Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
File:                     d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa (raw, json)
Hash identifier:          oTuDcUNLgRCfTyezeUaesKcG1usWTj5IItM8P297vZk=
Subject key identifier:   8D:69:A5:A6:7E:13:3D:DF:AC:82:B0:D8:F3:50:58:88:E8:9B:FA:C5
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584E31CF11F44C9A84FF79F18580
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     11650
IP address blocks:        64.250.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:11:f4:4c:9a:84:ff:79:f1:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=623a41d2-89eb-4421-83ec-87f8266e4372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:a2:43:62:61:96:fa:06:eb:68:69:51:58:
                    07:f5:62:b5:d3:01:e0:af:d3:08:74:f7:4d:4c:76:
                    13:fc:b4:b4:6c:be:0d:ba:61:d8:3f:41:bd:49:94:
                    07:ec:e9:70:b3:16:aa:e9:6e:6b:38:94:8f:16:77:
                    34:ce:e3:b9:0b:e7:de:94:33:e0:30:dc:a4:e6:9c:
                    5d:36:5c:82:43:68:8c:60:d5:6c:d1:45:46:df:c9:
                    1f:70:f7:4b:5f:b3:f3:e1:4e:ae:30:f4:4e:88:96:
                    80:d7:70:3f:2e:56:55:13:94:61:b4:c5:b0:d7:ee:
                    53:11:4a:1b:47:8e:b4:11:fa:9f:a6:83:62:a3:56:
                    15:fc:23:81:67:6d:9c:57:37:51:be:56:7a:00:f5:
                    3c:6a:be:9a:60:93:30:78:c5:df:83:18:e7:7a:86:
                    70:12:cf:c2:d6:76:a1:79:ef:a9:69:f5:e1:89:f6:
                    35:e1:65:99:ad:cd:d0:f2:21:1d:a8:d1:ec:b9:51:
                    2e:f2:f2:bb:88:8f:27:cd:55:20:ff:b5:9d:85:6a:
                    5d:04:fe:05:ee:c9:53:d1:b7:b6:6a:a3:ff:13:6e:
                    07:ce:0f:a0:ed:10:52:27:52:8a:27:67:1c:4b:c8:
                    c9:ec:aa:74:6f:45:71:8f:21:3b:84:a5:57:a4:da:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:69:A5:A6:7E:13:3D:DF:AC:82:B0:D8:F3:50:58:88:E8:9B:FA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/d66ed68f-0caa-3f4e-87d1-362040bec7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:69:cc:83:27:d6:02:50:54:b7:06:85:c9:66:e2:b2:cd:
         81:69:fd:c0:d9:6c:18:e0:1c:0e:00:38:f2:ab:45:13:22:c6:
         8c:20:ce:29:a8:3e:0a:fa:2a:27:1a:27:f0:60:bc:1b:f8:36:
         f1:a0:d3:38:5e:9c:d8:1a:b3:73:c1:cc:fa:ed:d4:07:c9:a0:
         ab:3f:b2:6c:38:7a:f8:d2:27:15:7a:83:28:76:39:1d:69:3f:
         e5:27:f0:6e:65:a4:dd:89:bb:9e:f4:c7:77:c3:d0:27:94:ab:
         5e:cc:57:dc:37:17:12:49:83:29:ed:3e:ba:2a:7f:9d:31:55:
         a8:8f:21:e4:83:3c:24:84:7f:9a:87:c2:52:50:b1:f5:ef:d0:
         7a:c6:60:32:8a:e3:22:0b:bc:1a:c4:77:4c:c2:d0:a1:61:55:
         6e:68:05:70:80:81:1d:1c:18:ae:5c:0c:45:3d:c5:65:86:9e:
         38:83:d0:54:3f:0d:d1:8b:df:8a:3d:0a:a4:c9:b0:e8:b6:fe:
         d8:8c:1f:48:86:1e:1a:2c:f0:9b:09:a3:de:11:9f:b2:58:82:
         03:a2:e8:4c:28:db:99:07:ed:65:7e:b9:05:dc:b9:ea:93:da:
         33:ac:29:f8:b5:4e:5d:cc:fc:bd:9c:b0:8d:f3:5c:7e:ef:4b:
         4e:03:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:04:23 2026 by rpki-client