Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81675376-f63c-354f-80d1-fbd89ce0a507.roa
File:                     81675376-f63c-354f-80d1-fbd89ce0a507.roa (raw, json)
Hash identifier:          bQYnmjIPgZHW/4UsRm8Qlcb8HyHMe1shbEm4aFMYF/A=
Subject key identifier:   4C:BC:34:C9:AE:CC:7A:AD:56:96:F7:61:30:2C:D8:17:C2:43:CD:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA0A9CAFE0E4FEE5BBBC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81675376-f63c-354f-80d1-fbd89ce0a507.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     54288
IP address blocks:        64.62.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a0:a9:ca:fe:0e:4f:ee:5b:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=c346d3b8-1758-40c0-b146-aab11968f92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:10:09:bb:3c:87:80:20:9c:34:4c:03:ce:
                    42:c7:63:05:b6:51:2a:b1:b6:00:51:bb:bf:8d:a4:
                    d4:69:79:6e:00:30:dd:86:97:13:89:cf:4e:ed:30:
                    47:ff:3a:85:6b:09:d8:d5:91:8b:19:26:78:b8:6d:
                    c2:6b:c3:9b:56:e0:0a:b7:4a:b6:20:2c:08:40:8c:
                    da:7e:e2:26:ba:af:6c:d3:8b:34:d3:63:32:ab:80:
                    c8:83:95:2f:dd:22:6b:5c:05:6c:a6:69:60:c5:e6:
                    51:70:c6:ae:1a:fb:b5:a2:ac:df:a0:b1:3a:50:bb:
                    1b:6a:70:44:f6:b3:6a:c6:b8:20:33:db:fe:ba:f7:
                    c3:80:0a:4f:75:6b:ae:dc:0d:16:f8:c7:81:a4:78:
                    cb:16:7c:ed:fb:a3:97:44:74:5b:ef:17:ce:33:fd:
                    90:07:36:b2:45:0b:5a:50:a0:02:a0:ef:b2:dd:cf:
                    6d:56:1c:d6:69:35:94:7c:5e:d4:1e:1f:65:23:97:
                    37:5d:e6:3c:98:e3:d1:d6:a4:1e:8c:06:a0:bf:f0:
                    be:c8:5a:03:35:ce:c4:34:f0:b0:96:30:e3:39:ba:
                    ae:ab:6c:49:cd:62:1b:52:8d:0b:17:25:37:2d:9a:
                    ed:b4:0c:36:88:4b:b4:a2:a2:0e:c1:ad:8d:ce:84:
                    9e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:34:C9:AE:CC:7A:AD:56:96:F7:61:30:2C:D8:17:C2:43:CD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81675376-f63c-354f-80d1-fbd89ce0a507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:61:2e:98:b1:9b:f9:03:75:ee:99:ec:1d:bc:c6:41:94:ff:
         be:7d:67:99:41:af:04:fe:da:be:9b:75:7b:60:4c:7d:d6:9e:
         44:b1:28:d3:f3:07:9a:3f:63:33:29:95:9c:72:52:8e:fe:26:
         ac:7a:53:77:ee:fe:23:2d:a8:8e:a4:d2:46:a7:39:6b:ff:a2:
         64:42:46:77:f7:1e:95:d2:33:9d:47:e5:a3:82:e3:65:4b:88:
         09:bc:30:6f:ae:6f:e8:76:5c:fb:12:91:d8:11:f7:ef:25:7e:
         5f:f8:c3:9d:26:78:7a:ef:06:3f:4b:ed:2c:5e:0d:52:74:21:
         1d:25:2c:56:6e:9c:54:6c:b2:8b:98:df:42:ed:f0:0a:7b:72:
         de:3f:62:69:a6:c8:fe:fd:bc:25:e4:ec:e4:de:e1:a1:37:45:
         43:64:f4:42:fc:d0:98:ef:e4:8c:1b:a8:0a:27:7e:fc:17:c1:
         98:61:a3:b0:3b:ed:85:03:1c:df:55:b4:26:eb:e8:37:c9:f6:
         b4:37:e2:84:cd:3c:9a:0c:7d:37:4d:fc:af:54:47:ae:f3:58:
         bf:45:9e:ba:a1:b6:2f:10:eb:08:7d:e1:fc:88:05:fa:2b:aa:
         6b:fc:ea:a5:20:6b:ad:96:ef:17:70:3e:96:c4:ff:40:bf:65:
         17:e3:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:31 2026 by rpki-client