Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd/382feb09-a618-3379-88d0-e06585c04558.roa
File:                     382feb09-a618-3379-88d0-e06585c04558.roa (raw, json)
Hash identifier:          s3fVXrCsmEvOEccecWrAXYjbwEDWmud0oJFGb6t4dAc=
Subject key identifier:   B1:84:A8:BD:9D:43:45:38:8D:E9:2B:E4:8B:F0:FD:A1:AA:21:3C:D4
Certificate issuer:       /CN=f3a856ef-1681-48eb-939d-abe6db6844dd
Certificate serial:       010D0C9F4328584CC611F38C840609A1720F99A0
Authority key identifier: 2F:6E:D1:39:51:0F:58:BA:6A:36:B9:7D:F3:25:5E:FD:2B:5F:C7:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd/382feb09-a618-3379-88d0-e06585c04558.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     395041
IP address blocks:        64.145.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd/f3a856ef-1681-48eb-939d-abe6db6844dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd/f3a856ef-1681-48eb-939d-abe6db6844dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:f3:8c:84:06:09:a1:72:0f:99:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a856ef-1681-48eb-939d-abe6db6844dd
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=cbadc554-b9fa-4449-9696-116f11b44f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:62:d2:ba:ee:19:9f:31:b5:3e:42:29:d2:
                    37:0e:04:24:3d:2e:72:78:e4:79:b5:fe:4a:b1:4f:
                    91:56:9e:2f:18:01:e1:23:64:c4:b4:12:4b:e3:33:
                    8c:4e:7d:57:2f:ff:2c:81:11:35:7c:2f:60:fd:a4:
                    90:41:3b:aa:18:b0:e6:f8:f8:d5:03:dc:a8:61:79:
                    89:df:7e:e9:9e:50:fb:0b:af:81:cf:ee:c8:37:78:
                    d4:3d:f0:cf:af:16:95:3b:b4:2b:91:25:1e:50:17:
                    66:e3:ba:fc:9b:74:a7:2a:10:6e:6b:03:ba:7f:97:
                    f7:cd:3c:25:33:5f:ec:66:66:e3:58:c3:04:26:a6:
                    5e:6a:2a:ec:13:cb:ac:6f:7e:95:88:a4:ec:9c:46:
                    8b:17:6b:f2:68:06:20:2d:d3:a4:44:de:76:3b:2c:
                    24:e4:8b:b2:e8:55:73:ed:49:d1:9b:f3:e9:e9:f6:
                    13:90:91:88:53:0d:5f:65:c4:e8:2a:2d:6f:80:0d:
                    e1:96:04:66:f3:5e:1b:23:ed:03:6a:1f:83:33:64:
                    91:f6:5d:80:7f:00:8d:71:14:4c:16:5e:15:f7:05:
                    ff:ef:f6:09:fe:3c:ed:ea:7a:bc:27:b2:ae:5c:0c:
                    1d:b4:69:81:ac:5f:9e:86:cb:37:52:11:ed:05:55:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:84:A8:BD:9D:43:45:38:8D:E9:2B:E4:8B:F0:FD:A1:AA:21:3C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd/382feb09-a618-3379-88d0-e06585c04558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd/f3a856ef-1681-48eb-939d-abe6db6844dd.crl

            X509v3 Authority Key Identifier:
                keyid:2F:6E:D1:39:51:0F:58:BA:6A:36:B9:7D:F3:25:5E:FD:2B:5F:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3a856ef-1681-48eb-939d-abe6db6844dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:58:92:ca:3f:8a:35:59:b4:53:dc:69:bd:6f:c8:1b:88:
         18:7a:94:3d:9d:e1:80:7d:ae:d6:9e:13:d0:2e:7a:2e:9d:9b:
         05:81:94:b0:9f:23:8f:9f:45:ca:73:4f:02:5b:b5:33:77:09:
         4c:3c:07:80:53:c3:cf:8b:55:e7:88:0d:3a:57:6d:dd:5d:7b:
         1c:d3:25:eb:7d:0b:7d:60:13:04:75:08:ea:12:b3:67:0c:f5:
         ce:8d:fa:ac:ad:e9:b9:b6:b4:2f:bf:1c:9b:9b:88:c5:fc:6c:
         41:79:da:45:00:2a:11:57:7f:e3:33:bb:52:dc:87:2c:d4:8f:
         7b:9e:61:f9:73:bb:5b:78:fe:f3:f2:b3:3e:65:6b:46:f4:53:
         e1:0f:7c:4d:24:72:b7:ac:08:a6:4b:0c:b9:63:eb:8c:e4:56:
         87:46:43:61:c9:e1:08:6e:80:59:fd:db:77:06:c1:b1:80:7a:
         7f:da:7a:66:5f:50:fd:0e:3f:07:96:75:d2:ea:2b:b8:71:76:
         e3:c5:0b:a2:07:87:35:62:1b:93:da:54:82:71:1a:b7:77:83:
         77:8f:a2:5a:a3:1a:98:d5:71:9d:8f:85:db:e4:f8:ba:73:6f:
         40:49:8a:a4:a9:3d:ec:05:5b:5e:09:21:74:c5:45:69:02:f9:
         d6:c7:81:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:55 2026 by rpki-client