Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/3bc9e8e9-9e98-3547-bdd3-075b349e1f62.roa
File:                     3bc9e8e9-9e98-3547-bdd3-075b349e1f62.roa (raw, json)
Hash identifier:          S4Fmt/c9yLMVjHsxqskO73sjmIVzQMPdnYGWVP2RseA=
Subject key identifier:   E5:2B:67:6A:2A:1B:92:BB:F2:5D:73:26:EA:69:21:65:BC:98:24:6B
Certificate issuer:       /CN=371eb60e-706e-49df-ab2d-603b6a056c68
Certificate serial:       010D0C9F4328584F0C1F2D36EFCD268DB259F440
Authority key identifier: 89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/3bc9e8e9-9e98-3547-bdd3-075b349e1f62.roa
Signing time:             Thu 03 Sep 2026 01:47:58 +0000
ROA not before:           Thu 03 Sep 2026 01:47:58 +0000
ROA not after:            Wed 02 Dec 2026 02:47:58 +0000
asID:                     16509
IP address blocks:        64.239.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:1f:2d:36:ef:cd:26:8d:b2:59:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371eb60e-706e-49df-ab2d-603b6a056c68
        Validity
            Not Before: Sep  3 01:47:58 2026 GMT
            Not After : Dec  2 02:47:58 2026 GMT
        Subject: CN=ed14e918-b252-4ec3-8fc4-77c4cd2e259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:09:d6:6d:63:6d:ca:31:aa:ef:e1:af:2c:
                    84:94:2a:7e:58:d4:76:75:1f:1c:56:26:b3:f5:ee:
                    ef:52:e4:f4:d8:9c:4c:be:33:bf:c2:c6:ea:53:c2:
                    57:c9:66:73:e6:1d:31:64:95:77:49:36:9d:9b:a2:
                    0f:40:ba:6f:60:92:93:64:b7:e6:f5:c5:35:d0:5f:
                    3f:8c:af:78:f9:48:e7:2e:6c:04:cb:07:85:12:b9:
                    c7:4a:75:fa:d3:95:4f:d5:23:0f:2d:41:85:7e:78:
                    a4:65:ee:a1:b4:8b:56:47:d5:bf:39:f5:6c:d3:00:
                    97:43:12:4e:fc:ce:83:de:7d:e1:37:14:cc:1c:3b:
                    1a:36:6a:c9:24:f8:e4:7f:04:8f:04:17:d2:b0:3f:
                    08:4c:9a:40:b1:2c:3a:29:05:f6:a9:18:68:9c:16:
                    69:03:8c:85:45:95:3c:27:f6:95:84:fa:1f:ee:de:
                    8a:61:a0:fd:ea:b5:92:e2:ae:ec:9a:54:58:d6:05:
                    63:1b:1e:bd:19:6a:30:3c:dc:29:cf:72:cb:a6:4c:
                    13:98:7a:17:28:a2:95:05:ba:2f:5d:2c:4b:26:de:
                    e2:5a:ca:83:7e:f3:27:6a:96:88:bd:3c:b0:d9:ac:
                    ed:b0:de:c0:ce:e4:be:21:bc:7d:49:7b:0a:95:db:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:67:6A:2A:1B:92:BB:F2:5D:73:26:EA:69:21:65:BC:98:24:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/3bc9e8e9-9e98-3547-bdd3-075b349e1f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl

            X509v3 Authority Key Identifier:
                keyid:89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:d3:82:38:6b:0c:91:0a:51:61:9f:ad:b9:08:7e:45:82:
         e6:48:b8:82:88:be:e5:00:a1:d5:ef:7d:63:eb:08:b2:fe:f6:
         0b:73:39:12:39:fb:11:34:33:3a:93:ce:b6:b3:ef:70:b6:e6:
         83:d9:2d:d6:77:4a:95:ff:dc:30:f7:80:75:d3:af:65:08:9f:
         4f:d6:73:15:64:d8:f8:63:8c:5e:29:39:39:35:65:34:10:ad:
         3c:95:5e:d1:b0:65:64:fc:25:af:1c:e4:fa:5d:68:70:2f:f2:
         87:b1:6a:b5:05:ef:e9:47:3b:f3:53:78:fc:94:11:ce:db:6d:
         23:1a:ac:df:33:4c:72:a8:cf:20:6c:4d:73:14:52:e7:80:6d:
         e5:75:7a:e2:9f:b6:21:51:9e:06:92:4d:78:92:29:e8:a5:59:
         1a:ee:5e:f1:90:41:db:4a:35:bb:bc:0a:dc:c9:f0:8e:4e:d4:
         ea:e2:bc:72:de:86:b2:7b:f5:61:fd:d7:7b:cc:e4:b2:12:cb:
         98:ba:12:e4:75:e6:4f:09:15:c9:c8:3f:a5:f4:76:2b:74:76:
         08:0c:26:5b:8a:f7:d2:d5:fb:1f:b5:ac:d1:63:55:ae:a8:fe:
         fa:51:54:3c:78:da:e5:29:1c:0c:83:92:b3:44:d2:a3:f2:a7:
         2e:0b:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:16:10 2026 by rpki-client