Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa
File:                     387f6db0-20d1-3de5-86c6-570f32283f2a.roa (raw, json)
Hash identifier:          VZgFQe9cOTTZDkJO5DrN+i87pp9Zr829U9ytIz01LOs=
Subject key identifier:   49:4C:1E:24:64:9F:66:11:1D:EE:73:BC:03:74:A7:85:9D:C5:AB:00
Certificate issuer:       /CN=4e84d19a-da77-4951-9413-0914c81e76e1
Certificate serial:       010D0C9F4328584E15E490184C63C637E7503830
Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     16509
IP address blocks:        64.190.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:90:18:4c:63:c6:37:e7:50:38:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=ddff8111-f19a-4b43-80f7-eb81f4c11e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:7a:be:aa:8b:41:7a:3f:a8:69:05:23:46:
                    6e:7c:59:bd:b7:6a:20:61:69:28:0a:25:75:bd:db:
                    7c:61:fd:b0:7a:f1:82:24:05:cf:9e:d9:45:ea:d1:
                    33:a3:e3:e9:43:f6:ec:cc:2e:04:fa:b7:e7:d3:76:
                    a9:30:9c:ae:6f:46:ef:11:d0:93:c1:64:e7:e1:9d:
                    b3:d2:eb:7e:42:4d:f0:bb:60:c1:e6:1f:f6:99:41:
                    22:89:83:de:b6:27:4f:3b:4d:a3:3b:aa:25:01:14:
                    ec:ea:51:d3:25:04:de:c2:1f:a0:79:13:0d:f7:f3:
                    d4:10:1c:3b:31:b6:b3:4c:26:58:1e:f6:01:d3:d2:
                    a7:8f:6c:0f:92:05:20:53:c8:d4:78:38:95:d5:9c:
                    d7:49:ad:ad:91:1c:b5:a8:e9:41:01:f5:ce:e1:8f:
                    37:1b:e4:2d:71:0a:f0:fb:ac:e1:30:33:25:00:13:
                    05:8d:9e:6b:36:a9:e2:77:2e:85:96:71:78:92:2e:
                    34:83:0d:05:ea:93:66:23:6d:24:25:b2:78:47:5d:
                    ec:71:e6:f6:c6:7f:de:bd:84:5c:59:72:a9:82:0b:
                    7c:84:53:1f:34:cc:1c:95:fe:d6:a9:b4:98:3e:93:
                    dd:ba:b7:2b:94:21:32:ce:26:24:d3:13:02:3a:b1:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:1E:24:64:9F:66:11:1D:EE:73:BC:03:74:A7:85:9D:C5:AB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/387f6db0-20d1-3de5-86c6-570f32283f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b8:92:d8:7a:64:aa:dd:12:79:e2:c1:24:5f:a5:ac:2e:fd:
         2b:02:c0:07:fb:59:4a:d0:fb:5b:1a:20:57:7d:0b:d2:5a:d8:
         95:ad:6c:26:07:7d:4b:d9:7a:82:4f:b8:f6:42:9c:c9:de:36:
         66:a4:b9:6d:34:f8:d1:b4:4d:2a:2f:e1:a6:42:fb:68:5f:99:
         ef:46:91:e6:c0:e6:d2:de:f2:5b:86:5f:a6:bd:19:d9:3e:3b:
         bc:9a:2a:0c:a3:1f:6e:1c:c2:80:12:7f:2c:28:79:0b:37:03:
         c0:78:3b:d5:cd:80:6c:bf:a0:53:5f:8a:9a:42:f2:65:34:77:
         d7:f2:51:d9:2e:31:42:6e:35:07:91:25:b8:2b:55:fa:0f:58:
         34:fb:96:70:06:e3:7f:95:a0:66:3e:15:3b:0b:86:ba:80:13:
         8a:12:41:7a:55:e1:46:62:f2:83:db:b2:84:c0:11:41:62:b4:
         50:11:a3:a0:4d:a6:ae:ea:88:43:3d:43:7c:07:6a:a3:ba:0d:
         15:6f:8a:a4:16:f9:4f:f1:49:5c:99:9e:59:30:02:59:59:4b:
         0d:60:da:4b:3d:f2:8c:3b:41:fa:79:54:de:0d:74:d9:3d:39:
         3c:1a:ca:9a:90:6a:2a:d9:57:c3:34:d7:fb:3f:74:fa:e3:41:
         77:49:a2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:37 2026 by rpki-client