Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
File:                     0c31095a-f221-3a40-954f-4edf440bb06a.roa (raw, json)
Hash identifier:          BHayH44ALmJVqv/HewQtiZSGIzzA8w7Iauaet48DCOM=
Subject key identifier:   E0:03:46:F5:47:D3:80:1A:F4:A4:B2:44:6A:BE:89:E4:67:B0:19:0B
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584D91C01A76EE2F209A50EECA00
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     398465
IP address blocks:        64.84.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1a:76:ee:2f:20:9a:50:ee:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=bea4c6af-1916-461a-834a-f28a6f69d26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ad:6b:f0:af:e6:84:7f:83:11:27:72:f9:70:
                    8f:1b:69:b9:d3:42:33:4f:cb:ce:e8:53:7d:80:ae:
                    5f:27:1d:f2:dd:80:c4:83:32:d9:b9:5d:4a:e7:dc:
                    b8:5a:e9:4f:7a:88:7b:35:ef:9f:7e:66:5b:b5:9f:
                    f3:1c:ef:68:58:51:c7:7e:f5:38:86:81:a8:95:f1:
                    d3:63:b3:2a:f6:b9:4f:08:01:4c:32:8e:2d:e6:e1:
                    4d:db:54:a2:63:8d:6e:86:e3:3f:b9:34:b4:7a:6e:
                    2a:b2:8b:8a:ab:3e:48:17:a9:e8:26:83:4a:03:d9:
                    ce:06:18:16:38:31:fa:ac:2d:e1:fb:75:44:ca:dd:
                    05:83:53:17:0d:02:cd:f2:f0:91:33:f5:34:21:f5:
                    7c:29:e7:5c:4b:b6:7b:77:0a:18:12:fb:3b:ca:15:
                    ea:7f:63:72:27:91:ca:90:5f:e8:0f:c6:51:61:9f:
                    d6:1f:38:ca:7e:ea:d8:b0:97:e1:c2:a7:c0:c9:04:
                    79:ae:c1:9e:54:4c:2c:b3:28:ce:f7:8a:d2:30:df:
                    60:0d:56:dd:c0:b3:af:72:07:3d:42:fd:54:3b:2c:
                    0d:89:75:80:89:b5:a2:58:b5:6b:26:d4:09:b1:ea:
                    1e:85:45:f2:44:43:99:36:27:a8:19:eb:ea:35:74:
                    9c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:03:46:F5:47:D3:80:1A:F4:A4:B2:44:6A:BE:89:E4:67:B0:19:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/0c31095a-f221-3a40-954f-4edf440bb06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:11:c4:78:b4:76:d0:af:48:b4:bc:78:af:da:a9:84:c2:25:
         70:30:70:49:83:3a:1f:73:c3:5a:ba:49:bb:76:9b:d0:a8:6a:
         16:17:49:4b:27:7e:30:f0:9b:1f:69:4f:a0:e6:d6:37:a3:f0:
         1c:b2:52:4f:f5:72:4b:fe:3e:8a:7e:b8:58:5f:dd:7d:68:10:
         b8:c2:4e:51:f6:fa:f8:83:83:e4:56:d0:ef:2f:b3:a4:1f:4a:
         e3:b8:6a:b3:2c:ab:78:6a:16:59:04:94:6e:c2:01:22:32:0f:
         76:62:19:6b:04:1d:85:79:ab:7d:24:49:8a:02:bc:72:2b:09:
         51:f9:dc:89:18:b1:65:8a:96:8b:e0:1f:57:4d:b1:5f:1d:7d:
         2a:d3:ef:d1:87:74:9c:d6:1d:af:3e:3c:35:e6:13:78:00:08:
         92:70:79:97:ae:01:da:3d:0f:20:8f:2a:0f:4f:9c:80:ac:61:
         fc:66:25:5b:b4:73:7b:8c:72:12:4d:d5:f8:ce:89:cf:3a:f7:
         ef:0e:e0:f5:b6:b6:a7:63:28:b4:fb:c6:aa:06:65:6c:af:8e:
         36:f2:24:40:98:2f:66:39:de:f1:b0:fd:1f:47:fd:5b:92:7c:
         64:40:51:2a:12:99:62:d9:42:50:a7:63:d6:d8:27:0e:6c:92:
         57:8d:72:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:10:25 2026 by rpki-client