Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/13e262c2-078c-360a-bc62-13c256e26dc8.roa
File:                     13e262c2-078c-360a-bc62-13c256e26dc8.roa (raw, json)
Hash identifier:          y0EwIcHzN6TuAxg/t+mbA5PuLxmIS/n2VjCA9NXZ05A=
Subject key identifier:   D0:86:7B:20:64:DF:A1:67:00:AC:E6:D0:51:2A:34:DC:16:B4:39:29
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584DF640AA42FE8A1F271AFA0BC0
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/13e262c2-078c-360a-bc62-13c256e26dc8.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     11090
IP address blocks:        64.127.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:aa:42:fe:8a:1f:27:1a:fa:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=22c57299-cdb1-4acf-a825-5affc4eea6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:40:45:bc:f1:76:21:09:74:c1:4d:28:f0:
                    18:5b:26:7e:2d:96:70:40:f4:1f:63:0a:74:54:cb:
                    69:8a:a8:2f:42:df:d4:94:c2:7d:37:2e:f0:dd:13:
                    d3:d7:d3:e7:5b:31:69:71:fb:12:0a:9c:de:56:c0:
                    3f:02:42:72:9e:f8:0a:0b:7a:32:59:69:de:ce:25:
                    6a:44:40:a6:a4:f3:b3:e5:8c:3d:ee:25:ce:02:b8:
                    42:c0:eb:8a:d1:83:12:fd:2a:93:f7:89:40:c0:b9:
                    10:0b:8c:f9:0b:57:75:c2:3b:26:14:98:15:ed:31:
                    1e:1d:30:b5:31:a8:13:50:18:28:7c:ef:7d:72:ad:
                    25:05:a9:e8:0b:ef:06:26:96:0a:3f:ed:e5:bc:4c:
                    06:0b:9b:1d:12:f8:db:f5:be:a2:67:87:69:3f:b3:
                    a8:7d:d0:71:7d:6a:5c:42:57:64:b1:18:6c:b1:23:
                    3a:bc:dd:0a:b1:0b:5a:eb:3b:7b:39:28:1f:d9:99:
                    6b:bf:e8:b9:b3:0d:e6:f1:fa:fe:cc:56:6d:d8:e0:
                    d4:db:01:04:87:6a:76:72:fb:55:8d:aa:f9:c3:a6:
                    ee:ec:7b:0c:33:00:f8:56:a9:d1:61:b7:82:ef:40:
                    73:36:2d:89:ed:75:aa:04:54:30:24:42:86:35:0e:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:86:7B:20:64:DF:A1:67:00:AC:E6:D0:51:2A:34:DC:16:B4:39:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/13e262c2-078c-360a-bc62-13c256e26dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a2:80:52:0b:31:e9:a1:54:8c:9b:e5:49:50:d0:c6:f6:60:
         da:f6:db:4d:3a:2f:0b:e2:1a:88:f3:00:82:12:ee:f9:0e:45:
         d1:61:89:12:7d:10:e6:88:d6:fd:43:0e:a8:93:16:60:11:10:
         d5:8f:e9:9d:c6:34:57:6d:60:18:b7:5d:64:cb:b8:4d:90:76:
         31:7e:04:4a:03:cd:8f:a7:5c:4e:3c:3a:5f:aa:45:09:c2:ab:
         05:f2:c7:74:5d:f2:53:a2:05:72:b5:fe:b8:e1:64:8b:c0:a0:
         de:89:a7:c7:da:5b:9e:e8:db:29:a4:21:e6:fa:4d:2e:c8:40:
         cf:03:7f:bb:d0:bb:4e:19:7d:b4:c2:ac:fe:13:4e:a6:b0:5f:
         91:fa:df:8b:32:ed:6f:cb:56:0d:0b:02:6f:1b:07:71:d2:95:
         b3:ce:ee:0a:bd:33:fc:19:c1:0e:8e:fb:65:f9:82:09:21:1e:
         57:bb:60:b9:a4:96:86:9e:d0:79:47:9f:e0:56:62:9f:04:2a:
         ad:9a:6a:5b:8a:3d:59:df:79:d6:cf:ba:2a:e2:c6:f9:4d:12:
         75:93:d7:0a:91:cc:35:fb:af:9c:47:a8:1e:0c:fd:c0:1e:85:
         ed:43:83:bf:66:bf:e7:7b:5b:34:1b:f6:68:63:2b:6e:56:72:
         16:5d:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:54 2026 by rpki-client