Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
File:                     9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa (raw, json)
Hash identifier:          Crm5nf8b99ZwHGJEyrEttiOAtXKuwKvmwZJ9YENBsyM=
Subject key identifier:   DC:40:11:05:D4:B9:60:45:30:1D:23:58:1B:7A:AF:DD:5F:9E:FA:95
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584DD35B098C98C3D1A9DA8B9480
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     393336
IP address blocks:        64.40.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:09:8c:98:c3:d1:a9:da:8b:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=527748a0-ca37-49fb-818a-a2479e4d5f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:9b:12:25:d6:f7:fa:e3:ea:15:e7:80:62:
                    9d:94:3f:9d:37:72:d5:cd:65:57:35:18:a9:09:d1:
                    11:38:f7:ac:00:cb:e7:4e:89:de:4d:79:b7:e3:c3:
                    de:fb:cd:90:06:e1:4f:a4:3a:de:14:ff:30:88:5d:
                    74:5b:31:60:91:3f:a5:2d:06:d1:6c:33:0b:b2:e9:
                    62:e2:4d:0e:15:41:ed:e2:94:3b:de:e2:a4:b9:57:
                    8c:ea:15:f8:f5:1f:13:ab:ea:f0:bd:ce:bf:d1:94:
                    b5:46:24:6f:a2:a6:9a:5f:f8:d3:33:84:62:3a:05:
                    21:ee:8a:eb:4d:7b:e7:23:ea:89:b1:9e:bb:e9:71:
                    6f:6a:1b:2c:54:1b:38:22:e9:87:7a:be:a0:74:71:
                    18:7a:5a:fb:8b:92:0f:99:e8:32:29:e2:89:1e:a8:
                    07:5d:a4:0f:e1:ea:a8:9b:8a:56:1c:d0:fc:ca:d6:
                    fb:e4:e9:ea:67:7d:65:b6:0a:14:f5:92:19:a4:a1:
                    e4:a7:05:fb:19:91:19:36:d9:7a:6a:3f:b4:73:e9:
                    cf:fc:75:d5:53:d2:47:34:9b:34:96:8c:5c:9c:b6:
                    d8:a0:58:04:37:74:c1:88:50:af:99:ac:f1:58:85:
                    e5:8c:28:cc:b6:e7:f0:1f:fd:31:17:da:95:73:20:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:40:11:05:D4:B9:60:45:30:1D:23:58:1B:7A:AF:DD:5F:9E:FA:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/9687f9d6-a6cf-3603-bf2f-8727f81aaa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:46:d4:f9:3c:bf:cd:cc:b3:b7:c2:47:0e:52:46:14:2b:2c:
         59:80:ef:2b:f7:4a:b5:fd:49:10:c8:09:97:26:9c:f0:eb:01:
         d5:39:5e:2b:e2:5a:eb:00:2e:41:72:4b:1a:07:81:fb:77:69:
         86:02:1c:29:2f:99:8e:fa:31:32:e1:96:eb:4a:9e:40:39:c4:
         69:52:87:9e:0b:91:e1:69:b8:e4:49:5b:30:2d:e7:73:46:9a:
         81:b6:d7:09:48:d9:be:35:be:d2:ad:bc:66:7f:7e:5f:1f:d1:
         0b:b2:00:62:f1:ba:0a:a8:60:31:a8:fd:55:6a:ba:3d:9f:0b:
         3d:c8:f6:53:48:9c:3e:36:c0:26:4c:db:22:08:3d:01:24:b2:
         4d:f2:93:4d:70:c9:d9:b0:86:93:cf:e6:00:aa:86:85:96:a8:
         bf:41:93:9d:dd:01:1b:df:72:b0:c5:ba:a7:b8:23:fe:37:ce:
         f9:f5:db:59:5a:27:d3:46:8e:fb:da:2a:5a:9d:8c:a0:9b:ad:
         a4:8a:0b:47:22:64:e9:88:70:09:77:b1:86:9f:88:3b:47:85:
         f1:ba:6d:3e:b6:7c:1d:15:31:64:d5:62:8d:44:f6:4a:61:b5:
         c1:d6:3a:fc:df:45:ea:28:20:b2:83:7b:41:45:e4:ae:25:4a:
         fa:16:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:57 2026 by rpki-client