Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa
File:                     600796a1-ad56-3f64-a245-134764ba9e7c.roa (raw, json)
Hash identifier:          qIhtUWEDG00oDaC4E16Lfwp1GpMjtgUUT/thKXh4AnY=
Subject key identifier:   4A:F8:7E:43:B5:A5:0D:5B:85:35:C9:7C:67:79:3D:EB:DD:B8:3E:ED
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D27AAB0B2C6BFB1098587E680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        64.9.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:b0:b2:c6:bf:b1:09:85:87:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=0e73eb56-cd5d-45af-b2e7-518342c42dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b8:68:50:c6:b9:9f:fa:c7:f8:f8:ca:da:26:
                    db:79:06:d3:25:57:b8:ef:5d:c6:66:cd:dd:06:b6:
                    16:9e:50:e6:fb:28:0f:51:32:84:b5:76:6b:23:64:
                    ae:2f:40:ce:26:37:d0:01:67:b9:aa:5b:dd:bd:9b:
                    fd:8e:d6:ed:9c:1a:72:cc:8e:b7:7e:92:34:fa:c2:
                    57:fa:ad:0b:12:1f:01:52:0e:24:f2:97:59:38:00:
                    f7:61:02:c0:48:a7:d1:b1:1b:c7:47:f6:5b:7d:7d:
                    c4:44:94:da:4f:5f:70:35:97:ce:2a:c9:56:21:13:
                    77:07:f4:ec:b4:46:dc:9e:03:08:64:f1:43:fc:53:
                    1c:61:97:38:56:62:6d:4c:6f:46:14:e3:53:d0:86:
                    32:7d:d7:5a:ec:0f:5d:58:10:ed:a7:0c:8d:23:d7:
                    0f:2a:38:c6:a3:e6:54:f7:2c:b9:8a:8d:86:dd:cd:
                    62:ae:5d:95:6b:44:1a:7c:64:d2:c9:ff:9e:20:d5:
                    d7:f8:8c:31:6c:a8:82:d6:c1:2b:de:88:e8:c5:6c:
                    35:21:3c:5c:dd:62:c6:8d:8e:18:98:5f:df:49:6a:
                    74:07:65:76:0b:5c:b2:aa:9c:c1:8d:6e:1c:89:21:
                    ae:35:24:42:fb:cf:f4:8d:08:25:0a:ec:c0:dd:90:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F8:7E:43:B5:A5:0D:5B:85:35:C9:7C:67:79:3D:EB:DD:B8:3E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:9d:e2:fc:9b:83:ac:c2:9b:51:8a:c5:76:e9:12:24:9e:
         86:f2:28:f5:c7:fd:15:90:e7:46:1f:e4:7c:b3:43:81:55:95:
         a6:ed:df:52:7d:ec:bb:a6:c9:32:e4:98:5a:4b:0d:f0:5e:fc:
         cf:7c:b2:29:a2:4f:65:9c:e3:36:6e:c2:71:2a:10:b9:32:43:
         87:59:fd:f4:52:a0:87:29:e0:de:42:b7:f3:43:78:a1:fb:85:
         4f:e8:22:fc:2b:7b:58:18:51:81:51:e6:ca:ad:39:2a:ac:45:
         25:05:23:63:56:c8:3a:3c:f9:82:41:18:4d:46:96:b1:f3:9b:
         89:bf:40:9f:23:6c:ef:19:28:d4:04:3c:14:91:28:aa:77:52:
         64:c5:2a:eb:51:ea:2e:67:fd:b1:ac:26:92:78:f8:04:f1:d6:
         f6:3f:7b:55:7e:43:ce:44:a3:c9:bf:82:be:12:09:d6:69:db:
         1c:db:3d:b9:68:8b:4c:25:db:94:d5:e3:f2:ea:4c:5e:d9:db:
         70:b5:c8:b1:29:e8:53:d2:37:e2:11:d6:a4:d1:fb:5a:01:4d:
         0f:dd:27:4a:f4:4f:57:4d:7f:a1:ac:cd:71:fc:0f:cd:5f:a6:
         f9:8a:b8:60:ec:31:6f:5b:9c:b3:d1:03:cd:30:6d:b8:5b:91:
         48:38:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:20 2026 by rpki-client