Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/306b7960-0c63-388b-b8c9-3b470d704fd6.roa
File:                     306b7960-0c63-388b-b8c9-3b470d704fd6.roa (raw, json)
Hash identifier:          vV26I8WA6t+ISDgSq9G3RxOceTXjBIs0WUe+V/NErFU=
Subject key identifier:   1E:E5:DD:CC:BB:54:57:C7:B5:B0:6A:84:75:97:AD:5C:E6:2D:19:F2
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584DC135E62E8F825CD5BD4ECE80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/306b7960-0c63-388b-b8c9-3b470d704fd6.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     398101
IP address blocks:        64.202.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:e6:2e:8f:82:5c:d5:bd:4e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=40e8e817-1f87-4d91-8531-70badf894ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:f2:08:ac:62:09:78:97:a0:eb:0b:7b:be:
                    7f:ac:b9:2b:c9:64:2d:ea:8a:c1:07:a5:1c:98:e5:
                    a6:27:54:4a:c9:54:c3:98:9b:65:80:5d:f6:47:0a:
                    2c:f8:f4:97:2d:f6:f7:94:b4:b4:c2:1a:a5:2f:31:
                    b5:47:b8:bf:b7:fb:33:34:67:2b:84:9a:2c:65:00:
                    58:05:87:4d:a5:68:92:b5:4a:6e:8c:46:0f:fa:32:
                    3a:c2:ad:c7:ae:a7:83:8b:5a:64:fa:c2:40:ab:e4:
                    aa:2d:0e:5c:df:0d:90:d3:dd:c2:63:94:29:80:5e:
                    78:16:2e:48:c0:fb:56:32:6f:55:db:8d:8a:55:44:
                    73:dc:3f:9b:36:93:5a:7a:00:35:6d:b5:89:4a:e7:
                    7a:80:28:81:7e:95:af:10:56:48:88:1f:04:c1:1d:
                    19:5a:28:eb:81:08:63:56:03:4c:3d:23:00:68:cb:
                    dd:aa:c7:6c:c3:27:56:3f:0b:a6:82:d9:76:57:e1:
                    a4:f1:0a:58:43:1c:10:e8:ef:0a:f8:46:0f:37:1c:
                    95:40:3e:08:09:98:d1:58:bb:73:f6:66:d6:9d:0a:
                    74:96:b1:b5:3d:68:37:12:97:ec:57:07:c2:7e:9d:
                    56:f6:46:e1:30:44:7f:4b:3d:ea:83:54:83:94:4f:
                    8c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:DD:CC:BB:54:57:C7:B5:B0:6A:84:75:97:AD:5C:E6:2D:19:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/306b7960-0c63-388b-b8c9-3b470d704fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:a3:09:11:b2:d6:0a:3d:3f:c5:c8:d5:74:31:4d:18:37:
         8c:8a:a8:c3:e6:53:e3:17:e1:8f:b8:9d:17:14:35:15:53:ef:
         77:98:17:93:65:5f:a9:2a:ee:41:eb:93:ed:17:fb:87:70:d4:
         6f:31:b9:7a:f5:fe:88:e9:08:16:bf:ff:97:35:fb:d1:18:0a:
         3f:ac:e7:68:4c:dc:63:db:86:a3:36:77:20:22:d5:d2:d4:5d:
         6e:c9:07:18:b0:70:71:9f:bc:b1:d7:d6:5d:81:dd:28:9a:cf:
         c6:c1:e2:7a:49:4d:e0:73:c3:a0:55:de:15:19:7f:73:0d:f0:
         e6:23:d3:b4:25:0d:27:db:69:dc:f7:f6:67:41:28:3a:04:01:
         8f:a5:ee:fb:20:02:01:b9:e8:08:e3:04:5d:34:6b:8e:30:52:
         61:5c:67:97:05:7f:a1:32:be:8f:eb:7d:ba:2f:80:8a:d7:07:
         3b:1e:3d:e0:06:e2:6b:f1:4c:ce:3c:42:82:6c:b7:84:00:a1:
         4d:6f:15:13:fb:62:30:a5:82:04:e5:13:4e:74:95:7a:cd:8d:
         71:aa:ab:8c:fc:2f:ed:6b:71:12:74:57:c2:33:93:b1:11:bd:
         2c:26:67:69:48:b6:24:23:db:83:9e:3c:28:44:4c:0a:3d:92:
         5f:eb:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:58 2026 by rpki-client