Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa
File:                     ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa (raw, json)
Hash identifier:          U06eWg1MCBBE9XZ4MAhc9ruo/jsH6Lx7FY/vangpEIQ=
Subject key identifier:   32:38:BE:8C:11:00:E5:7C:47:EA:C1:A8:19:FE:1B:46:AD:07:A4:10
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584E0C1ED61784AF9EDD834C7D00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     11090
IP address blocks:        64.4.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d6:17:84:af:9e:dd:83:4c:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=d8086ad0-e70b-4667-9e3e-1aa64370acf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1e:15:18:eb:b9:ab:09:47:6b:dd:7e:15:28:
                    c7:d0:90:f6:1b:1d:3b:2d:1f:90:5a:27:24:b6:9e:
                    99:5d:40:d9:f8:be:4e:63:9d:df:7d:03:aa:04:e3:
                    08:a9:3f:34:ed:6c:cc:b6:58:bb:f0:d0:1f:99:cd:
                    46:a1:e2:98:30:47:cb:99:5c:c9:6f:b2:68:43:99:
                    9d:11:68:54:76:1b:d4:a5:83:48:43:b8:5e:81:b5:
                    5a:91:e2:e4:75:73:9a:49:fa:9a:88:4d:53:8a:e7:
                    45:aa:88:17:00:7f:f5:0e:c3:c2:08:4f:37:4e:00:
                    9c:bc:04:33:79:eb:f3:37:ee:b5:b1:eb:25:59:ee:
                    93:35:eb:2c:4d:8f:c3:fe:ea:9a:51:20:e0:76:36:
                    4b:a2:67:35:fb:23:64:26:ec:9b:2e:e5:dd:11:45:
                    b6:d3:b2:ae:91:7f:a2:37:b9:2f:d5:cd:e7:5e:a3:
                    78:11:e0:f9:23:2a:fe:7d:7a:8e:e0:1e:24:c0:93:
                    84:37:3f:4b:79:6a:ee:9e:6a:e8:a5:98:01:d9:df:
                    56:1c:7e:db:9f:65:fe:e0:cb:72:2b:ce:0f:09:6d:
                    6b:59:b2:f7:90:52:29:c8:c3:e9:2c:57:78:27:9e:
                    78:e0:01:fa:de:58:5e:7a:d9:7d:aa:ca:3f:3d:72:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:BE:8C:11:00:E5:7C:47:EA:C1:A8:19:FE:1B:46:AD:07:A4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:f0:df:d3:92:6a:13:ae:f1:80:a9:9a:56:9e:c8:c8:37:
         c7:d6:44:7e:d5:06:ce:69:55:d6:aa:1f:2a:ab:73:d4:e5:28:
         46:21:54:22:72:7e:d2:93:68:c4:26:cc:50:a7:4d:eb:fa:00:
         77:6f:23:75:5b:28:2f:68:b6:68:cd:55:23:6d:be:68:0d:33:
         24:86:38:44:30:ba:c7:ff:b4:3d:15:cd:bc:2b:6a:43:31:5a:
         57:ad:ad:95:e5:dc:45:e7:83:bf:5c:c0:75:79:62:7c:80:7d:
         8a:97:08:77:f4:88:ed:5b:3b:a8:c5:da:64:46:60:e4:78:44:
         29:4e:fc:d7:31:cf:8d:fc:6a:47:66:9f:46:6a:b4:49:ae:c6:
         c6:4e:00:1b:4b:cd:7e:b0:78:42:72:e8:12:7d:d7:57:0b:67:
         f8:13:b0:5b:a8:05:82:7f:96:09:69:a9:38:3e:79:b3:1d:14:
         48:b6:d0:29:be:d5:6e:38:b3:ee:e5:08:74:2d:94:78:99:29:
         75:49:24:55:bc:61:5e:ff:d8:1b:70:24:bc:c0:c3:8c:5a:27:
         90:d7:ea:e8:05:0d:7c:1b:e5:ad:05:14:4b:20:5a:8a:a4:85:
         7a:03:a9:36:37:22:83:31:54:6d:fd:db:3a:11:1e:14:67:61:
         31:97:16:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:10 2026 by rpki-client