Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa
File:                     1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa (raw, json)
Hash identifier:          jf/xNQ1S0l63qEgRNHy21MISA1gkShBrcakTi20/AQo=
Subject key identifier:   8A:8D:36:59:D3:ED:6D:5B:87:9A:A0:28:E3:12:C3:C2:2E:00:10:23
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D40CA425FC2C24F92852D5540
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        207.64.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:42:5f:c2:c2:4f:92:85:2d:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=2497fe57-c2b5-42a3-b518-829dc4aac33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:8b:94:e7:7d:2e:97:84:6a:4a:1c:f0:47:
                    e0:70:7d:99:2b:7c:44:f8:23:73:dd:e2:43:28:ce:
                    75:1e:27:25:fc:33:f2:7c:b6:c7:d0:1e:fc:7b:78:
                    76:2c:f5:b1:a8:0a:b8:69:9a:d8:b5:a7:35:21:1f:
                    f2:af:4c:78:74:8c:be:05:87:9e:93:13:e0:ef:a8:
                    65:c9:0e:4b:b0:f3:67:ea:80:52:de:43:3e:4a:53:
                    34:20:e3:9f:70:11:0d:2a:b3:b7:e8:19:d8:48:0f:
                    26:d0:82:f6:fa:98:59:a7:00:b1:3f:3e:11:c4:ff:
                    9e:65:3a:f9:8a:39:bd:df:cf:1b:ea:a5:0a:27:d3:
                    b5:a1:df:73:3d:74:fd:3e:ea:e2:7f:02:de:ea:e0:
                    f8:52:89:a7:26:0b:8c:88:31:f0:a3:ea:82:91:3f:
                    c3:64:53:f7:67:70:28:84:1c:4c:66:9a:d7:f0:54:
                    49:a1:01:38:b9:27:2e:c8:33:4c:d7:6e:68:75:8b:
                    9e:98:d6:91:d4:84:1e:92:dd:01:90:55:8d:4b:c3:
                    6e:43:1b:62:17:1e:81:b4:96:ab:a7:86:c3:2a:68:
                    5a:76:e8:97:92:e1:e6:36:c2:06:db:56:40:79:30:
                    51:c0:07:45:a0:ad:c1:e1:8c:fb:02:a1:42:82:a4:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8D:36:59:D3:ED:6D:5B:87:9A:A0:28:E3:12:C3:C2:2E:00:10:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.64.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:99:29:ef:25:a4:87:bb:ac:fa:51:ad:7f:e4:d5:17:9a:37:
         7e:0d:98:30:7a:69:8b:52:5f:e6:5c:c8:09:52:f3:4b:f9:e2:
         1c:02:1d:65:08:8b:47:43:77:4f:43:af:05:70:8c:74:5c:12:
         6c:4a:3f:93:d4:59:c9:61:9a:a0:8d:9d:12:a2:7b:7e:db:37:
         e7:af:8b:1c:dd:ac:8c:e3:aa:22:52:60:dd:ef:48:b4:ca:a4:
         10:a9:40:6b:d9:da:28:c9:59:c3:0e:fa:3d:10:c0:80:f2:23:
         1d:f9:15:53:cc:df:eb:eb:90:6d:df:a5:12:61:4f:29:a6:33:
         a5:8b:cb:b4:10:66:da:47:61:93:14:cb:62:35:fc:36:1e:df:
         3d:c9:4d:52:f3:f3:86:2b:1a:16:a7:9f:de:4f:96:52:73:67:
         72:16:7c:db:eb:6d:85:db:7e:49:64:e1:c2:c7:be:ce:49:90:
         ce:43:c7:5b:3a:31:2b:ce:33:de:4e:ae:12:1d:41:cc:61:fc:
         af:c3:9e:05:8c:de:af:e8:6e:ea:2c:56:26:41:94:55:6b:a4:
         c6:78:a6:87:8d:61:1e:7b:fa:1f:15:d3:55:71:5e:57:1a:40:
         51:70:16:fd:7f:a6:87:75:9b:f3:f2:26:70:61:51:67:7d:db:
         a0:54:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:20 2026 by rpki-client