Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
File:                     a468cae4-4d9c-382f-8572-d90d29d27e8c.roa (raw, json)
Hash identifier:          LrZe2pmc5iM1DYET+z0zbTcOT8tJ3P1DtWqk5PZ3Z9Q=
Subject key identifier:   99:48:41:90:A0:B0:E9:8C:79:06:08:8C:30:8F:35:B5:19:7F:3D:DA
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584D23B794B1B3887B043E0C4200
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     26277
IP address blocks:        64.235.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:b7:94:b1:b3:88:7b:04:3e:0c:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=2ee2bee3-8777-49c0-82bd-d410e9d4e0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:56:3f:81:06:09:99:dd:42:0a:7b:eb:fe:
                    8c:40:a4:05:d0:ec:e8:6c:9a:06:c3:87:ed:e0:9c:
                    6e:8d:df:20:1c:7a:e8:d2:fb:da:3e:1c:55:ba:41:
                    30:13:d9:38:11:72:5f:44:83:a8:88:e3:ab:86:51:
                    d2:10:4b:df:0c:a8:07:87:fa:45:85:75:6a:27:ea:
                    66:1d:ce:d9:70:6c:49:45:ba:2f:ae:9f:8e:5b:b2:
                    4a:28:5f:fe:79:7e:fd:fc:d5:e5:8b:dd:e4:08:fe:
                    7f:67:bf:10:80:6c:71:59:b5:5b:a5:3f:3f:3d:38:
                    9b:95:bc:74:81:67:f6:47:b6:5c:bc:f1:45:85:80:
                    49:82:79:60:3e:73:e0:fc:74:11:51:8d:23:51:ec:
                    ce:33:6a:cc:d5:ea:f5:a0:8c:99:36:30:a4:c6:ed:
                    c2:da:a5:c9:41:03:6c:50:98:8a:78:13:fd:7b:1f:
                    3a:6a:68:2e:ab:fd:40:e2:80:03:e7:fe:f5:54:9b:
                    6f:ab:40:0c:1d:9d:11:45:64:1f:5b:fa:96:c6:c3:
                    78:18:22:e4:ae:c4:2e:48:fe:90:3c:f0:ca:b6:cc:
                    25:fc:0d:e2:43:ce:31:8f:69:83:a8:ee:24:f1:57:
                    9d:0a:55:4d:3b:d9:03:3d:68:8b:78:b1:9d:05:5c:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:48:41:90:A0:B0:E9:8C:79:06:08:8C:30:8F:35:B5:19:7F:3D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.235.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:2c:f9:bc:a9:96:37:4e:11:0b:69:82:c7:23:f3:18:5f:
         19:c5:df:e9:9f:d0:e3:47:45:bb:bb:dd:a7:e8:82:50:6e:ce:
         d0:28:c4:16:7c:3b:c4:e5:3e:6a:60:6e:c6:6d:76:59:6a:27:
         21:35:7c:46:c6:ca:f1:72:24:23:6f:bc:93:10:de:a8:37:7c:
         a4:c0:64:f3:db:40:f2:bd:8a:02:b1:a4:5f:2d:80:a4:06:d7:
         a6:1e:2d:39:8d:54:0c:3e:9c:1a:10:dd:83:bb:73:bb:1b:79:
         c8:28:64:6d:38:51:1e:3e:64:74:d0:64:fb:f0:22:26:44:a4:
         2f:a0:a4:a7:e2:96:74:6b:e3:94:da:e7:14:eb:fb:34:b8:8d:
         db:e0:5e:fc:51:11:a1:34:5f:ca:6b:bd:bb:4b:27:9e:f4:c5:
         d9:15:80:fb:93:5a:fc:6a:ff:7c:ec:12:19:47:49:95:bd:e7:
         61:1d:83:cf:ba:b0:4d:1f:bc:dc:78:e3:b9:d6:a8:41:00:93:
         35:90:d4:0b:bd:8f:c3:72:6a:88:9b:10:52:1e:4a:4e:c8:40:
         3e:e1:5d:0d:9c:5c:77:7a:3f:55:a2:15:7f:75:41:ce:72:80:
         b9:c6:8a:61:dd:9a:52:13:9f:aa:41:51:d4:7f:ba:06:cb:9f:
         1c:9b:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:03 2026 by rpki-client