Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c2331f4f-421e-381c-8279-71892b2bb504.roa
File:                     c2331f4f-421e-381c-8279-71892b2bb504.roa (raw, json)
Hash identifier:          xxCZor+MbfMDMl6OoRBQ70Cp6uUFwjtqI1Tlu+FTVy4=
Subject key identifier:   3F:77:3F:B9:E5:F4:00:44:00:02:C2:B2:67:BA:4B:AC:13:B5:E1:F4
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584E15E48AEAE4789672DA649700
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c2331f4f-421e-381c-8279-71892b2bb504.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22079
IP address blocks:        64.186.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:8a:ea:e4:78:96:72:da:64:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=f8868daa-9611-457c-86e7-b12a6dde0c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:d4:15:b3:0d:39:eb:27:0a:7a:2e:83:3e:
                    0f:e0:a7:22:90:b2:4f:b5:c0:d7:0c:4b:33:d4:a3:
                    73:19:50:21:03:1a:d7:1f:67:d6:a9:e8:63:dd:9d:
                    cc:c7:07:44:09:4d:6b:d7:dc:f5:a7:70:76:ec:31:
                    6e:02:e0:9a:c4:d6:02:06:67:ad:b8:8c:93:6f:49:
                    6c:ee:e4:ce:ae:02:6d:7d:9d:c7:78:6e:db:9a:5e:
                    65:46:fe:7b:86:cd:cf:45:bf:aa:f9:78:e1:13:4b:
                    ca:62:d7:2a:4b:5e:de:f8:ec:ef:df:71:37:cb:c2:
                    40:84:80:38:17:24:db:86:83:f8:5f:17:80:f0:d7:
                    c5:b5:dc:e7:bf:29:0e:8b:b3:3c:0a:c6:d0:76:5b:
                    31:15:61:0a:ea:c5:89:c0:b4:37:7b:36:4c:6c:a1:
                    76:eb:66:41:d6:f9:21:d5:ff:37:f8:4a:63:74:6c:
                    55:5a:b8:f6:b6:ac:99:49:c0:49:ea:d0:7b:c5:cb:
                    e9:59:bb:a6:7a:b1:35:c6:b0:a9:31:18:d4:30:43:
                    ff:0e:0c:1b:c8:c0:64:96:a1:3b:7d:e3:12:97:5e:
                    c6:b2:be:67:db:be:0a:ab:e0:76:c9:b7:96:b6:4a:
                    b0:ed:1f:95:88:ea:42:85:9d:43:07:8b:e4:94:b0:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:77:3F:B9:E5:F4:00:44:00:02:C2:B2:67:BA:4B:AC:13:B5:E1:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c2331f4f-421e-381c-8279-71892b2bb504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:f1:9d:81:e9:f1:fa:6c:74:98:6d:d8:9e:89:87:10:8f:
         19:c3:48:8b:f8:d0:91:6d:90:dc:42:08:a0:43:bd:00:71:af:
         03:ff:b2:25:84:10:1d:1a:f3:d3:2a:2d:d4:61:0f:19:af:47:
         32:bc:e2:33:81:63:dd:bf:e1:0f:07:bd:ae:7c:ed:16:37:cc:
         7c:fe:53:25:a5:67:61:2a:ee:47:f0:55:f1:b6:72:79:4b:07:
         de:5d:b2:2a:dc:35:f5:64:f0:bd:c7:ae:86:96:8d:3f:c1:fc:
         ab:16:a8:19:a1:53:5e:ae:e1:4a:0a:13:ba:39:2d:c8:91:06:
         d9:f7:e6:09:b8:df:ac:6e:cc:cc:ba:29:33:57:46:c5:76:d8:
         53:59:43:57:f9:5b:2f:a9:c3:98:52:e1:5f:87:9d:3b:7e:c8:
         84:9b:c8:2b:1d:09:f8:ba:1d:c4:e0:23:e5:03:ec:10:21:1c:
         b1:60:69:4b:a5:2d:1b:de:d6:b8:1e:74:01:e5:ca:6d:89:a9:
         8d:ed:75:d0:ef:15:18:f4:b3:46:a7:fd:b0:dd:c5:5b:4a:75:
         06:36:52:96:39:f0:d4:02:2b:5e:e7:37:57:36:8d:44:9d:ff:
         3b:d5:e9:fb:4a:57:6e:67:e1:16:1c:b4:54:c8:40:28:78:2d:
         12:6f:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:52:19 2026 by rpki-client