Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
File:                     9095152a-38e0-3430-998c-371744f1abaa.roa (raw, json)
Hash identifier:          hnpik95Lx8IOy7ixiXOGbuBn7gadhQQ4Uj53hGhHNfo=
Subject key identifier:   9F:03:BF:F8:BC:AF:6A:24:3E:D5:80:95:93:EC:58:3A:E7:EC:7E:04
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E2809B99AFDC777D1D3262360
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     25645
IP address blocks:        64.92.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b9:9a:fd:c7:77:d1:d3:26:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=f2e967ba-5b1a-4674-a05f-39f487a7cb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:fd:a8:c7:e2:3b:be:88:b7:5d:16:57:0f:
                    39:95:51:e1:48:b5:64:f7:e7:53:2d:0f:54:70:34:
                    89:fd:a6:d7:54:f9:69:01:c7:f3:e4:7b:b2:37:76:
                    8b:bc:d8:b7:ec:9a:1a:35:7e:b9:5e:67:44:f7:2a:
                    f9:97:1c:79:a9:cf:e3:39:e2:28:b8:b1:43:a5:ce:
                    bb:49:ea:b2:2b:45:70:8d:cf:cf:f3:4e:41:62:87:
                    bb:da:cf:bc:d0:d3:73:bd:c4:00:91:2e:a4:33:09:
                    11:ae:25:c2:73:ce:49:f8:34:0c:cc:2c:0f:6e:9b:
                    26:f8:1d:4f:7a:2b:cc:d1:b9:27:a2:d2:c2:f2:cb:
                    48:31:2f:e0:7d:4a:a7:b2:ea:85:fc:ac:aa:2c:7b:
                    b4:f4:3c:d5:29:87:ce:26:9d:c1:e9:a0:a1:20:53:
                    d3:21:84:f1:b0:eb:4f:29:86:1b:81:fd:b9:5b:39:
                    46:dc:81:d8:3c:f1:07:c9:2c:fc:cd:ef:5d:34:c1:
                    6d:7e:61:8a:e0:3a:cd:05:61:f2:fb:5a:ca:a3:f2:
                    2d:8a:c1:48:05:b2:37:e9:28:1e:cb:82:27:78:33:
                    4d:4f:67:9e:f6:9d:87:e2:92:46:18:4b:92:95:54:
                    a3:73:f2:2c:49:de:14:f9:fc:b2:b7:f8:fa:25:49:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:BF:F8:BC:AF:6A:24:3E:D5:80:95:93:EC:58:3A:E7:EC:7E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:b0:12:c5:3d:64:46:11:32:a5:17:e5:83:e8:39:50:cc:
         f2:d4:08:b8:3e:68:50:6d:45:8d:fe:15:91:ee:51:9d:8e:19:
         d1:8f:ba:9e:84:3c:4a:5c:f3:f1:6c:ac:ec:c9:ef:3b:2a:d9:
         a0:ab:53:54:fb:b3:c7:5f:11:f2:34:42:a4:a3:e5:c6:5e:2d:
         e3:b6:54:02:78:e3:6c:18:f8:b9:ce:87:52:77:28:28:fb:06:
         10:82:10:4e:38:b5:7a:b1:05:13:2b:82:33:97:b4:34:48:07:
         a7:4c:51:92:62:ab:8e:ff:d1:4d:24:0e:4c:ed:f0:d8:2c:b1:
         55:f3:68:94:cc:d8:fb:29:e5:83:55:8e:e2:8e:da:2f:17:39:
         3c:09:5a:a4:e0:3f:22:cb:90:34:85:0e:e6:dd:08:6e:75:ee:
         33:7a:3a:fa:9e:94:33:0e:1f:2f:20:7e:30:32:0b:86:cd:ed:
         9f:34:38:0a:ac:1b:10:ce:cf:95:43:23:f3:b7:f8:7a:02:8e:
         38:e1:f6:57:18:69:b2:01:8a:f9:c3:a8:92:40:ed:b4:86:84:
         3e:da:42:e6:ad:8f:7a:f5:e6:d8:67:03:df:ec:37:e3:5c:cc:
         d8:b2:7b:0c:21:ea:98:d3:aa:02:bf:ef:e3:55:b2:33:9f:b5:
         5b:24:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:44 2026 by rpki-client