Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa
File:                     e30a3058-e90a-3007-8755-87cf5d7490e9.roa (raw, json)
Hash identifier:          y3vskuwCFb6KctN2YvsqUBzG2NfqjrORfj2GYt/EfjI=
Subject key identifier:   DF:7D:D3:58:DB:6C:AB:1B:83:59:FA:3B:73:1E:36:D0:06:3D:FC:17
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584E15E478A37D5E0B030F9E2480
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22079
IP address blocks:        64.136.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:78:a3:7d:5e:0b:03:0f:9e:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=ebf22307-2655-48d5-94c7-7d681bec92c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:bc:e2:4b:08:ff:a6:39:33:0a:82:cc:eb:
                    70:74:c2:40:a0:e8:af:80:5b:85:15:cb:9a:76:04:
                    f3:65:85:5d:87:8b:51:d4:23:e2:6a:06:ea:4c:f6:
                    08:8b:a7:4e:23:51:e2:a9:e5:4f:32:84:9a:fc:3a:
                    5f:88:b7:15:fd:93:d5:1e:84:fc:85:9b:e4:88:c3:
                    9b:32:12:b8:6c:d6:7c:08:72:6d:33:3c:8f:f6:2f:
                    f7:f9:12:ad:97:43:76:bb:2f:5d:1f:17:7d:75:f8:
                    8e:fd:47:9d:b9:6f:85:fc:1c:ac:73:b3:3f:a0:57:
                    e2:12:f0:b8:39:53:28:f5:de:c2:8a:6f:3f:11:4e:
                    a8:ff:fa:f1:90:47:11:53:68:f6:34:d8:39:fd:60:
                    b8:bf:09:0b:11:c0:c8:3b:ad:28:5e:47:52:6f:11:
                    98:02:1e:07:f0:1c:d6:41:eb:ce:81:4d:da:67:54:
                    dc:47:ee:98:f0:e2:29:a9:ee:51:1e:4e:f7:9d:b8:
                    c1:94:86:7b:f8:a7:dd:47:4c:56:b1:8a:06:d5:b8:
                    94:e2:05:83:5a:67:a9:ee:de:24:2b:4e:fc:d5:0f:
                    83:c6:ec:5f:82:de:68:29:5f:a1:d6:9d:40:90:c8:
                    b7:fa:0a:dd:ae:fd:92:e8:51:1e:c9:af:b7:f6:06:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:D3:58:DB:6C:AB:1B:83:59:FA:3B:73:1E:36:D0:06:3D:FC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:16:0c:1a:e3:82:b9:16:d9:ac:55:f1:bd:01:f4:8d:d7:85:
         d2:7b:71:2a:c0:6f:c9:a4:ea:95:8a:f0:85:41:54:59:ef:cc:
         13:b0:3d:cb:fb:6e:7f:e0:5d:ac:b6:02:57:a4:51:3b:01:e0:
         e2:1e:f6:3b:66:7a:06:f1:ae:72:6c:d4:73:1c:ee:d2:3c:75:
         68:67:79:c9:e4:08:07:d3:5d:72:58:9f:10:68:5f:6e:a5:7c:
         4a:25:ff:b5:79:6c:df:c2:40:6c:39:a3:35:fd:7d:a9:f4:fc:
         4d:13:99:00:a8:31:c8:9e:0e:31:90:bc:a7:1a:5c:41:07:8d:
         aa:bb:2a:9b:8d:99:b5:54:f6:e6:0f:29:27:62:b4:15:a7:91:
         fe:78:2c:61:63:fa:db:44:ec:b1:8e:8f:3f:2f:1c:79:39:49:
         b0:38:b4:3b:b9:3a:ca:18:58:63:bb:ab:e5:d3:ef:83:a4:fa:
         3a:52:a6:8f:89:d1:9e:11:b6:25:32:30:ba:18:54:99:68:b5:
         bb:b6:f0:03:eb:6d:00:22:2f:9b:52:b3:19:8f:04:c1:92:8d:
         61:2f:12:a7:5e:cf:f6:37:ca:a2:32:7d:a4:8d:a9:d2:28:50:
         b5:ec:90:da:3e:2b:9b:c5:9e:d0:92:ce:cf:c4:48:9e:48:b5:
         cb:06:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:43 2026 by rpki-client