Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81f09dad-40df-3cea-a1da-450a33ffadd3.roa
File:                     81f09dad-40df-3cea-a1da-450a33ffadd3.roa (raw, json)
Hash identifier:          JDtHOXVHkAizGe7ScI6gGlq+gRSpF+t5l7yt4w/RRNc=
Subject key identifier:   F1:CB:66:82:1F:67:30:E8:A6:0D:47:05:A5:B7:31:46:F7:24:43:3E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584D27AA717B6E8970E57A482C80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81f09dad-40df-3cea-a1da-450a33ffadd3.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     36492
IP address blocks:        64.9.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:71:7b:6e:89:70:e5:7a:48:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=62482c7c-e606-4fd9-9d97-b2acf3254f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:60:39:89:15:69:3d:bb:38:5d:e0:12:9e:
                    05:cf:a5:6f:fc:47:60:df:11:17:95:2d:86:49:a1:
                    46:8d:13:c1:f1:50:01:5f:23:4a:10:1d:a9:5b:d4:
                    f2:ce:6b:d6:eb:6f:73:51:e6:bf:65:68:dc:de:1e:
                    ba:0e:81:d2:c4:ce:e6:57:15:39:6a:02:69:de:b9:
                    9b:19:5f:10:6e:43:84:f6:b7:26:6e:e0:6a:e4:0a:
                    13:4b:46:35:8d:bb:fc:25:0f:a2:04:97:94:b2:4b:
                    4f:92:13:b4:a1:31:ab:ec:18:9f:6a:08:f9:02:7b:
                    63:f0:70:12:e1:c0:7d:b5:7b:7e:25:58:12:c3:0a:
                    3b:e0:9d:4f:97:90:37:0c:b6:31:f8:71:b8:56:97:
                    2f:be:5d:fd:ee:e0:8a:5f:7f:24:08:c6:00:20:7b:
                    c7:79:77:97:a5:89:45:98:4b:23:b1:66:8d:40:47:
                    e3:4f:1e:50:47:01:f3:51:b8:ac:3f:62:30:75:ab:
                    e7:b5:23:cc:0e:2a:53:30:f0:ec:d2:51:d7:7a:2c:
                    eb:d0:2a:a0:c9:b7:e4:7b:6a:c8:40:13:58:1f:80:
                    57:10:05:58:d8:63:0d:ea:8f:ca:a7:75:bd:0f:44:
                    82:80:ce:4f:ce:f5:ba:03:77:91:67:33:bd:cd:04:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:66:82:1F:67:30:E8:A6:0D:47:05:A5:B7:31:46:F7:24:43:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/81f09dad-40df-3cea-a1da-450a33ffadd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:fc:57:49:5b:f9:55:73:d2:11:cc:28:02:2a:63:18:54:
         7d:9f:52:05:47:6b:df:05:78:e2:91:62:be:ee:2f:a3:1c:88:
         65:1f:c6:35:af:8b:35:3f:1b:0c:2b:d5:46:a5:6c:c5:73:82:
         2f:e5:5c:0c:18:f2:2a:e5:29:58:18:8d:69:dd:01:73:68:a6:
         08:57:a9:de:31:1c:1e:65:f2:bd:97:42:3a:6b:fc:75:91:2b:
         ae:69:62:0e:c9:75:6f:32:6d:76:e2:cd:50:83:1b:34:bf:4e:
         5e:f7:05:4a:64:77:d1:eb:f1:90:42:44:cd:0a:4f:73:dd:d1:
         f4:bf:df:de:18:ad:99:91:39:6d:df:9a:07:10:0e:b8:9a:46:
         51:59:ed:67:80:af:ae:fd:89:71:53:a9:78:c2:97:97:8f:8e:
         88:74:cf:bc:49:4d:c6:91:c9:f3:4f:65:2b:9a:5e:8c:0d:70:
         c5:21:59:5e:c1:f9:83:6c:57:89:d6:f9:07:5c:ab:c4:4f:11:
         66:ad:09:5a:a3:2e:9c:6f:ee:c6:69:3c:00:e1:b5:42:a5:dc:
         20:ce:df:42:84:e4:55:53:4f:2f:b5:6d:4b:60:cb:bd:9c:00:
         36:0b:4b:ee:02:e9:10:a4:0c:8c:39:42:e3:7f:0c:c9:69:cb:
         03:5a:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:57 2026 by rpki-client