Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/38304816-5eea-39ab-acb2-b677f9968138.roa
File:                     38304816-5eea-39ab-acb2-b677f9968138.roa (raw, json)
Hash identifier:          LwMSjSdd+2K3RIfJos6SlRZvQ4zzFcCumfeusJKbOeg=
Subject key identifier:   2E:F6:1C:D9:5A:1E:67:8E:E8:9B:DA:87:57:20:E5:89:BF:E5:2B:53
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584DD78B19A0DC539B4120D98E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/38304816-5eea-39ab-acb2-b677f9968138.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        64.226.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:19:a0:dc:53:9b:41:20:d9:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=a51ad800-bda0-4e3a-8210-f2360ab78e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:58:d1:a1:88:1f:2f:53:db:bc:17:f2:24:
                    e4:8b:fe:fa:fb:78:71:12:80:99:8c:2c:95:34:9f:
                    10:ef:69:b0:69:94:e5:8c:91:c8:c7:f0:92:89:b2:
                    08:4c:83:b8:ec:a5:2d:9d:89:a4:f4:19:be:00:16:
                    25:9e:36:18:26:d1:5b:67:fa:e4:b0:36:c8:57:54:
                    63:60:7f:8b:41:e0:55:c1:20:9c:e9:c7:ce:50:01:
                    6c:0c:c1:fb:c8:42:14:67:d7:b5:be:16:97:e3:91:
                    42:19:6a:73:53:42:39:d4:58:0e:3d:73:b2:7d:16:
                    94:c9:7f:b2:8a:ea:a5:0a:89:33:60:3d:3f:a2:85:
                    3c:46:51:cd:b5:34:d0:3f:0c:9e:c8:89:00:36:88:
                    d4:4e:be:3b:4f:2d:bc:04:cf:c6:d4:d5:98:7d:d0:
                    fb:60:e7:04:48:d1:80:6a:d1:c4:95:8c:72:a5:9c:
                    81:66:bf:c7:47:b6:a5:a1:9b:29:6f:a2:bb:1e:6a:
                    75:d3:b1:67:15:ff:6a:1a:b5:0d:82:a7:b6:be:4b:
                    52:48:aa:c1:58:84:2c:20:72:26:76:67:e9:09:ed:
                    4d:06:6c:ba:61:0c:bb:53:ff:de:f4:1a:96:22:01:
                    ea:e3:e0:9e:20:17:ba:65:f5:98:c3:ab:18:e1:eb:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:1C:D9:5A:1E:67:8E:E8:9B:DA:87:57:20:E5:89:BF:E5:2B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/38304816-5eea-39ab-acb2-b677f9968138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:cd:0a:74:7a:38:65:da:47:58:f4:b1:74:1f:c2:21:a4:
         ae:39:9b:c4:59:1b:64:9c:8c:0f:8c:20:12:3d:8c:b1:08:20:
         7c:6d:d2:16:48:b6:aa:46:4b:eb:8a:40:4c:67:d0:17:60:26:
         89:a9:59:8b:87:4c:8a:a6:7d:ea:41:2e:1b:1d:bc:da:81:d4:
         e8:63:d0:ef:e4:92:ce:7f:55:88:28:23:50:78:c6:2d:96:8a:
         e7:ea:1e:c3:25:ff:8c:e5:37:5a:4b:98:90:a2:f2:19:5e:87:
         0f:c7:4f:50:35:d5:45:16:55:fd:08:47:41:c7:06:60:d0:35:
         dd:d0:f5:84:2a:54:08:04:b9:47:d6:c8:6e:52:ad:ff:3d:38:
         87:d6:f5:7b:6f:ed:ff:d2:72:5b:e3:80:14:74:a0:ab:fc:c0:
         c1:d3:ca:b2:38:f4:93:50:45:43:2c:57:36:02:3d:bd:72:b0:
         23:3b:92:dc:37:71:92:2a:fd:d6:8e:cb:2d:5b:a1:11:b6:de:
         75:ec:b4:18:bc:23:6e:09:79:98:9e:e8:ff:e2:49:95:99:e8:
         df:3f:08:e8:08:7e:4b:2c:62:d4:98:eb:07:59:3a:29:84:9c:
         e6:0e:6c:ab:cc:01:9d:58:e8:6f:58:44:1d:84:b5:1b:93:e3:
         e3:84:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:01 2026 by rpki-client