Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa
File:                     553871bf-6d14-32ab-81d2-f44e861298f5.roa (raw, json)
Hash identifier:          qFG0S2HldUJHEjYHcbDYhlXP75ecoG0KJklYwXiDwwE=
Subject key identifier:   1F:83:0E:EC:7C:65:BC:BD:19:F9:1D:10:CB:FF:4C:90:FB:ED:C0:20
Certificate issuer:       /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Certificate serial:       010D0C9F4328584CD2A1EF733A5AD6D818D064A0
Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     14230
IP address blocks:        97.64.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ef:73:3a:5a:d6:d8:18:d0:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=8d3f2783-7276-4613-9abb-ee94d8f68160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:96:98:14:69:98:65:ef:ff:fd:22:79:32:
                    9e:86:ef:d5:3e:c0:af:c3:d0:33:2e:45:a1:d0:64:
                    3d:8a:e7:ed:d2:f5:f4:50:e0:84:12:74:30:fa:0c:
                    41:33:7f:3f:7b:18:7a:eb:e6:e3:3a:fb:b9:a4:ad:
                    b8:d0:da:6f:64:68:6e:5f:d6:94:00:71:b3:ed:63:
                    48:2a:b0:09:b9:07:43:c7:cd:cf:b2:e5:b6:f6:83:
                    22:31:1d:69:22:93:6b:7a:6b:29:3c:5e:8a:87:aa:
                    55:eb:47:a6:27:82:e2:99:3d:35:2c:20:82:67:b3:
                    fe:63:cf:a6:b1:e4:c3:59:3e:f4:69:1e:d6:33:2a:
                    a9:65:26:25:e8:62:d0:f0:f2:44:98:c1:da:36:6b:
                    8f:59:8e:cd:f1:48:98:e1:d4:1f:51:c9:24:a8:f4:
                    5c:d9:0a:e4:81:41:85:59:d1:a8:36:f8:11:ae:31:
                    b7:89:6a:68:f4:b9:08:25:a1:e1:a4:4c:fe:47:13:
                    78:b9:aa:1e:42:0f:c0:db:6e:a0:11:f0:bc:38:28:
                    ab:ed:65:1e:a0:4d:cf:53:79:85:8e:8d:d9:9d:e0:
                    45:55:59:bd:82:84:49:2f:f0:6f:1e:9f:5c:43:4e:
                    8b:54:f8:b3:cd:b7:f8:86:5a:fa:48:e9:72:ad:7c:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:83:0E:EC:7C:65:BC:BD:19:F9:1D:10:CB:FF:4C:90:FB:ED:C0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/553871bf-6d14-32ab-81d2-f44e861298f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl

            X509v3 Authority Key Identifier:
                keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:9a:d2:8c:fc:ad:25:ce:f8:45:81:d0:44:b8:ef:67:26:
         22:39:5e:28:56:66:b4:be:d4:a3:fa:18:a3:04:e4:99:9d:a0:
         bb:85:32:f1:fa:e3:1f:a1:b4:1f:23:97:6f:20:e5:d2:f6:1d:
         b1:36:78:7c:9a:cb:c8:d3:ba:95:9f:98:b5:19:28:48:12:65:
         61:c5:74:2a:7b:c3:29:0a:50:c0:ac:4b:5c:01:9f:78:76:d1:
         85:49:53:82:5d:e6:ee:23:e6:f2:6e:28:3c:32:26:d2:99:65:
         ca:6c:f5:51:1e:26:37:b6:ac:8c:17:5c:2d:cc:15:7d:8b:18:
         14:03:61:ec:02:48:b3:02:d6:5b:8d:90:63:23:95:bf:32:d1:
         90:40:22:bf:d6:0a:7b:56:dc:43:72:c0:3c:bb:11:02:2b:0d:
         ba:34:c2:d3:9a:71:80:ac:4f:0f:89:fe:3e:01:d0:9b:a1:89:
         be:ca:99:4c:82:64:d3:db:77:a4:9f:f6:7e:fc:81:77:94:1c:
         13:09:18:12:43:28:14:13:2e:5b:2a:1e:7f:0c:c3:66:c5:e7:
         1a:1b:fa:84:13:ed:86:a4:44:14:1d:83:30:c2:8d:c9:a5:94:
         c9:8d:5a:23:6f:93:ac:65:a6:10:2c:ed:f0:b4:70:77:86:c2:
         33:19:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:10 2026 by rpki-client