Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa
File:                     8484361b-712c-3a89-ad3e-849ce795eb08.roa (raw, json)
Hash identifier:          lc7AxwOZW6n11l7laM9aZPUNJeOoN3rlz94QKeWQHLo=
Subject key identifier:   6B:62:51:31:1B:61:E6:19:F2:58:9B:B1:0A:A8:89:A7:63:9F:98:D8
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584D00B278F8A33AC1A316797E40
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     12055
IP address blocks:        64.25.213.0/24 maxlen: 24
                          64.25.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:78:f8:a3:3a:c1:a3:16:79:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=1b0fd0e3-3a93-466c-9513-d7f30df40dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:8a:0c:d7:76:2d:e0:f2:99:7a:f1:89:51:
                    71:94:54:13:72:3b:c8:71:41:87:7c:c3:73:84:5f:
                    76:f0:49:4e:b8:36:ca:c5:6c:a2:be:de:9a:b3:67:
                    7b:79:4f:bc:ee:d3:c5:20:40:df:f9:3a:c1:31:fa:
                    b2:7c:d7:14:ed:a8:dd:2a:db:bf:aa:de:ce:a1:bf:
                    3d:9f:32:2d:dc:94:e3:f0:db:70:ac:56:61:c7:1e:
                    b8:dc:82:f4:df:a9:8f:03:23:fb:eb:2f:d0:eb:f4:
                    c3:b7:ba:07:33:e3:4a:8f:c1:12:1d:ad:de:0d:6f:
                    3f:79:10:d1:50:6d:e7:46:e4:0e:71:0c:13:96:c3:
                    26:8a:01:2d:95:0b:08:4e:af:de:dc:2b:98:8b:0a:
                    e5:70:a9:a4:14:74:3f:95:66:be:c8:0f:6a:43:07:
                    33:a7:aa:1d:dc:fc:7a:dc:b9:c1:e8:8d:14:d8:b8:
                    1a:dc:15:25:3c:6d:95:27:f0:0d:00:71:5c:ee:a6:
                    3a:96:e3:fa:c8:0f:a1:aa:fa:7b:13:8b:f3:3a:e5:
                    d1:d5:b6:3e:23:0d:03:b2:95:fe:5a:a7:b7:52:7b:
                    95:b1:00:cf:17:6d:41:de:62:19:e0:30:c3:f4:8b:
                    75:d5:2a:dc:87:63:c8:34:ad:d6:e3:3c:d8:bc:f4:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:51:31:1B:61:E6:19:F2:58:9B:B1:0A:A8:89:A7:63:9F:98:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.213.0-64.25.214.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:a7:95:40:9b:35:fd:66:bb:ed:8e:bf:a3:fd:cd:55:ef:
         c3:1f:47:10:73:ff:b8:20:30:db:21:d6:79:c4:07:0c:b4:e6:
         82:c2:f5:cd:73:5d:98:2c:d0:0e:45:78:aa:73:c1:15:af:96:
         42:c7:75:5e:6a:64:e6:cd:96:61:63:53:05:2f:fc:da:6b:f0:
         bb:de:75:3e:bb:ab:e1:fa:02:b6:0c:39:45:08:b7:e6:dd:f7:
         55:70:ca:b5:a9:43:a0:d8:e1:2b:4e:e1:b9:0b:b5:65:2d:a5:
         2d:b2:84:76:04:b3:38:57:78:44:e5:63:57:ca:b1:35:0f:ba:
         14:d8:79:48:9a:be:74:6d:b7:97:0f:7a:8f:d7:8b:69:fa:df:
         5c:85:47:08:11:fe:28:62:1b:92:78:3f:0b:e8:b2:de:ce:f6:
         74:d7:37:3c:1e:70:e6:40:a2:92:56:19:32:72:27:12:67:af:
         f0:79:b8:c0:6b:1b:61:17:94:f1:f2:af:63:70:d0:89:8e:2a:
         c6:79:63:1b:7c:d4:bc:55:9a:c5:d5:16:c2:07:b6:dc:ff:09:
         06:d5:98:ec:e1:75:6d:09:57:ad:56:e9:d5:59:03:fd:f3:00:
         ee:0e:df:4f:e2:53:6c:67:a2:9e:cf:d6:fc:37:b8:f6:4b:11:
         ac:e2:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:24 2026 by rpki-client