Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa
File:                     d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa (raw, json)
Hash identifier:          zUnD/sSj03E/Iyr9rjFZmGVPfYvHuAc1RL1xlytNekA=
Subject key identifier:   49:FB:F4:7A:AE:44:E9:4C:41:CF:28:EA:C8:0B:6F:FA:CD:00:B3:89
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584D6EDA595E2A18D5546F28BB00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     25645
IP address blocks:        64.92.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:59:5e:2a:18:d5:54:6f:28:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=8b3db405-d729-4f6c-80ee-231d09b164cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:82:45:b6:7f:3b:42:27:6d:53:4a:a1:69:
                    31:22:a8:4e:b6:df:03:3d:e5:7d:f7:01:c7:aa:88:
                    1e:f8:28:a3:22:a8:f9:44:2c:4d:bd:98:0a:4e:81:
                    a7:af:40:8f:87:4d:93:e3:13:4e:8b:13:c4:35:b9:
                    8d:35:21:58:89:f2:54:ec:b2:cb:39:a1:b3:f9:18:
                    48:03:36:4c:8b:7e:ff:25:bf:12:76:10:f4:1f:0a:
                    d0:c1:95:ef:ed:8d:cd:6a:c4:53:66:3b:f6:6d:ec:
                    35:20:7a:55:28:d1:fb:d8:7a:ba:38:73:ac:47:46:
                    56:51:ee:d0:c8:6a:a7:65:0f:4c:bb:87:7d:d2:59:
                    97:f5:43:1a:39:f9:53:56:4f:b9:d7:22:99:43:21:
                    a3:92:31:dd:58:f0:35:c0:67:9d:20:5e:f8:34:5d:
                    33:e0:48:d9:61:82:5a:f9:75:18:03:b3:a3:c3:dd:
                    32:40:2e:17:e3:e8:da:fb:90:8c:79:d1:d8:3d:da:
                    57:68:bf:03:13:04:db:ac:50:e7:c6:3c:bd:79:9c:
                    9d:49:22:0d:f2:11:d5:6a:be:70:99:f7:63:0c:7c:
                    b6:c3:f6:b2:20:5e:37:17:5d:2a:cc:63:5a:f3:85:
                    24:2c:72:85:5f:9f:58:23:0b:22:98:02:94:52:52:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:F4:7A:AE:44:E9:4C:41:CF:28:EA:C8:0B:6F:FA:CD:00:B3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:66:a3:32:48:96:ee:2b:bb:c3:cd:bc:64:db:4b:fe:88:
         b6:e2:33:63:13:7e:52:5b:cf:e9:a5:80:1a:37:0f:10:09:66:
         97:0a:1b:ef:78:50:ee:5d:ee:ee:60:c9:a6:b8:eb:bd:59:4f:
         54:56:e6:65:76:1e:7e:6d:de:4f:c0:bd:3f:d7:1f:a4:2a:0c:
         79:fa:58:82:db:1d:54:b4:91:3a:03:fd:c8:20:aa:77:f8:f0:
         c4:cf:66:1e:fe:4c:25:08:c1:57:5f:a4:87:ad:a5:cd:e9:a5:
         43:63:1b:b9:09:70:3b:c4:88:77:b5:c9:ee:28:d2:ad:7b:e0:
         ed:bf:67:17:be:47:14:0f:c9:77:aa:01:7f:e1:e2:fc:1e:d9:
         f8:31:9b:4d:5f:1d:cc:52:24:db:85:f6:84:eb:60:b9:2a:46:
         af:0d:09:80:2e:ff:6d:1c:6c:eb:05:06:fe:79:b1:6a:9a:32:
         2a:63:41:a3:74:7a:7b:f0:c1:8c:65:4a:26:08:dd:61:1d:fe:
         d2:dd:e8:51:38:4c:0b:f1:00:fa:61:42:6a:28:48:5d:53:3f:
         1f:70:cf:b8:2a:e3:bf:f3:c5:32:18:89:7a:57:5f:46:95:cc:
         48:d1:71:de:00:03:09:97:32:32:76:fc:47:25:8a:f3:62:1f:
         ed:50:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:00 2026 by rpki-client