A:11:ED:1B:7A:7B:BE:84:98:AD:76:AB:2F:58:B2:26:55:06:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/0baf7ddb-5772-3f55-82bb-86d52cc5ad35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2/766eb068-340f-4e16-9d08-04181e100ca2.crl

            X509v3 Authority Key Identifier:
                keyid:09:5F:AA:AA:CA:2F:82:BD:AF:19:2B:3A:7B:DC:B5:FC:44:69:C7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/766eb068-340f-4e16-9d08-04181e100ca2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:1b:76:90:71:bc:c8:57:ec:13:b6:db:58:af:98:22:34:
         c1:87:f7:18:c3:a3:23:ff:5e:8b:b2:b6:a6:66:92:df:b1:44:
         d1:a2:94:f5:f8:37:d7:c2:1c:66:08:f6:fb:80:3f:56:50:1c:
         05:2f:10:80:e2:a8:22:82:ab:69:38:5b:a1:57:ba:ef:5e:c7:
         09:de:26:7c:73:94:c8:8f:b0:fb:31:d6:6b:75:ce:c0:af:a9:
         d4:0a:7f:97:4c:fd:7f:45:b5:f9:11:66:3e:d6:fe:7b:f2:f8:
         b4:44:47:e5:56:d2:47:04:86:7b:81:01:0b:c6:1f:64:60:8b:
         d6:34:30:27:bf:13:40:38:ed:62:4b:5d:18:9a:85:a9:74:08:
         d6:3a:24:9c:c8:88:bd:d0:3c:14:52:fc:07:6d:f6:56:47:5e:
         c5:2d:cc:e7:02:93:5e:f4:59:b4:87:dc:43:28:12:93:cc:40:
         d1:42:33:b2:43:f3:84:c5:f8:42:71:52:c3:e3:08:ba:0c:23:
         fc:31:19:8e:43:c0:57:ad:43:8d:69:e9:33:b7:14:8c:6f:de:
         a5:6a:3a:ec:7a:e5:68:15:ec:5a:23:ec:10:ae:bc:92:97:29:
         07:c5:66:a6:6a:02:1f:01:80:3e:22:ed:e4:bb:5f:e5:73:de:
         fe:c8:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:21 2026 by rpki-client