Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa
File:                     ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa (raw, json)
Hash identifier:          jugBl4e9IEMcIadkf84M7K5QKeK4rlvfNc+8Wi+kk7Q=
Subject key identifier:   57:FC:36:65:ED:3B:CB:3E:3A:31:43:B0:37:88:3C:4A:19:87:17:4A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E08663DF55BACD28B3B1DF400
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        64.9.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:3d:f5:5b:ac:d2:8b:3b:1d:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=e6cf2a83-f2c2-41d1-bdfe-1fcbda874f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:c2:2e:ca:8b:85:a8:d6:e5:a0:99:c9:3f:
                    5e:1c:41:f3:d8:a4:14:80:7d:4d:cc:78:4e:50:5a:
                    eb:c7:28:1d:e1:6f:f1:80:70:28:67:05:97:34:9a:
                    0a:68:1e:98:0e:23:12:55:a7:19:a0:57:85:50:2b:
                    91:ec:51:7c:72:dd:ad:7f:ad:4d:63:3e:a5:c9:65:
                    52:c3:57:ad:f5:48:16:c3:b3:12:ac:1b:e6:1e:a1:
                    71:da:f2:27:70:4a:b5:98:55:71:c8:6f:11:a5:ec:
                    01:de:f9:4d:79:46:89:41:c6:03:f4:82:e2:fb:07:
                    d2:4e:91:23:49:1f:c8:97:88:37:f4:0c:84:72:86:
                    fe:41:2d:68:16:9f:29:9c:3a:d7:a0:6c:5c:69:f8:
                    5d:2a:4c:32:31:2f:26:a2:00:eb:78:88:0a:0e:5a:
                    d6:f0:20:14:82:d4:a3:1d:09:95:08:81:f0:e9:a7:
                    39:eb:e8:a2:65:8b:58:6d:1c:be:66:74:be:17:40:
                    ff:37:04:d5:e9:ed:1c:68:e9:27:67:09:4d:4a:4c:
                    83:0a:a2:e6:da:92:bf:e5:52:1f:6f:96:6c:38:2a:
                    ad:12:7f:63:4b:2f:11:40:ad:ef:97:be:83:00:05:
                    7f:85:41:94:8f:62:b3:09:e1:2f:d5:ed:84:6c:20:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FC:36:65:ED:3B:CB:3E:3A:31:43:B0:37:88:3C:4A:19:87:17:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ebde9cce-b7f1-35a3-8378-b1b3704d0b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:f1:56:7d:a7:f0:a5:22:53:e1:c9:25:31:73:47:18:47:
         95:43:f4:0b:41:ba:4f:b6:29:54:54:0f:be:89:83:1b:1c:f1:
         77:e7:1c:3f:88:15:6f:17:b0:b1:ac:05:0a:ed:d8:ba:6e:03:
         e6:f0:a7:1c:ce:b6:f7:f3:4a:37:e9:0f:ca:fa:a7:a7:ff:51:
         e7:89:df:b7:d2:da:0a:8f:e4:f4:7a:24:f0:b5:61:b6:bc:f2:
         2f:28:dc:f9:68:4f:01:ba:ff:73:6a:aa:8e:8c:01:a4:12:8d:
         39:29:9b:18:39:c6:22:7c:ac:2e:3e:c9:d5:5e:02:1e:58:af:
         e3:fc:c8:c2:ce:cd:03:51:54:5e:4c:3d:73:cd:8d:78:7a:15:
         66:e8:d5:16:53:2b:4d:f6:77:e1:bd:3a:13:2e:99:0e:f0:d3:
         2f:2d:f8:a9:b6:50:73:20:ff:8c:2a:d5:9a:01:b7:48:e4:18:
         62:37:66:8b:28:b3:b9:2f:1b:e6:2b:fe:8b:46:55:f9:02:6d:
         7b:6c:9c:32:e4:7f:e8:2a:bf:8b:f7:f5:15:b9:db:f6:5d:7f:
         36:05:aa:fb:ba:48:45:3e:f2:9d:e5:9a:66:49:54:3e:a3:a0:
         28:bf:8f:f7:ab:92:3e:84:1b:0e:c4:c6:2f:8c:ff:6f:fb:d4:
         bb:20:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:43 2026 by rpki-client