Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa
File:                     507729c2-e423-364b-9ad4-8254769227ae.roa (raw, json)
Hash identifier:          PMyFInOr4I5kM5Zyg6DbsKtEcceZNOuRqGRYbFpvSJE=
Subject key identifier:   E4:D4:0E:54:F0:B7:52:64:D2:61:10:CC:5F:3D:89:A2:D2:E1:75:5F
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584DB77030A6164F41BEA4D0D5C0
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     54004
IP address blocks:        64.84.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:30:a6:16:4f:41:be:a4:d0:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=6df1cc19-e92a-41b7-b405-e2e1fd32b460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:73:c9:7f:43:b5:b1:60:e9:2f:68:31:07:40:
                    9c:71:5c:88:34:99:9a:b3:c6:5a:48:86:06:82:3a:
                    be:52:18:ef:02:56:6c:f1:22:d4:c8:af:48:22:91:
                    92:27:46:c8:38:b5:33:f9:51:77:6c:18:53:c5:b1:
                    4b:22:39:d4:0e:eb:2d:04:bf:49:36:9e:04:39:fc:
                    e3:e3:ae:8b:42:05:f0:e4:b1:b8:3e:92:a9:69:69:
                    46:98:28:75:46:9f:9c:f0:1e:10:9a:9b:fa:58:d6:
                    f0:01:cf:1e:39:60:67:58:dc:19:92:3b:37:17:5f:
                    81:8f:be:ae:af:1a:28:88:a3:b6:4a:d7:a4:ab:7a:
                    be:f7:08:ea:3d:e8:39:b7:ec:65:74:8c:9c:83:c5:
                    5b:c8:af:0e:28:41:52:c6:71:97:c8:6b:4c:00:ac:
                    7b:f1:24:e3:dc:c6:01:ad:42:19:3e:0e:f5:e6:50:
                    4c:08:69:0d:4a:fc:20:5b:a6:c7:1b:a3:47:21:13:
                    53:f8:66:eb:f9:74:e9:69:94:79:50:e7:0e:04:03:
                    8c:91:87:5b:20:21:be:9a:c0:47:60:12:1c:c0:eb:
                    ba:b1:be:43:fe:b4:35:4a:4d:4f:05:2e:c7:1a:70:
                    13:4e:a6:15:df:07:03:22:a2:63:f7:02:30:5d:9f:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D4:0E:54:F0:B7:52:64:D2:61:10:CC:5F:3D:89:A2:D2:E1:75:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:ec:85:65:3b:9e:a8:00:03:9b:49:77:7a:7b:81:fb:db:
         28:1d:64:05:e4:17:0f:d5:9c:e2:56:4e:cd:17:c3:43:31:8b:
         a9:eb:b6:5f:b4:e1:77:e2:17:ca:c9:5f:59:77:91:36:c2:42:
         d8:f1:5a:25:26:91:ef:5d:3c:24:a3:d0:c7:e6:db:29:b2:ff:
         c9:89:f2:77:be:38:22:df:40:0c:e2:d9:d5:02:60:f4:ba:46:
         90:1c:b7:27:02:ec:bc:ab:0a:d3:46:6d:f4:c7:c6:18:51:9b:
         bd:d2:93:2d:5a:9f:ba:80:ea:29:81:9c:00:64:a6:b9:d2:d7:
         4f:83:6a:eb:b6:be:b2:9a:5e:89:27:8a:50:57:ed:b7:99:21:
         cd:76:06:7d:a4:ea:c7:83:f3:a2:9b:58:42:60:8b:44:0e:cf:
         1a:1c:77:ec:72:2e:44:81:0c:8b:68:d1:bb:23:da:4f:79:fb:
         67:f4:a7:d1:2b:e4:36:90:fa:56:68:e3:d3:66:a0:66:e2:7d:
         b4:2d:5b:45:83:4d:80:e7:d7:ee:05:83:69:52:1f:9e:1e:5c:
         a2:59:9f:63:f7:5e:67:63:e3:35:80:60:93:0a:cc:1b:e2:27:
         25:fc:2a:16:61:70:b2:f0:2f:0d:dc:49:40:07:3b:8e:47:bf:
         96:f0:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:18:11 2026 by rpki-client