Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa
File:                     0efa75e2-cd2b-36ec-81d8-1737411c5361.roa (raw, json)
Hash identifier:          xCJrKxprugi1zr0rHHmaVGT4OwFkFcsh7PrzDXlQuD4=
Subject key identifier:   2D:B2:C8:58:19:A8:9A:35:00:65:CC:F0:00:24:A2:04:69:56:3D:2B
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584E15E4943DC6886E000F372800
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22079
IP address blocks:        64.136.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:94:3d:c6:88:6e:00:0f:37:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=0a0552e2-9e8f-4aec-9e06-871c4290df0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:43:bb:3a:2e:78:29:e4:e8:ae:60:6c:00:
                    5c:10:07:f1:12:f8:2f:ed:e5:57:8e:24:c2:3a:f5:
                    84:86:57:e4:62:30:b6:81:3a:7f:d3:78:3a:98:99:
                    e2:b9:64:ba:a6:32:7f:ad:99:e2:6a:6b:8d:ec:f7:
                    2f:0c:e7:73:e9:1c:21:06:23:53:81:66:e4:85:f8:
                    74:98:5c:a8:71:c8:95:8e:eb:53:fd:e4:e9:07:f5:
                    9f:76:23:4c:d9:68:03:8f:19:b5:72:79:12:36:5e:
                    09:e5:74:bd:24:91:33:a0:a9:5b:6b:49:01:c0:31:
                    3c:b4:a7:52:dc:8d:9e:18:93:c6:d9:9a:07:49:93:
                    da:9c:14:b6:87:9f:4d:f4:71:48:1b:a7:f9:01:d2:
                    b0:c9:43:2e:8b:4a:30:ff:47:6a:c8:ce:9a:a5:48:
                    71:06:37:ad:f7:a2:22:da:77:8a:2b:ba:de:35:7f:
                    47:d0:31:7d:9b:30:ae:0a:de:8a:42:83:d0:a1:98:
                    d3:b8:53:b8:f9:62:b5:ef:cc:b4:cc:a1:da:e3:ff:
                    b4:cd:13:ed:2a:0f:5e:4e:99:13:82:8d:a7:09:14:
                    2b:03:fd:a3:4b:c2:cf:0e:16:50:66:59:ed:96:60:
                    61:02:2e:58:e8:c7:7b:b9:02:dd:7c:69:b0:bb:3b:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B2:C8:58:19:A8:9A:35:00:65:CC:F0:00:24:A2:04:69:56:3D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:83:9b:21:be:44:5b:04:7f:6b:7b:e3:98:a8:c5:4c:a2:53:
         97:da:aa:6b:d2:a2:92:52:e8:bb:49:d0:32:b2:f3:9f:09:a7:
         31:12:52:25:87:f7:14:05:89:ff:b9:01:e9:f3:0f:24:00:15:
         90:49:d5:b2:1c:78:3d:38:4f:90:f5:79:26:05:7c:df:1f:34:
         43:17:7f:06:dc:33:28:e1:19:7c:9a:d2:a8:e5:20:37:57:79:
         5c:bb:9a:3d:77:bd:91:28:59:f9:25:79:88:27:e9:cb:60:02:
         b1:d8:87:1e:4d:21:b3:19:95:f9:f3:0c:6d:21:c9:7e:78:5d:
         ca:52:be:b7:c4:a8:23:23:22:69:23:c0:09:78:a2:6e:f0:a5:
         cb:45:da:97:ef:5c:5e:2d:cd:af:b6:af:b5:3c:16:8a:c6:3d:
         ab:f0:31:31:51:4b:08:3f:6a:76:49:13:83:b2:64:96:99:17:
         77:4d:20:91:5a:af:5a:e2:05:7d:32:02:1a:33:04:d7:1d:ee:
         8a:7a:ef:c2:0a:f3:99:5c:e5:5d:84:77:3c:bb:a2:ac:65:ca:
         8b:87:be:21:ec:08:b8:7c:61:1e:89:aa:2f:24:28:b9:a4:1e:
         b2:de:bd:a3:e2:cf:9c:c9:a5:f8:30:4a:b2:ca:6a:c0:8a:9d:
         b1:69:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:47 2026 by rpki-client