Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/402d79c4-7744-30f5-b028-06b67707b8ef.roa
File:                     402d79c4-7744-30f5-b028-06b67707b8ef.roa (raw, json)
Hash identifier:          xS0oAe2+OyeqPsStQCDxDromSAhYd6O1ywoWl7AlBHw=
Subject key identifier:   CC:B6:D1:26:D0:33:18:E7:97:AD:79:7F:CD:88:55:84:B5:F4:82:F4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67B352CDADCA7FB2C74780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/402d79c4-7744-30f5-b028-06b67707b8ef.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397222
IP address blocks:        64.6.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:b3:52:cd:ad:ca:7f:b2:c7:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=a320719d-852e-41de-87da-50bbc9af2a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:56:0e:13:31:d9:72:c7:61:32:7d:2a:e0:
                    42:69:9e:75:39:ad:d6:7c:9f:ee:b3:bb:31:11:47:
                    03:7a:d9:90:6c:a4:b9:67:48:0b:95:17:bd:82:ef:
                    24:28:a7:41:a2:39:83:f2:29:5b:c7:53:42:3a:36:
                    d3:d0:fb:27:ac:e5:1b:49:22:73:d3:d5:4e:be:46:
                    6d:2e:e9:3e:b4:9a:1f:14:2f:57:77:a2:9f:73:dc:
                    cd:fb:76:83:0b:5c:56:64:2d:29:40:3c:89:c6:88:
                    85:71:f5:a5:31:94:90:80:5e:99:10:60:0a:af:25:
                    a5:31:c6:54:9a:f4:e2:8f:1c:5e:ec:40:e8:78:94:
                    21:4e:f9:fe:fc:58:8a:35:82:6e:7f:07:45:68:dd:
                    d1:70:f9:84:cc:02:88:0d:78:fa:87:77:4e:cd:b6:
                    60:c8:a2:79:29:34:b3:ef:c3:06:3f:62:6a:1d:e2:
                    9f:aa:10:42:87:2e:74:17:af:5a:eb:bd:b7:7e:d5:
                    d0:56:fd:e5:18:36:e8:04:64:2c:10:88:6a:14:ad:
                    4d:bb:51:0b:77:6a:47:30:c2:01:15:69:d1:44:71:
                    5f:0e:d9:3c:00:1f:30:0a:88:4b:0a:ff:ad:48:ea:
                    e9:bd:9f:c6:cf:68:14:96:6e:a3:6f:55:9f:5e:0e:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B6:D1:26:D0:33:18:E7:97:AD:79:7F:CD:88:55:84:B5:F4:82:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/402d79c4-7744-30f5-b028-06b67707b8ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:22:88:b7:bd:6a:49:d1:30:ed:22:52:dc:d6:e1:f6:39:
         2a:c2:79:e4:c6:c2:41:93:ad:05:92:0d:b5:4c:e3:42:96:d3:
         b6:07:d3:3e:9a:a4:2c:8f:41:1f:f1:9a:e1:bc:ac:71:d8:01:
         e6:76:17:7d:67:e9:8e:42:e3:3b:57:5c:4f:45:43:79:52:d9:
         54:0f:1d:c9:8f:82:87:9a:f3:8b:d2:97:ff:b2:20:7d:6b:f9:
         e7:70:e1:c4:93:0c:7f:d4:bb:08:e6:8a:8f:e7:99:7e:d0:45:
         bf:51:10:f0:21:9f:34:9d:79:83:ad:ec:9d:1e:2a:0d:c6:a2:
         a6:bd:94:4a:ba:e4:e0:0a:4b:37:9c:41:ac:c9:4f:14:9f:50:
         1b:29:82:6f:b8:be:f0:d0:85:3f:77:6e:e6:5a:a1:29:bf:c7:
         c4:a6:d4:73:b8:85:b0:c8:f4:be:df:3f:06:73:f8:12:d4:13:
         c2:89:84:ec:89:4b:11:d6:a1:4a:27:f8:e8:04:de:e9:c9:43:
         01:aa:c1:56:88:08:5a:cb:bc:da:bf:7d:8c:f2:2f:fd:f0:37:
         c0:86:71:77:5f:f1:ab:ca:59:c2:d1:2e:9f:e8:17:49:c4:c5:
         c7:07:f7:08:e3:26:ee:3b:d5:c1:e1:38:f1:df:de:4e:f5:29:
         5d:2b:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:36 2026 by rpki-client