Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
File:                     40dfe575-7376-3072-83e5-39cbefff6fa0.roa (raw, json)
Hash identifier:          1gVZAhBxRy5N9HghL3eiNm6aSHc7ZamUVrrPCtmkfzI=
Subject key identifier:   0D:E9:F2:D1:1D:1E:A8:5C:4C:1C:0C:0D:EE:DA:44:79:5C:C8:56:AE
Certificate issuer:       /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial:       010D0C9F4328584CA5F71852BB55B47E4EF2E200
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     7018
IP address blocks:        64.112.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:18:52:bb:55:b4:7e:4e:f2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=621c6526-d95f-4efb-976c-356551157079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:df:94:06:6a:39:e0:ff:50:3c:92:3a:91:
                    78:f1:70:aa:86:1e:3c:ed:bf:9f:58:9c:bf:9b:89:
                    37:76:3c:20:7f:2e:df:6e:8d:16:c3:85:34:20:59:
                    5b:51:f1:e6:79:d4:9b:49:cd:87:7f:fe:c0:fe:37:
                    51:8b:d1:82:00:dd:72:84:29:15:41:53:5a:76:88:
                    f1:41:6c:fd:48:3b:24:92:c4:7b:7a:78:3d:7c:11:
                    56:54:35:38:82:b1:bc:0f:66:91:7e:58:5b:30:01:
                    11:f0:f0:c7:aa:7b:58:0b:e4:3f:d7:62:0f:7f:ba:
                    1f:d7:35:b2:af:79:e5:a1:e9:54:b0:b2:a6:47:c0:
                    b4:a9:1e:a5:9d:62:11:e6:42:7c:4c:6a:29:b4:46:
                    fe:3c:e4:a0:1f:8c:7a:59:20:04:9b:0b:4b:7d:db:
                    b9:e5:41:6f:6f:dc:ba:df:ad:16:cb:76:73:da:ea:
                    3d:3c:d6:84:17:ec:82:d7:d4:39:9d:a2:21:c3:b4:
                    68:e4:5b:b8:2a:79:db:6b:1c:da:43:0d:df:cb:9b:
                    50:a3:2f:51:0e:28:16:48:71:1e:9e:5e:dc:ec:68:
                    64:bd:a0:27:32:b2:49:72:19:41:6c:43:85:1f:c2:
                    02:e1:bd:28:25:5f:c7:f9:d8:62:10:03:f7:f2:0a:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:F2:D1:1D:1E:A8:5C:4C:1C:0C:0D:EE:DA:44:79:5C:C8:56:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl

            X509v3 Authority Key Identifier:
                keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:db:d5:33:56:44:42:db:95:c2:81:20:8d:e0:95:d3:41:
         2e:8c:16:79:c2:2c:80:6b:9c:bc:26:d7:5e:db:93:b5:ac:dc:
         14:e1:a9:dc:1c:40:1d:cc:77:2f:38:d4:d4:22:10:56:82:7d:
         88:3a:ff:b1:c7:1e:8d:df:3e:e7:46:89:3e:0c:a7:9d:91:de:
         ee:1c:eb:d6:ff:2c:3f:d5:b7:59:13:db:dd:f6:aa:e3:81:0b:
         80:27:8a:82:01:97:75:32:45:68:da:9e:3c:1e:9a:1b:ca:bc:
         a9:86:48:68:54:f6:22:20:24:50:d7:bf:4f:ba:8c:63:ca:bb:
         6d:54:68:21:98:3a:d1:2f:01:2d:a2:78:e3:58:3e:70:02:8c:
         08:3e:a7:77:70:85:da:f8:73:fb:ed:a4:d5:04:9e:cc:8c:89:
         0f:e9:b7:d3:bb:ee:28:bc:22:6c:08:fa:e3:26:0d:a9:06:05:
         e2:cb:47:a9:19:68:13:ff:8d:69:a6:33:41:95:ce:9b:bd:6c:
         b9:0e:7e:f4:02:40:b6:97:a7:c1:f3:dc:b1:92:aa:1b:2d:56:
         99:ae:26:0d:f3:3a:62:75:ce:d8:98:20:80:82:25:f9:bc:28:
         f5:63:38:12:a2:4e:ef:a5:be:c8:e4:18:84:6e:84:af:01:cd:
         17:61:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:06 2026 by rpki-client