Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/4e1acd87-2fc8-3525-b1f2-4970849e4863.roa
File:                     4e1acd87-2fc8-3525-b1f2-4970849e4863.roa (raw, json)
Hash identifier:          7kaPo/mOD3Vvx7nbvcaubgUoVGBJ06+JRBitK1knZig=
Subject key identifier:   B4:7B:FB:2A:E5:74:AD:D7:86:57:30:27:7D:FD:2A:0B:E9:C1:40:CC
Certificate issuer:       /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
Certificate serial:       010D0C9F4328584D7A05542715CA51483ECEF380
Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/4e1acd87-2fc8-3525-b1f2-4970849e4863.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     205759
IP address blocks:        64.89.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:54:27:15:ca:51:48:3e:ce:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=0d0dd728-f322-40be-8899-ab51e2475e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:f5:11:30:05:3e:9d:02:f8:43:48:3c:04:
                    39:e0:2c:ae:f6:9a:d2:d6:e5:ae:68:b6:30:1e:0e:
                    3d:f5:5d:f4:88:94:3c:46:0c:c9:44:cd:38:b5:71:
                    74:d8:9b:be:78:f2:a2:37:f6:1f:9f:a4:27:6e:b1:
                    a2:8a:96:b2:04:2a:a7:91:0b:f7:de:e5:68:1c:00:
                    0c:54:f9:fa:70:a6:c3:21:d0:70:90:e3:2a:10:ef:
                    01:d9:0a:a5:d1:81:c4:f6:4b:b7:82:e9:da:0b:46:
                    ed:50:6d:1a:73:c6:db:fd:2f:74:e3:2f:41:34:30:
                    eb:b2:be:da:50:4b:17:fd:eb:fe:42:ca:9f:75:25:
                    0a:06:81:4b:e4:c0:05:b7:30:b5:c3:83:cf:ce:17:
                    2b:a6:1e:72:80:ce:07:fc:a0:23:73:77:c8:cf:d5:
                    66:32:10:92:7d:88:de:f1:cf:a2:78:a7:51:74:bb:
                    b0:02:3a:27:d1:f2:86:c9:36:96:93:b7:4f:ea:be:
                    7c:e9:0b:8c:ff:c4:ff:8e:b2:09:be:62:da:60:23:
                    e6:0a:b4:8c:9a:ee:ec:36:eb:0a:a2:4c:e4:41:27:
                    6a:7d:0a:f7:cf:38:38:c5:d2:58:84:af:47:35:c3:
                    53:ce:65:80:fa:7a:49:f1:e4:ae:85:ac:a6:22:83:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7B:FB:2A:E5:74:AD:D7:86:57:30:27:7D:FD:2A:0B:E9:C1:40:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/4e1acd87-2fc8-3525-b1f2-4970849e4863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:80:2d:f7:26:35:f9:43:68:5c:ce:f2:b5:0b:ab:0b:18:
         60:49:af:23:68:01:86:6e:3e:89:55:06:20:b3:1e:e7:6f:79:
         b1:cb:26:38:c2:5d:cb:31:0e:80:a7:92:c9:53:0d:b4:b4:15:
         df:1a:4e:ce:cb:6f:e9:3b:0f:02:2b:4b:57:10:dc:30:46:77:
         07:e5:d8:a2:13:70:68:94:fd:d9:e7:30:fc:40:6d:8e:16:77:
         0e:99:18:0b:d0:eb:03:d2:00:66:84:c8:19:4c:be:a7:2a:8c:
         76:64:41:f2:f3:b2:9d:2f:c9:3d:80:be:64:07:b2:eb:81:37:
         4d:e5:fc:f2:3f:14:51:67:6f:5c:04:f6:b9:e0:a6:23:ca:8f:
         a9:cc:7b:69:bf:7c:ae:6a:0b:d7:97:9d:38:31:45:b5:c4:37:
         5d:c0:c6:18:db:6f:0a:3f:b4:f1:c1:68:56:05:13:5b:27:82:
         24:20:40:8c:77:eb:8a:93:22:9b:7e:d4:46:3e:55:8e:06:7b:
         30:d4:ce:c9:13:aa:c7:32:b9:65:04:52:d3:c2:b0:d8:e7:95:
         ba:50:e3:24:85:32:5a:5c:5c:74:30:2b:3f:29:79:36:0e:6b:
         29:3e:8a:84:44:a5:d8:e8:92:35:bc:3f:95:02:f6:34:9b:7a:
         a6:68:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:04 2026 by rpki-client