Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa
File:                     96ff3873-db62-363d-9266-eb3debfc44a5.roa (raw, json)
Hash identifier:          cTRCIt4DKOVN6Tr7G/KAZ8Whn5zV1DoZQbnqDIx8MAc=
Subject key identifier:   CA:76:1B:8E:EF:11:65:67:FD:6B:ED:9C:75:E3:83:D2:D3:97:5A:C5
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584E016B3139AE64D00DAF17E800
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     213122
IP address blocks:        64.112.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:31:39:ae:64:d0:0d:af:17:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=55d82eff-3a98-4ac4-8bdf-07a886b900e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:52:60:7f:2a:14:6c:2f:dd:0b:31:8f:20:
                    4a:a0:86:b1:d6:a2:57:43:a0:32:13:48:e8:53:b7:
                    67:30:55:3b:9b:4c:d2:44:01:2c:05:f5:c4:e6:c4:
                    74:af:df:23:ba:6a:2c:2d:16:32:bc:0d:26:33:6c:
                    b9:ab:56:b0:8d:0a:70:2f:12:ec:7f:47:af:26:f8:
                    aa:01:34:f9:97:06:05:f0:a0:12:52:86:0c:cb:58:
                    c3:cc:ee:4c:c9:40:3f:1e:46:77:16:6f:38:74:32:
                    a4:20:4f:88:c2:81:96:49:79:14:65:8f:ba:84:25:
                    95:ba:93:2c:3e:94:c4:5f:4f:38:90:62:da:99:70:
                    3d:02:29:82:d6:af:6c:a2:f0:52:f9:b9:06:4c:0b:
                    32:11:3a:db:a4:f9:c2:3c:da:9d:05:f3:37:40:55:
                    b2:d1:46:4d:ed:a7:bd:40:aa:96:c5:45:91:03:19:
                    29:97:27:86:49:90:04:55:1b:21:e7:04:f2:3f:29:
                    15:ff:78:cc:c7:11:24:0e:2c:ed:67:47:91:bc:46:
                    e5:c7:52:33:3b:87:30:17:d2:2a:06:e4:33:2c:50:
                    c0:f0:5e:53:10:1c:ee:3c:67:80:eb:39:46:70:13:
                    5b:b1:e3:de:23:5d:02:ce:48:51:8f:ba:02:6d:fb:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:76:1B:8E:EF:11:65:67:FD:6B:ED:9C:75:E3:83:D2:D3:97:5A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:39:0e:1c:50:d8:9c:47:e9:48:9f:71:43:50:74:e8:b8:
         de:6d:80:f9:f1:52:3e:31:d2:37:17:ec:13:c9:d2:87:e9:1f:
         16:e8:d6:a3:e8:8b:1a:06:a0:6b:97:d5:66:f1:18:0d:34:30:
         0e:16:e4:bc:d0:65:6e:87:a7:6e:6c:17:51:04:4b:5c:ed:50:
         bd:88:a1:63:75:95:87:79:92:83:4f:b0:6a:66:3a:72:de:30:
         b3:5d:0f:e3:fe:15:44:d8:b2:f2:22:e1:64:eb:5a:06:da:30:
         d1:de:21:9f:d9:e3:f3:d3:8c:70:e3:36:f8:11:4c:a9:a3:ea:
         0e:46:a8:87:f6:e7:2e:0c:99:f4:c3:59:5d:b5:1b:5e:f9:c3:
         dc:14:ed:d7:aa:84:1b:4e:dd:92:ef:ef:55:cd:71:63:dc:c9:
         3a:39:68:f2:3b:16:df:aa:d7:dd:91:2c:8e:f9:a5:f7:66:8c:
         03:ee:5e:e7:75:4e:be:fe:7c:cc:a8:68:f7:91:25:30:ef:68:
         81:c1:c6:ed:55:7e:e3:dc:28:09:3f:be:e8:31:fd:be:d2:40:
         b5:6e:ba:d0:2f:9d:20:e2:ec:f7:06:0e:e9:07:1c:9e:a8:98:
         fe:ce:74:ba:de:87:9d:13:89:98:17:37:3d:59:36:a3:fd:aa:
         03:24:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:27:45 2026 by rpki-client