Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa
File:                     250c85a0-cf56-385d-8e3b-9175af7edb61.roa (raw, json)
Hash identifier:          ReFg+eWp59Y2NIjY4TD87ze2obaQFSbI3IJZMD1UkYA=
Subject key identifier:   38:52:92:A7:2E:B9:60:46:A0:B8:90:77:16:B2:7A:07:94:33:54:F8
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E0A700975293FAB734A2B3880
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     25645
IP address blocks:        64.92.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:09:75:29:3f:ab:73:4a:2b:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=802f24e1-1699-43fc-b7a9-aa74bb8cc07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:0b:1d:7e:93:44:93:4a:d2:24:77:48:00:
                    db:f1:e2:0b:87:be:5f:eb:63:92:71:38:45:66:af:
                    8a:be:0f:e9:d9:89:67:75:63:26:96:c9:42:a5:4c:
                    11:23:3f:c7:4c:18:94:af:fd:ef:ec:2e:30:3f:05:
                    17:4d:87:bb:e1:7f:4d:88:b4:12:66:14:0e:11:f9:
                    d4:20:6e:4c:d5:3d:ce:2d:fe:22:0e:62:91:86:76:
                    a1:13:f1:83:1f:53:a6:3e:78:e8:47:40:96:52:64:
                    f5:44:ef:83:7f:3e:85:92:96:f1:72:8f:e9:15:76:
                    0c:da:1f:ec:4d:43:11:87:27:e0:d9:b2:b6:c9:b1:
                    39:f5:d5:b6:ef:f1:77:78:9d:86:60:42:eb:94:8f:
                    02:fc:7f:d7:c1:68:50:9c:d7:98:ab:1f:dd:65:77:
                    f3:12:a0:c6:4b:e1:4a:9e:40:e4:42:a1:5c:8e:ef:
                    13:20:45:2b:17:b7:82:50:6c:3b:ab:0b:7b:6f:23:
                    68:5a:a3:9b:7e:3f:2b:f2:96:b2:1a:d8:ff:4d:ab:
                    f1:00:77:94:9e:ce:2d:d5:e9:42:c8:de:2e:e1:aa:
                    24:2d:d6:75:7a:b6:4a:e6:28:ca:9e:02:66:1b:92:
                    a1:6b:0d:82:0b:68:1f:f7:7c:4f:20:e2:e7:90:b8:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:52:92:A7:2E:B9:60:46:A0:B8:90:77:16:B2:7A:07:94:33:54:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/250c85a0-cf56-385d-8e3b-9175af7edb61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:c5:99:36:e0:f0:7a:07:a4:2d:74:19:83:b0:53:65:9f:
         b0:34:08:0e:57:11:11:a8:7a:ba:af:7f:84:dd:91:a6:f3:ef:
         5d:1d:57:66:33:a1:8d:09:b3:d0:43:1e:3a:d0:68:22:28:f5:
         ec:4b:8a:14:b5:12:d3:f6:43:f3:8d:d6:6d:aa:12:69:8e:1a:
         ce:03:3e:1d:58:d6:77:80:88:68:00:de:36:17:34:36:ff:ce:
         a1:43:d5:12:a0:bd:13:08:9d:a8:a4:55:e1:67:15:39:d1:6d:
         4f:9d:e0:c0:38:2d:94:f0:04:85:e1:44:d4:aa:ff:98:f5:67:
         74:ac:bf:7b:ca:73:57:a5:67:a9:6c:82:3e:b8:fa:97:87:d6:
         30:3f:6e:c9:73:f2:38:a1:83:00:92:81:49:44:3c:d1:b0:11:
         f6:35:b9:8d:63:fc:35:05:ff:32:e6:0f:bf:cd:86:b8:e6:a9:
         e7:32:12:35:43:f3:c8:42:93:f4:d4:c3:9b:e0:95:f1:b8:56:
         70:0f:1f:6d:ea:a7:38:d6:21:39:91:26:71:ca:8b:98:1f:5c:
         b8:6f:12:c0:26:bc:f4:1e:c8:34:d7:69:c4:40:2c:dd:47:83:
         35:ee:70:e7:6e:4e:5b:25:4a:65:58:dd:e3:a4:a1:11:4c:b8:
         41:24:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:36 2026 by rpki-client