Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d61bd03-b805-33fc-b5df-110917771d68.roa
File:                     2d61bd03-b805-33fc-b5df-110917771d68.roa (raw, json)
Hash identifier:          Hc1c+ipsrfu6bC5kwsJd6q4ouwpeQiiZw0zdOyXeonY=
Subject key identifier:   D0:89:76:DF:D0:D0:41:62:CC:DA:34:4F:26:18:54:FC:DB:0E:C1:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67B461D6AF0545E8B50F40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d61bd03-b805-33fc-b5df-110917771d68.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397238
IP address blocks:        64.6.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:b4:61:d6:af:05:45:e8:b5:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=ba3fdc1c-2ccb-4bf8-88c9-044fc72a744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:4e:f8:28:27:72:fb:5f:d8:c8:19:57:a2:
                    fb:67:b8:76:82:ce:55:57:b8:52:fd:1a:42:9c:f2:
                    c3:b2:17:d1:97:43:10:b6:f1:fe:bd:d2:2a:1b:1f:
                    f9:06:f3:ca:f6:38:2c:1f:82:08:54:2a:c9:70:43:
                    1c:9d:07:0c:71:72:2c:7a:6c:bc:a1:2e:f9:c6:e1:
                    ec:93:fc:9a:21:cc:1d:2c:01:18:0f:34:96:4d:5a:
                    2e:c1:46:f3:89:5e:c4:9b:e2:29:cf:2e:7c:96:8c:
                    b7:21:26:77:78:79:51:79:10:da:89:bd:54:f5:d1:
                    8b:4e:5f:13:b8:65:f8:4f:15:a2:bc:f4:ed:30:6d:
                    24:1f:3f:21:9b:ed:3a:ae:33:f6:19:12:44:a9:4a:
                    a3:15:12:bd:ac:1a:a7:fb:11:6f:0f:58:4c:7d:3e:
                    76:15:4f:73:ed:47:0f:39:de:09:63:f4:bd:b8:28:
                    3f:ce:c2:21:f0:34:4b:7a:c4:59:5d:65:71:2e:18:
                    f0:f9:69:02:f0:9b:09:a8:00:64:5c:bc:c6:bf:7d:
                    c5:ca:be:91:f9:38:04:72:1f:c7:65:cc:8f:86:5c:
                    0f:0e:4d:8d:88:bf:f3:7e:5f:d0:e4:d4:33:50:8c:
                    d3:f0:b0:9c:7d:60:4f:14:0f:6b:8f:fa:d2:ed:00:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:76:DF:D0:D0:41:62:CC:DA:34:4F:26:18:54:FC:DB:0E:C1:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d61bd03-b805-33fc-b5df-110917771d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:42:6c:a2:6a:98:31:fa:41:cd:c8:90:48:05:9f:15:f5:d3:
         12:02:b7:9b:ae:ae:15:e5:8f:a2:a5:f3:9b:e4:f0:2c:e5:77:
         a6:f0:52:17:d4:4b:3a:62:3b:70:31:c5:26:a4:90:fe:94:ce:
         c6:ab:a2:3e:9b:3f:1c:b5:f3:95:11:23:85:fb:b5:fd:0d:69:
         7b:af:f8:b3:0f:2e:bc:a9:52:e4:9e:06:71:ce:c5:a9:c6:0c:
         38:8d:57:47:fb:84:3c:b0:c6:9e:b5:1b:ac:f7:b7:3f:6f:f5:
         73:d2:b8:9e:4d:5d:7b:25:94:2a:99:3b:cd:c0:fb:b5:2c:e6:
         96:b4:29:36:96:40:8a:08:84:fa:4a:fa:61:c1:0a:e6:db:68:
         6f:05:bc:92:f2:11:06:01:c8:c6:b8:66:06:cf:85:90:6d:7c:
         83:e8:6d:f6:99:27:47:96:c2:52:a5:a7:92:cb:c8:46:13:ca:
         57:a4:ab:13:a9:bc:c5:f4:ad:9f:5d:eb:22:96:9d:29:ad:d3:
         55:74:06:f9:91:09:79:75:30:05:39:39:1e:84:94:03:a2:9e:
         2d:4d:98:20:06:a6:2f:a1:15:00:d8:36:7c:17:7f:46:0b:d7:
         55:51:df:5d:81:11:64:f4:ed:91:38:73:33:2b:66:07:8c:1b:
         51:de:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:33 2026 by rpki-client