Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3ec70fbd-855b-35af-b959-30bf9db48b25.roa
File:                     3ec70fbd-855b-35af-b959-30bf9db48b25.roa (raw, json)
Hash identifier:          B98BlWLMJggvK2MZc5UCYoTLubcolSYA4MbWm7U12ic=
Subject key identifier:   65:AA:AF:53:9F:B4:D3:16:BB:03:57:E9:B0:EB:8E:79:02:18:47:06
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584DCF2B1AFB165CAB01BC467300
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3ec70fbd-855b-35af-b959-30bf9db48b25.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     812
IP address blocks:        64.119.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:1a:fb:16:5c:ab:01:bc:46:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=fe597df1-2923-4d49-84a6-e71d476d897e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:72:60:36:f7:20:e5:5a:23:5e:80:9e:74:
                    47:33:67:53:a0:bc:54:b7:c0:c3:aa:fc:7d:5d:62:
                    d1:6e:97:7b:fd:b7:54:9e:89:7e:7b:f0:b0:47:7e:
                    44:b5:7f:83:f9:fb:24:ae:1c:78:fc:f8:98:7d:19:
                    96:74:35:87:57:85:94:70:e2:f8:9b:c8:c7:a4:fb:
                    a3:69:cc:b2:75:2f:76:6c:e4:64:bf:7a:be:48:1b:
                    99:ad:15:ee:8c:c6:5e:1a:c6:5a:22:d7:74:f0:27:
                    cb:54:fb:a1:5d:76:26:14:be:4c:af:31:9c:84:85:
                    fd:92:59:a9:a0:00:be:e9:56:b8:3f:19:45:75:9b:
                    0d:08:cf:db:94:dd:56:d4:4b:70:bc:52:fd:9f:40:
                    db:9e:38:ab:c7:83:42:fc:f7:2b:e0:90:db:7f:9d:
                    c1:dc:08:1e:38:f6:01:f4:60:84:fc:a6:7a:b3:1d:
                    93:41:80:11:b1:28:50:16:36:9e:23:69:ad:eb:cb:
                    ca:3e:87:f1:12:aa:6a:64:b4:7e:f3:72:03:fb:68:
                    78:33:ad:57:1f:1b:8e:03:4d:b9:b6:dc:02:dc:a9:
                    81:ad:a3:aa:de:e2:60:4a:8c:67:55:35:10:bf:84:
                    e9:aa:04:e0:9b:56:1b:f5:0d:0c:34:28:1e:23:bf:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:AF:53:9F:B4:D3:16:BB:03:57:E9:B0:EB:8E:79:02:18:47:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3ec70fbd-855b-35af-b959-30bf9db48b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f7:b9:05:06:c3:1e:db:47:4b:bd:68:2f:63:24:af:3c:d4:
         98:90:70:31:6f:df:e1:98:2e:76:75:94:6d:bf:dc:38:14:f6:
         d1:2b:a0:3d:cd:e0:c5:b4:35:1d:95:06:64:35:64:9d:b3:34:
         7c:79:42:57:f3:ed:95:c4:4c:92:f9:cb:e1:d5:a3:f8:fd:28:
         75:8d:e2:94:d4:a3:93:7b:77:83:39:86:cc:d7:20:48:54:7b:
         2a:26:2d:aa:44:e7:4e:ac:94:c2:1f:b8:5f:25:6b:9f:9c:06:
         9a:4e:c5:a2:3a:32:53:7f:45:3e:2c:16:c2:b6:07:93:3e:15:
         a4:60:bf:1c:2c:b6:a0:36:48:81:e8:87:01:59:9d:df:ca:ab:
         17:dc:50:80:3a:9c:5e:93:fc:ee:9e:8f:2e:75:16:5c:46:01:
         7e:fb:bf:74:b5:b6:a7:8f:5e:b7:7a:09:58:0a:5c:be:49:60:
         a1:bb:ce:3b:54:a5:a5:6f:18:6e:a4:13:11:83:de:99:67:55:
         48:05:63:3f:40:e3:76:25:c7:ad:34:90:79:42:7c:12:ab:b1:
         bb:88:99:4d:7e:b8:f4:3f:2d:1d:b3:12:8b:c5:4a:d8:0a:c3:
         2b:d9:88:4a:5f:93:6f:3d:9e:ef:4d:af:13:10:f1:55:63:14:
         b7:21:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:21 2026 by rpki-client