Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa
File:                     64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa (raw, json)
Hash identifier:          H1WDPf2Sw7xvJD3xS7KXPPSnft22RknWTeoUWkr/3IM=
Subject key identifier:   A5:1C:C8:DC:2D:E1:F4:7C:80:B8:11:3E:C6:C7:B1:77:58:69:1E:14
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584E31CF11DC6F5EEABFD4C74300
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     11650
IP address blocks:        208.114.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:11:dc:6f:5e:ea:bf:d4:c7:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=a2234794-78b8-470c-8f24-00750760f178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5c:75:68:8a:ff:63:19:08:f8:75:6e:76:95:
                    fd:5b:f3:13:fc:fe:53:a3:c1:77:02:84:0b:74:6e:
                    de:a7:2e:e5:88:9f:b7:5c:c6:82:b6:c8:24:2c:67:
                    03:29:af:58:a5:7d:5f:9f:b4:6f:90:97:d2:3b:e6:
                    a3:ec:8e:4c:d4:15:7c:11:5e:c8:e1:7c:96:e1:81:
                    c2:2b:3d:96:26:e4:6a:b6:c5:d5:73:ed:26:5e:49:
                    17:38:e5:be:38:76:e0:ba:87:54:ac:f7:cb:4e:58:
                    64:a2:aa:9a:56:55:0c:60:f2:ed:5b:84:1a:d1:e7:
                    3a:cb:b3:be:27:d9:d8:ea:06:21:4d:b7:e0:ec:1b:
                    1b:df:f0:5d:5b:74:13:9c:ad:ac:b0:3d:77:ed:2e:
                    a7:b0:48:8d:bc:e3:21:7e:b7:62:5c:c5:6f:8d:79:
                    9e:97:ec:94:0f:52:a2:8e:44:f9:84:5f:c4:38:96:
                    1e:7d:d4:02:46:a5:81:e7:49:c1:3c:00:86:2d:82:
                    96:61:eb:65:21:9d:34:98:a7:5e:cb:0d:b5:52:85:
                    a0:d9:65:fb:72:15:92:38:68:49:81:cc:83:12:0d:
                    76:fb:2f:89:f1:84:01:da:f3:c2:ce:1a:1b:c5:8b:
                    d6:22:c3:b5:82:50:62:52:41:bb:5d:ab:8d:58:fd:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1C:C8:DC:2D:E1:F4:7C:80:B8:11:3E:C6:C7:B1:77:58:69:1E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:43:ce:c4:a4:92:b5:8d:b2:a4:ec:4e:50:85:38:e7:57:
         0e:ed:37:58:ec:35:9d:71:0d:ec:ec:51:7d:02:3c:6a:97:08:
         f3:fd:6a:e7:16:85:07:22:86:53:83:56:f8:03:ae:7e:f4:b0:
         67:27:3a:a1:68:8e:57:32:8f:71:3f:41:23:c9:c8:a3:ea:c4:
         6f:3d:57:99:e7:9d:9f:e5:be:08:4b:88:0d:24:ca:b0:f0:a5:
         29:bd:ac:2b:de:4e:4d:73:83:bf:7b:13:ad:73:ca:8a:50:2c:
         d2:e8:fa:0e:bc:d4:1b:a5:c5:e4:91:72:3b:97:5f:31:2a:eb:
         63:08:3d:c5:51:82:b9:cd:2d:6c:f2:67:a6:f9:c3:f9:3c:3f:
         f1:9c:81:3f:3b:d5:d2:ef:2a:57:aa:f6:47:bd:03:62:77:65:
         f3:4c:ed:ba:f0:cc:42:60:99:df:7b:0f:bc:ca:6a:43:48:15:
         a4:b9:ff:57:94:9e:40:05:c1:95:de:3b:5d:77:f6:d7:f2:62:
         5f:9f:5d:6d:b9:37:7c:2e:00:e1:23:cb:82:2e:89:d8:03:07:
         41:75:0e:0d:89:09:24:e4:01:d5:c5:dd:f7:07:46:74:49:ab:
         a4:3a:50:51:e2:d0:c8:2b:d1:d8:93:64:e0:fb:73:2a:ae:17:
         50:74:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:04:37 2026 by rpki-client