Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/9767f742-56db-32da-875c-85d45a82047a.roa
File:                     9767f742-56db-32da-875c-85d45a82047a.roa (raw, json)
Hash identifier:          +BfTCWjqVc5g6kJmLeeM/UW4SrLHi77LZRQ6rn00w5Y=
Subject key identifier:   5D:69:D1:46:C6:1F:0A:09:72:68:2D:FF:DC:03:39:AF:A5:2F:61:12
Certificate issuer:       /CN=4936e456-c9b5-43ef-8bdf-475338747125
Certificate serial:       010D0C9F4328584DDFEB1BC9EBBDDEEEE2A3D5E0
Authority key identifier: 96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/9767f742-56db-32da-875c-85d45a82047a.roa
Signing time:             Mon 18 May 2026 13:00:31 +0000
ROA not before:           Mon 18 May 2026 13:00:31 +0000
ROA not after:            Sun 16 Aug 2026 13:00:31 +0000
asID:                     401319
IP address blocks:        64.139.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:eb:1b:c9:eb:bd:de:ee:e2:a3:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936e456-c9b5-43ef-8bdf-475338747125
        Validity
            Not Before: May 18 13:00:31 2026 GMT
            Not After : Aug 16 13:00:31 2026 GMT
        Subject: CN=e1aa00ab-46b1-4717-957a-6200c4963757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3c:23:4d:25:8b:1a:ed:2b:f5:4d:07:4f:ce:
                    ad:fc:b5:06:03:a4:22:61:f6:f3:0e:01:9e:58:92:
                    4c:9c:9a:cf:76:a6:d4:b5:6a:eb:32:f3:90:09:8e:
                    e5:1e:4d:98:d2:6f:d9:8c:23:64:37:44:cd:6f:06:
                    79:48:8c:2f:78:70:0e:7d:ef:6d:c1:0f:0d:81:26:
                    50:9b:37:d4:6d:8b:ea:34:d0:9c:8c:18:f6:9b:d9:
                    1e:30:a2:c1:5f:95:74:6a:9d:84:5d:62:be:5e:ae:
                    2e:59:10:25:cd:6a:71:ad:dc:6f:77:18:c6:ef:8c:
                    91:17:d4:cb:c9:c5:d4:bc:95:6a:dc:68:ec:1a:73:
                    fa:4a:0c:1a:be:95:f1:25:ac:80:b6:e0:8d:d0:19:
                    df:79:d8:19:94:d8:84:f1:1a:bd:78:6b:75:a4:a4:
                    e5:57:cb:1e:2d:18:eb:92:60:89:ba:bc:be:83:16:
                    3d:a0:05:d6:83:63:ad:ae:e6:4b:9d:6c:89:eb:79:
                    77:a1:da:8a:ef:3c:a1:cf:3e:ef:14:6a:e5:d1:69:
                    2e:86:ce:05:2e:38:78:ca:84:60:2a:de:1e:a9:81:
                    c5:15:18:22:3c:a1:69:e8:05:7f:65:2a:4e:b5:e8:
                    2f:e0:9e:29:71:e8:a3:89:a4:60:b0:ac:91:7d:18:
                    de:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:D1:46:C6:1F:0A:09:72:68:2D:FF:DC:03:39:AF:A5:2F:61:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/9767f742-56db-32da-875c-85d45a82047a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl

            X509v3 Authority Key Identifier:
                keyid:96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:7a:42:7d:ab:fc:bd:f7:2e:c1:ed:1e:f9:a1:04:25:9a:
         b3:2f:fd:e6:73:4f:b1:54:bd:b7:4a:73:52:1e:4c:17:84:4d:
         b6:29:66:33:84:96:01:62:0e:f3:a4:c8:c7:00:15:d8:10:41:
         bc:bf:53:80:85:af:51:82:da:c0:58:5b:ae:27:19:10:8a:c6:
         f2:a6:e8:d1:af:9c:1a:63:e5:0f:71:e3:30:aa:08:4b:5b:55:
         e9:eb:a5:68:0a:dc:d2:f5:14:36:b3:97:69:bd:43:b7:9d:32:
         63:6b:f0:77:51:cd:91:c7:0e:a2:25:fa:43:4d:61:e4:d9:d0:
         72:2a:ac:bd:11:60:b0:42:8d:ab:7f:89:37:4c:02:96:a7:63:
         43:90:17:f2:76:53:d1:d2:3e:76:5f:2b:86:26:86:43:94:25:
         34:1c:a0:a9:97:ea:d2:4f:04:c7:2c:59:7a:77:8c:b0:21:7b:
         ce:ae:b0:fb:5c:19:06:3c:cc:cc:64:e4:7e:ec:04:0f:e0:49:
         73:16:7d:c1:62:d2:e1:f0:64:fb:f3:65:b9:a2:ba:3b:f3:10:
         ab:1d:a7:29:b9:6b:d0:cd:d4:b1:96:77:4b:8e:65:36:68:f0:
         96:52:48:17:80:b1:51:89:9f:b7:c9:b5:e8:1b:78:39:7b:0d:
         f6:00:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:11:21 2026 by rpki-client