Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
File:                     35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa (raw, json)
Hash identifier:          Mcub9z3/yQY4O4pQC1y6bI/WlzsQYHyL2Dui1pfmfbQ=
Subject key identifier:   85:4B:41:F3:49:2A:25:49:3F:89:82:F4:59:0C:EA:44:37:D3:37:2A
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584E2D9F06F9FA126945A6F3B980
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     15830
IP address blocks:        64.112.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:06:f9:fa:12:69:45:a6:f3:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=1304bd8c-3881-4b33-9097-44a1d78b338d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:47:3f:ae:c5:52:e5:35:ae:da:7f:b2:cd:
                    52:08:95:e2:5f:f0:da:8d:59:bb:7b:a6:01:b0:da:
                    7d:f6:8d:5b:a5:3b:80:6e:95:28:4d:b0:fa:46:26:
                    7c:82:da:06:25:d9:a2:0e:a1:95:66:9b:16:20:5f:
                    48:30:82:fe:0f:9f:9d:0e:58:5c:48:5a:a7:4e:6d:
                    d4:ac:fb:89:bd:f0:91:3f:43:9a:6a:c8:be:38:dc:
                    04:50:96:4f:9c:3d:3d:8f:9c:a6:c0:80:b2:fa:41:
                    43:dd:b5:f4:77:73:70:5a:cf:4b:ea:d7:41:f9:e0:
                    ff:73:42:05:08:0e:95:74:da:09:b0:41:d4:78:f6:
                    d2:7c:a9:cb:7a:28:ec:d3:25:41:b9:af:dd:b2:85:
                    56:c9:9d:a9:d1:36:f3:d4:a2:6c:a9:02:43:67:c6:
                    4b:11:d4:af:a3:f4:f1:cc:4b:cf:e6:c5:15:60:2c:
                    82:4c:d5:84:4c:1e:0e:e6:ff:cc:04:f3:60:2a:5b:
                    da:1a:ef:6a:9e:04:92:83:03:46:ae:70:09:ea:d8:
                    31:a1:5a:7a:87:1c:29:67:21:5e:06:39:54:fc:b0:
                    60:e8:65:51:27:c4:df:2c:88:9b:3c:0f:28:c7:f2:
                    6e:db:ef:f3:66:e6:66:6d:4e:a3:2e:a4:a4:61:4d:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:41:F3:49:2A:25:49:3F:89:82:F4:59:0C:EA:44:37:D3:37:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:56:2d:34:65:0e:ae:41:c8:c7:c6:d7:e3:2b:e5:4d:25:03:
         85:96:70:8d:a5:9a:33:cf:62:2f:4e:bd:9e:7c:37:12:fa:c9:
         1f:e3:06:97:8a:1f:09:76:26:bc:d5:af:cc:fc:11:d0:78:27:
         59:1c:21:e8:22:a1:7a:ad:72:bb:e9:a4:6a:a0:1f:38:82:10:
         54:06:f3:a4:9d:eb:4b:bb:12:c7:bd:1c:01:a8:b6:1c:ff:90:
         37:0e:e6:85:60:2b:6a:2b:a3:a1:61:67:65:f7:4d:db:6e:d7:
         48:9d:0e:da:5c:eb:60:9d:be:a1:fd:49:82:7c:5e:a0:36:c8:
         28:93:2c:8d:74:2c:4e:30:3a:87:02:45:ce:9f:9d:8a:45:5c:
         d2:5d:73:c0:b3:96:8a:59:0c:d1:8e:31:5d:da:73:41:98:05:
         40:40:3e:78:6f:e8:c6:ba:57:5c:a9:21:eb:a0:8a:d4:56:e5:
         44:a5:10:b2:79:12:6d:ca:2b:c4:4c:04:96:5b:95:88:b9:ef:
         80:f1:f3:05:f5:60:52:88:4f:c2:bc:79:76:a1:09:7a:8d:4e:
         b1:e2:fe:15:6c:16:ca:eb:9f:66:31:1a:21:75:61:43:2e:c4:
         31:c9:d7:7e:da:77:b8:ed:5d:50:fb:d3:a2:4b:a3:89:4a:58:
         22:97:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:03 2026 by rpki-client