Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa
File:                     6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa (raw, json)
Hash identifier:          gJgsngz2n3X738R6WSz9DIBIaQtHXZzUQsZS+6ARIxE=
Subject key identifier:   B6:5A:D3:08:54:2A:5A:0B:AC:A3:EC:18:D6:83:D5:C0:FE:1F:52:C8
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584DEDE09B029D8E75EEDA450AC0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     27539
IP address blocks:        64.68.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:9b:02:9d:8e:75:ee:da:45:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=1f245768-86de-4a85-8027-bd2ac907f757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:16:f4:db:e9:2b:a9:53:cf:fc:78:2b:9a:
                    c8:99:28:7a:66:62:e6:bb:b8:b4:cd:9f:8d:e8:07:
                    77:ea:80:36:90:d3:90:d3:f8:b5:3f:1a:e4:37:a2:
                    dd:7e:77:5e:75:83:39:fe:0f:1a:8f:7d:fb:6c:a3:
                    c6:db:6e:bf:6d:fa:86:87:89:fa:73:98:ab:32:e8:
                    d9:55:a2:d7:b7:d8:bb:27:63:8a:2d:2a:8e:84:aa:
                    a7:fa:9a:c1:05:90:42:34:89:2e:37:06:3d:8d:a1:
                    ee:b8:7f:b3:ea:c5:69:02:96:22:d2:8d:3b:97:4f:
                    b9:6f:9f:b6:26:df:ce:7a:60:dd:ed:d0:7b:44:cd:
                    8f:5b:ff:20:a5:48:42:1a:8e:78:7d:5e:31:83:fb:
                    8d:81:56:69:31:08:96:a1:29:d3:18:b5:4e:cc:8c:
                    35:10:93:6e:84:33:f3:6f:a1:bc:53:9a:ae:c6:e1:
                    e9:77:2e:be:b6:9d:f9:33:bf:1d:a6:83:ab:9c:a3:
                    ab:b7:dd:43:72:4f:2f:db:f2:7d:c8:59:f2:39:5d:
                    b7:1e:b1:4c:67:ee:dc:f3:64:87:70:3b:6a:07:3e:
                    21:48:c6:8a:56:f0:63:61:75:bb:f8:c8:85:34:98:
                    e0:9c:68:5c:35:47:03:87:86:c1:6a:55:43:f0:ca:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5A:D3:08:54:2A:5A:0B:AC:A3:EC:18:D6:83:D5:C0:FE:1F:52:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6817aef8-1d52-3bf2-b409-0ff7a00cc2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0e:9a:d0:d0:ae:d5:f3:85:ee:ce:96:d9:2b:69:ed:bc:13:
         ae:6a:3a:67:f9:31:ab:27:b5:90:7b:1c:f3:ca:73:d6:72:05:
         eb:87:8b:1a:5c:9e:d3:c3:f0:91:99:fe:82:3c:05:28:4c:ce:
         b4:4e:95:10:48:e4:09:7f:b3:44:fb:01:fc:6a:a4:6a:32:8a:
         cb:21:3f:f4:a7:8a:aa:52:e5:69:f3:6d:c8:c3:fa:42:38:1f:
         4a:ad:78:1b:0b:42:e9:39:1a:96:8f:a8:18:04:94:eb:2e:30:
         37:58:f7:a9:a9:7f:a1:1d:db:ed:a4:ef:6d:cf:2c:52:4e:85:
         74:47:01:ad:29:40:95:63:c9:ab:cc:1b:ff:17:1e:64:c6:0b:
         3a:01:09:f0:ed:9b:ff:3f:fb:04:2f:ba:2b:be:c3:5f:c8:a3:
         03:91:c9:66:44:1c:35:40:6f:ad:d3:cf:d5:59:ab:4a:7b:5c:
         ec:ca:22:0a:37:e3:d3:b8:ea:97:d0:b3:a5:ad:14:c3:93:36:
         28:f9:54:31:d9:74:e5:63:9b:97:c4:b8:3a:66:fd:11:cc:f6:
         b3:f8:fc:49:2e:29:ed:0b:45:b6:3c:e8:4c:c3:5c:01:87:d5:
         3e:23:9f:50:29:5a:b5:03:13:0f:09:10:c1:69:aa:57:59:3a:
         a4:7d:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:30:15 2026 by rpki-client