Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
File:                     0721195f-b137-3110-8f36-18e8f861fc0b.roa (raw, json)
Hash identifier:          bmycKXToWr9hfZ1PiWawjxCm901/8bWhbWJwWu9ZZQs=
Subject key identifier:   94:65:3A:AE:96:FF:D9:6F:C2:FA:B1:E1:8E:12:33:50:72:76:09:B1
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584D524344011E4D1C05DF19CD00
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7029
IP address blocks:        64.86.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:44:01:1e:4d:1c:05:df:19:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=113194ae-aad5-464a-85c8-1a75fd70a036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:94:7f:5a:2d:24:69:42:12:3f:06:36:bc:
                    1b:36:9b:06:48:19:48:0a:51:38:7c:14:ba:d9:f3:
                    15:ea:9b:0a:c1:8a:25:8d:f5:aa:36:82:78:af:35:
                    50:d7:1f:31:55:ce:d6:da:10:24:7c:83:3c:53:07:
                    7d:31:39:ce:18:1a:30:49:24:46:7c:59:bd:8a:73:
                    7c:31:3a:23:27:fb:f8:61:6d:e2:3e:d8:98:2f:c2:
                    c2:bb:fa:2f:85:24:43:de:0d:b2:d1:d5:bc:98:a1:
                    40:ea:f1:80:7d:ae:39:fc:7b:e6:4e:41:7b:3f:77:
                    b6:b4:ab:4c:7a:b0:49:d6:2e:34:4c:f4:c4:99:3c:
                    6a:85:6a:f1:fd:ed:8b:04:b7:9f:cf:f6:e4:9b:f7:
                    49:49:08:3f:c8:6d:5c:08:e1:71:10:90:a8:ce:f9:
                    23:59:0d:b8:50:c0:5c:7a:92:e6:4e:ff:6c:c1:fc:
                    99:e3:46:e3:bf:77:71:6b:f9:d1:7b:12:03:e4:07:
                    50:df:02:64:43:ab:f6:92:22:32:9c:22:8c:8b:ed:
                    f5:8b:09:ce:cc:91:a4:76:cf:3d:6e:00:0c:92:ce:
                    36:40:7a:bb:76:0d:e5:ee:e2:e9:63:9e:b0:6e:a6:
                    0e:5b:47:a5:37:09:f9:b8:66:83:44:9c:f0:ad:48:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:3A:AE:96:FF:D9:6F:C2:FA:B1:E1:8E:12:33:50:72:76:09:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0721195f-b137-3110-8f36-18e8f861fc0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:95:e7:bf:34:20:d0:b8:28:29:05:9d:a0:27:70:aa:6d:
         52:df:e5:5c:e2:9a:28:bf:4f:e4:c2:81:70:47:ce:b1:eb:4b:
         be:7d:03:cf:fa:97:95:9b:0d:60:f8:d5:69:4c:cb:7f:80:13:
         f4:18:c6:0e:5b:7d:a6:50:e8:d2:2c:83:92:6b:4e:45:20:d7:
         66:52:c4:dc:a5:74:bc:85:13:da:5c:44:18:95:4b:a9:de:a7:
         e6:8a:6c:31:06:c5:58:29:c7:e3:8c:ae:6e:a6:11:29:82:72:
         ea:07:07:ed:85:19:50:84:23:6b:94:72:d6:d4:0c:f5:dc:ad:
         9b:96:7e:06:19:a8:2a:b7:8a:53:45:1d:7c:fd:5a:06:73:be:
         ed:81:be:8b:54:8c:1e:68:92:86:0b:fc:80:86:c3:06:4b:ca:
         39:f3:7c:e0:03:25:6b:27:0d:f9:8c:ea:8f:4c:0b:83:34:36:
         ac:d8:27:a7:ab:c6:26:89:46:86:38:42:77:0f:15:34:dd:7e:
         4c:96:32:85:de:68:58:c1:20:68:d3:d4:8c:d5:2f:b2:88:56:
         89:df:f1:9f:da:a9:ca:3e:8a:82:14:13:44:94:73:9c:ae:50:
         c3:bd:5f:5e:ab:2b:60:b3:0f:e2:cc:ad:78:8a:14:60:ab:4c:
         fe:56:94:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:04 2026 by rpki-client