Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa
File:                     8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa (raw, json)
Hash identifier:          zBggY3bf8lY6yTPlCiQqj553yQGhLO1s4SFzivqajCE=
Subject key identifier:   0D:44:E3:10:8C:67:04:E5:16:A4:4E:48:40:35:4C:FE:C1:DE:85:13
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584D27AA2D558870EEA10A7B29C0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     46261
IP address blocks:        64.79.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:2d:55:88:70:ee:a1:0a:7b:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=6455ef89-dc97-4b98-ac19-8a2925479052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:23:07:40:6a:1f:35:73:64:46:27:88:25:
                    c8:c0:58:39:c0:15:c8:e6:8b:00:e1:22:15:c7:92:
                    17:43:41:51:c0:f5:4a:01:f7:cb:79:df:e5:70:81:
                    ed:87:75:69:11:3a:d1:7f:9f:9d:e7:68:27:3a:37:
                    93:53:4a:56:dc:3b:ca:72:58:35:ad:1e:31:25:8d:
                    ad:47:48:9c:54:57:23:92:6b:44:70:4b:b2:86:db:
                    21:c2:ce:1d:9e:50:12:c6:26:0e:1b:04:5f:95:05:
                    2d:3e:dc:2f:63:c7:fa:ca:a0:80:0a:96:30:85:e0:
                    7f:f8:d8:9e:6d:e6:46:25:63:f6:53:e3:20:0f:28:
                    d4:2e:b4:05:02:36:48:70:7f:0b:ee:3c:ae:ab:f6:
                    9a:33:50:8f:54:86:ea:8d:f1:ea:d3:0d:f2:83:1e:
                    58:fe:49:62:92:03:21:91:54:66:2d:ab:2d:ca:f3:
                    ae:d4:92:2e:ec:fe:6c:fe:42:a1:69:98:de:e7:a4:
                    e7:2e:21:23:d7:67:94:7e:43:ba:89:3f:f5:ba:7e:
                    af:e3:f2:f4:08:c8:e1:fb:05:b9:8a:01:f8:02:02:
                    47:9f:99:0c:94:6b:2a:7e:52:4b:da:cd:cc:75:69:
                    88:ce:f3:c4:d8:a0:44:8a:f6:3f:9a:77:21:9d:55:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:44:E3:10:8C:67:04:E5:16:A4:4E:48:40:35:4C:FE:C1:DE:85:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:10:8f:0c:55:02:c9:6d:28:a1:a0:45:20:88:3a:52:8f:d6:
         fe:74:83:7a:44:41:0c:5d:5b:04:26:bc:03:c4:8e:b7:f1:7d:
         22:d8:35:ed:ef:ff:65:82:96:a3:94:c3:43:09:86:4a:b0:29:
         7a:c2:41:9e:9b:09:e8:3f:4f:4d:ee:b8:63:b7:59:37:17:b0:
         82:ac:c1:21:7a:c7:46:ee:c2:b9:39:e4:06:8c:1b:dd:b7:e2:
         b7:7b:42:d2:dc:b2:ea:4a:15:94:77:74:c0:83:ac:16:22:af:
         09:3a:c6:9a:80:42:6b:61:15:b9:c8:a7:4f:5b:59:d1:96:23:
         88:ed:0f:c5:66:6a:1f:ef:f3:35:9d:68:2c:0d:4c:8d:ac:30:
         06:4e:b1:73:fe:ec:94:fb:41:a2:fd:c1:a5:b5:6f:35:a3:89:
         05:f9:53:93:8e:59:9d:53:bc:27:5d:73:de:69:62:57:68:7d:
         b9:05:7e:ca:f5:32:d2:f2:ce:09:85:9d:f2:81:94:5d:8f:eb:
         5e:b4:d1:6e:2f:5b:ac:bf:2f:64:99:91:e2:ab:d2:cd:bd:c8:
         0e:2b:fa:ee:1c:2c:f7:11:d0:10:a6:1a:20:66:4b:f3:7b:7b:
         fc:ab:9b:6c:6c:a5:45:4a:e2:13:29:28:6e:94:b2:15:75:16:
         9f:d1:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:28 2026 by rpki-client