Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa
File:                     c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa (raw, json)
Hash identifier:          Vhn/LxN0RLcDZk2QwlA+nMER+Hxv+XqRKRgZ0+QUtkc=
Subject key identifier:   4C:7A:97:DB:34:34:E4:19:A1:86:93:B0:EB:F7:A5:A1:30:AE:6A:60
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D8EF584E1B5F7A87EEDEF8560
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     13768
IP address blocks:        64.34.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:84:e1:b5:f7:a8:7e:ed:ef:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f3e21062-ee03-4a58-b03c-28a82267af75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:36:26:70:78:f1:4e:b8:1c:87:7f:3a:c4:
                    e5:36:98:b9:e5:a7:d0:e2:db:50:8f:29:de:59:ca:
                    bb:51:ac:f9:98:5b:1b:58:0d:aa:2e:75:e4:d6:83:
                    bb:b1:42:0d:95:e8:3d:15:64:7c:69:1e:4a:67:e3:
                    66:cd:d4:5f:a7:a9:ed:8c:a4:1b:d9:f3:87:99:58:
                    d5:48:ab:af:a3:51:01:f0:5f:c2:4f:85:c7:f4:0d:
                    34:f8:72:99:ad:81:45:56:51:68:5b:3c:ec:34:e8:
                    03:2a:15:79:52:57:b9:e9:93:c4:8c:96:57:53:84:
                    28:03:5e:71:eb:4a:fb:88:8f:f9:c7:56:f2:98:03:
                    75:bc:66:19:75:fc:07:db:44:34:91:ba:d1:d8:87:
                    a5:00:59:24:d9:49:5f:df:ab:a2:6c:06:3c:09:cd:
                    b6:d5:c5:18:81:4e:16:14:73:96:b1:db:fa:e8:0f:
                    39:36:fa:62:cb:69:f9:0c:43:07:03:c4:d9:93:46:
                    50:19:23:a1:88:c2:11:a0:c8:9e:df:97:4f:4b:9a:
                    9e:6e:14:28:4f:e9:6c:0d:9c:a6:c1:e9:eb:43:41:
                    df:d6:ad:78:19:55:55:0f:c2:32:0f:99:72:f8:99:
                    30:bd:d5:89:2c:be:59:01:2d:e9:3b:ab:1e:ab:f7:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:97:DB:34:34:E4:19:A1:86:93:B0:EB:F7:A5:A1:30:AE:6A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a0:20:79:99:14:2e:a3:ba:5e:4a:94:2a:f3:c9:f8:1a:ca:
         b3:ca:51:bf:4d:5a:b6:96:f9:ca:2f:85:f9:54:0a:c2:59:33:
         af:ce:79:f4:78:a2:09:ee:b8:ed:78:ec:bb:d6:20:46:55:cb:
         d6:4e:41:44:31:b1:5f:74:87:c3:ba:75:fd:c8:c5:50:3a:0c:
         a6:f7:81:10:ca:d9:6a:f5:d9:0b:c7:34:d2:99:22:f8:64:c2:
         28:8f:3f:39:a4:be:ad:08:7f:7b:f0:48:d8:e0:70:27:18:b9:
         3f:54:4c:12:db:66:c0:8d:24:23:07:84:3b:aa:53:e2:88:4e:
         34:2f:cd:70:2e:c1:9a:7c:00:f6:c6:92:77:c6:6c:d1:56:79:
         72:44:a7:fd:25:ba:2b:5e:41:ec:e5:ee:66:55:2e:00:79:40:
         ad:81:49:b7:a2:34:0b:f1:41:5f:a4:80:a3:0c:62:ac:65:ea:
         89:89:3c:8b:4e:16:a5:f4:76:85:c0:ad:2b:a7:19:c5:a8:be:
         37:7e:49:8b:2c:75:10:f3:66:dd:65:5f:08:44:31:cd:67:4f:
         93:a4:0c:ad:15:85:63:4f:36:64:ad:2c:ce:dc:70:70:2b:2d:
         3c:62:9c:04:a7:c3:51:83:ae:97:5f:6d:41:cd:44:7c:47:16:
         5d:94:29:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:11 2026 by rpki-client