Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa
File:                     4203a888-ffda-34ce-bf72-ac4a102906e4.roa (raw, json)
Hash identifier:          4vcvJqD8wl0MTOJteceMkji4n2IVxOe1PA7A72U8sh8=
Subject key identifier:   01:91:FE:DE:1A:53:AE:FA:6D:38:D9:CB:CE:24:36:84:36:ED:71:EE
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584E0C1ED5E6BC00AE6AA0A46680
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     11090
IP address blocks:        64.4.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d5:e6:bc:00:ae:6a:a0:a4:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=abf8263f-6715-439f-81ba-2d5631b3e0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:1a:2e:43:0b:b4:e4:1e:b0:45:c5:67:37:
                    50:52:cf:97:41:3a:70:0b:bd:2b:3c:7a:2d:47:ab:
                    e8:3d:ca:be:e3:b9:e7:21:fc:d1:7d:4c:b8:db:c3:
                    a0:5a:af:81:f5:d1:a5:b0:b7:7f:9c:8e:a7:65:22:
                    1c:f8:47:e0:ff:e2:9b:38:c9:78:d3:2c:99:68:9f:
                    32:7d:8f:a5:38:33:ef:ca:8e:e1:c9:86:80:bb:ab:
                    58:62:b2:ab:b4:aa:a0:da:9a:36:91:98:78:4a:45:
                    97:29:41:0f:82:4b:11:ac:8f:5b:74:cf:b6:b0:a2:
                    8f:c8:f0:1d:cf:ba:65:34:5d:fb:2e:fa:60:8a:3f:
                    c5:a5:e2:60:7b:05:51:31:d4:43:d6:3e:a1:98:47:
                    5d:80:b9:15:21:3e:99:42:99:0f:0d:17:9d:95:d8:
                    ff:07:ac:78:2c:44:31:07:0c:f1:55:ce:db:3d:13:
                    f9:c2:10:88:64:04:b0:06:5f:96:ac:a9:41:7b:ca:
                    a1:e4:fc:e4:5d:d3:6c:cd:7b:a9:60:7f:e9:05:bd:
                    79:8c:51:c8:e2:34:2b:f0:bd:04:6e:89:ce:60:b1:
                    15:92:6f:aa:64:b3:f8:4d:23:29:8e:a0:3a:f5:d7:
                    fb:ae:3d:f8:34:2c:23:66:ef:fd:ce:47:8b:59:7e:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:FE:DE:1A:53:AE:FA:6D:38:D9:CB:CE:24:36:84:36:ED:71:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:34:a2:4e:cd:b9:c8:ce:08:75:6f:53:af:39:01:9f:da:
         1a:0c:3d:c6:f7:27:f6:9e:a8:71:5d:d7:5f:d9:3e:3b:b0:9c:
         32:82:14:ab:cb:ef:f2:eb:57:56:89:d8:37:eb:e2:cb:b1:6c:
         68:18:05:45:97:0b:09:71:a5:07:bb:de:ae:c0:3a:2d:3b:26:
         73:cb:78:e7:54:4f:ae:0d:ed:2a:53:4b:c5:fd:d2:e4:40:34:
         8f:65:d5:fc:e8:50:2d:11:c8:0b:80:be:80:95:24:9d:ab:bd:
         cd:1f:0b:bc:7b:d2:10:b4:64:89:0d:8d:6c:c3:44:0b:a2:f2:
         cf:c0:b8:2f:ea:37:51:83:b7:ef:89:ab:51:f9:95:95:0e:4b:
         89:3c:ef:9f:dd:5c:d2:70:1a:0f:ac:12:b9:31:d1:d5:ec:47:
         c9:ce:9d:b6:bd:cc:32:94:1b:b2:1d:db:85:b2:17:c5:11:64:
         63:9c:91:0b:e8:68:16:28:d7:35:a1:ef:0c:b1:d6:f5:d5:a1:
         13:03:31:28:e2:19:50:07:94:04:15:36:af:48:25:32:f2:8b:
         26:ff:9d:40:86:ec:a0:9c:37:df:b1:16:8c:e5:b8:ee:82:96:
         1d:46:c0:71:11:db:a1:0b:ff:0e:49:96:80:4d:c9:dc:09:40:
         7f:ba:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:11 2026 by rpki-client