Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
File:                     0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa (raw, json)
Hash identifier:          WSyPK1semhnshuUCgSp6hb2+bgk1t4wQzhea6b1Y1BY=
Subject key identifier:   AD:C8:56:64:DF:29:C2:E9:3D:A3:16:A3:A9:96:55:7F:AD:EB:FE:8D
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584D5243478DAF15DB15C18B4D80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     24439
IP address blocks:        64.86.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:47:8d:af:15:db:15:c1:8b:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=ffe9fecd-3e26-46a3-87c9-de63e08cde6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:b9:79:b7:25:be:91:9a:2f:9a:7e:a3:b0:
                    e9:9a:a0:ad:31:54:8f:9f:7f:01:70:c0:f3:55:b3:
                    9e:b6:c0:ac:83:53:ad:db:e2:8e:4e:4b:af:73:e4:
                    06:6d:fb:ed:86:79:46:e2:70:69:52:38:2e:a5:3d:
                    69:76:18:5d:ac:48:24:e4:a6:b9:b3:ac:4f:48:cf:
                    12:b0:2d:6e:87:f1:62:e7:fa:3e:c5:d9:75:62:ab:
                    da:04:1e:42:8c:3a:21:85:94:d1:f6:78:27:af:20:
                    23:97:33:c1:e6:59:95:b1:f2:84:aa:ed:19:c5:0b:
                    71:8f:a7:a2:80:bc:a0:70:84:04:6f:86:e8:b3:6f:
                    d4:2d:41:dd:4c:51:22:14:3d:66:30:07:ae:b3:14:
                    06:bf:61:ef:bf:f6:6f:de:2b:ae:9c:8e:aa:da:d3:
                    d7:14:ec:2d:75:60:a7:b0:50:d3:e1:a8:8c:8a:2a:
                    25:aa:45:5e:4c:13:b0:f8:f9:cc:79:df:6c:43:df:
                    63:38:b0:9d:39:6b:ef:e2:bb:d1:91:83:09:1a:26:
                    73:bb:83:4d:62:94:6e:18:a7:a4:9a:44:e4:1e:4a:
                    0e:c1:f3:e0:46:4a:29:f0:27:3a:6c:e9:0e:d9:a8:
                    b0:9c:34:85:a3:8d:70:0f:09:67:f9:c3:ef:a3:3e:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C8:56:64:DF:29:C2:E9:3D:A3:16:A3:A9:96:55:7F:AD:EB:FE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/0af33e37-3fbd-37d4-ae50-a7e7f28fa9ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.86.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:45:59:2f:10:ed:db:fb:6e:dd:a3:2d:79:eb:17:b8:42:79:
         09:c0:50:db:8d:ab:99:54:ea:7e:85:4f:58:25:1f:60:27:fc:
         fa:93:03:6b:30:39:1e:78:b3:04:e1:a0:1b:ed:32:33:f2:e3:
         a0:97:b8:4f:19:78:93:82:19:e8:86:85:c1:c9:89:87:d1:58:
         78:c9:aa:9f:a6:19:5e:9b:d7:52:d4:4a:3a:f5:c8:3c:34:36:
         ae:f1:fd:15:1e:cb:75:84:5d:c0:3a:d4:2e:d9:82:f6:d6:f6:
         5c:76:d6:5d:28:02:f7:ad:d1:f4:19:ad:3e:bd:6e:c3:cc:8d:
         60:08:a0:20:15:62:9a:a5:d7:d3:4c:6f:e4:ec:b8:32:7a:bf:
         61:bb:43:d9:2b:5e:cc:4b:74:77:0f:b5:cd:6c:00:c3:84:34:
         bd:8e:cf:5a:8c:d7:b6:43:6d:a4:91:c6:e0:86:91:ec:5d:4d:
         be:10:8e:e1:ab:81:d0:ff:27:6b:3e:8e:ca:e3:92:60:a6:4f:
         a9:9c:8e:b0:b5:5a:08:87:37:16:cb:e9:66:28:3f:30:ef:32:
         fe:4b:f9:da:89:e0:42:b2:4c:82:98:9a:1f:1c:27:f9:32:8c:
         df:93:7c:96:0d:31:05:21:4e:57:98:76:b1:6e:ae:b2:4f:da:
         50:cb:ee:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:44 2026 by rpki-client