Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/7e4fbec5-88ff-333e-bc74-35391642d5d0.roa
File:                     7e4fbec5-88ff-333e-bc74-35391642d5d0.roa (raw, json)
Hash identifier:          u4EeB+hqvYZzkJtHJ+1hqNq0PGOuR4btvxRvwt/kU0E=
Subject key identifier:   9B:FC:9F:23:EB:76:08:63:DC:D1:65:70:C4:86:13:8F:51:D4:64:09
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584E210EEE6DAF34A9F4D88FD0C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/7e4fbec5-88ff-333e-bc74-35391642d5d0.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     11164
IP address blocks:        64.57.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:ee:6d:af:34:a9:f4:d8:8f:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=39310962-47d8-489e-b8c7-43a7c63db9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:88:d9:d2:42:65:d5:b7:0e:d5:46:b8:61:
                    11:72:de:6f:a2:7b:97:41:1d:ab:90:33:b1:b7:f6:
                    a2:c5:0e:da:e8:2c:73:18:a1:51:18:5d:4c:da:e7:
                    30:58:39:e0:60:31:85:8c:cc:46:eb:8c:e6:f1:8a:
                    0c:7c:d9:c0:ca:9c:22:e5:ba:f5:04:77:8e:17:3c:
                    68:50:be:59:aa:70:d8:41:06:28:f2:1f:bf:fc:a6:
                    3e:8e:7e:dd:2a:2d:3c:81:82:37:7a:0e:6e:53:bb:
                    29:03:86:fe:9b:e2:31:a8:43:32:0a:12:44:ec:68:
                    67:e4:b1:cf:53:31:c0:ae:ac:cf:ff:6c:22:95:9a:
                    b8:aa:f3:d1:5b:ef:7f:15:33:82:f1:36:31:5d:6d:
                    1b:c2:0b:3c:ef:e5:e0:74:dd:e5:b9:11:91:5f:0b:
                    ee:1c:61:54:1e:af:15:a9:1a:7d:5c:40:9b:5f:35:
                    82:a6:d7:6c:ee:75:94:96:87:46:a8:2d:ba:b6:71:
                    43:0e:d7:ac:e6:28:7a:b8:cd:b0:25:01:40:7b:0f:
                    cc:da:36:f3:ae:9d:e8:ec:5f:a2:4d:34:49:05:0e:
                    87:c5:bd:c8:a2:b2:89:d9:10:1b:9d:94:a2:03:bc:
                    28:47:2c:0e:d9:4e:c4:f1:bb:49:c2:61:cd:90:fe:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FC:9F:23:EB:76:08:63:DC:D1:65:70:C4:86:13:8F:51:D4:64:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/7e4fbec5-88ff-333e-bc74-35391642d5d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:df:23:2e:09:7c:e2:e4:dc:74:9d:9f:a7:27:7c:d2:af:e4:
         3c:3d:e0:f7:db:3a:ff:51:1d:e1:be:1b:28:6e:36:90:04:df:
         6e:dc:65:04:30:5c:24:fd:00:c3:dd:17:45:32:9f:49:f6:b5:
         f9:d8:bb:5f:5e:5a:ec:cc:cb:66:d8:a2:e1:f0:59:46:43:8a:
         ca:fb:32:d3:08:1d:39:9f:85:55:97:2e:c2:7e:a1:b7:64:dc:
         0b:de:f9:82:19:49:ed:24:9f:72:fe:d1:80:98:33:62:d7:65:
         d2:e4:f8:fe:5d:8b:69:83:c3:77:24:8b:d6:2f:aa:71:b1:0d:
         81:13:fe:9d:90:87:77:51:1d:55:17:f9:0f:93:3c:19:15:7d:
         a3:b4:63:c6:ff:c4:b3:1d:38:bf:a4:70:8b:6c:2c:a4:64:5d:
         a1:53:d0:cd:07:2e:91:d1:49:ae:60:66:c7:39:7c:11:0e:25:
         29:29:69:29:84:9a:92:4d:87:cc:64:1a:4e:a9:94:70:fa:e3:
         4d:d0:c6:b6:7f:82:0c:b6:5b:29:77:02:9c:6a:94:0e:2f:e3:
         1e:46:db:97:74:60:a7:d2:fd:3e:85:4a:27:be:c8:cb:c2:ca:
         12:bc:0a:ee:33:60:56:81:75:f0:dc:74:6a:24:ea:9a:05:9d:
         94:54:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:27:40 2026 by rpki-client