Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
File:                     0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa (raw, json)
Hash identifier:          RSDxKAxW73MnCLcaDVLEOqHy7a6DlrPmRzeMP07xXyM=
Subject key identifier:   85:A3:70:82:CD:C4:21:9D:59:E4:12:4B:7D:9C:D1:73:9A:28:43:F6
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F4328584D6C0FAE1A6D003AC52DCFF400
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     55002
IP address blocks:        64.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:ae:1a:6d:00:3a:c5:2d:cf:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=31bdb055-0127-4720-921d-6503162afbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:74:9f:f5:a6:67:ac:0a:cb:d2:0a:02:b0:
                    6c:0a:0e:99:e3:dd:20:60:a6:81:0a:4c:18:91:de:
                    53:81:8f:f3:fc:fa:d5:cd:5b:7f:5b:0e:26:f9:19:
                    40:68:66:ec:22:41:94:55:63:87:70:0b:8e:8d:ea:
                    53:1c:c9:dc:ce:e7:33:17:b6:eb:09:82:4f:75:1f:
                    0e:66:d4:74:61:57:af:95:5c:4a:e3:30:1a:ce:25:
                    99:8d:6c:f6:f9:1e:66:e4:e7:ad:42:c0:2f:90:12:
                    86:bc:4f:e0:a9:ff:d3:30:11:6b:2e:05:ae:8e:82:
                    64:e7:0a:52:27:7f:fa:8f:e4:ce:3a:d7:e2:c4:73:
                    20:06:43:0b:f7:64:c0:2a:aa:8e:cb:9b:55:cf:df:
                    5d:60:60:3e:3e:83:b7:a2:b0:f0:8d:76:80:8a:fb:
                    70:3c:d7:e5:ac:81:01:db:b4:cc:08:d0:7c:d4:d8:
                    40:9c:0f:e1:48:31:f9:17:10:ba:d3:ed:87:53:67:
                    a6:c8:8f:a3:db:45:9c:03:17:be:fe:d4:80:de:34:
                    44:93:e7:13:5c:36:3b:73:98:35:87:34:77:7f:34:
                    af:4e:cb:ad:9e:48:c4:ff:e2:b7:e2:71:a3:a9:2e:
                    c1:e8:bf:93:bb:bd:ec:5f:66:0f:39:13:be:1a:1d:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A3:70:82:CD:C4:21:9D:59:E4:12:4B:7D:9C:D1:73:9A:28:43:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:45:87:ec:91:c4:89:1a:8b:e8:c5:02:93:2d:ca:4a:fc:8b:
         a4:49:c5:24:73:b3:fc:c9:18:e4:99:b2:02:5e:d7:9e:30:ee:
         54:c3:89:fc:fe:04:2f:9b:b5:05:0f:d4:d8:7e:5d:6e:b5:2a:
         ea:72:cb:e5:15:01:6c:fa:ed:58:16:ac:b7:6c:90:57:d5:4e:
         27:09:d1:57:f4:3d:36:16:e3:fe:3a:b0:6e:a6:03:54:64:ef:
         34:36:a2:77:52:7a:2e:cb:fe:13:de:41:ac:f2:0f:34:2e:af:
         04:79:04:73:75:81:31:f7:c0:fc:96:59:17:ac:e1:62:ec:f7:
         15:bd:87:3d:f7:78:06:ba:a1:d2:d7:98:ae:7c:d5:21:0f:df:
         9a:6d:de:a5:4e:db:06:a6:ff:90:b2:4c:29:4a:3b:ad:b2:3f:
         7b:52:46:8e:35:2f:cc:4f:fe:6c:8c:ec:96:71:e3:71:15:1f:
         f7:aa:9d:f1:7a:bc:3d:4c:96:3e:34:f5:3c:57:02:69:37:d5:
         11:a6:84:87:2d:26:33:0a:f8:b1:57:61:45:fb:2d:bb:75:88:
         e8:e3:06:07:09:fb:90:f5:56:36:2e:97:9a:ec:04:7d:65:d1:
         64:15:0b:99:1d:91:81:4a:12:05:8b:bd:fc:a5:51:0e:9c:4e:
         25:ad:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:48 2026 by rpki-client