Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa
File:                     df4ae81b-3b81-359e-8c36-1c826165e898.roa (raw, json)
Hash identifier:          3rjo5UWZ+C4kmLVvmjHcT49dITDUARAWQH0w17PkrlQ=
Subject key identifier:   8F:00:C3:6B:3E:E7:91:B9:AA:6F:7B:3A:39:89:D6:7B:2A:0D:E3:89
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584DD09056C348D6CBE4D05E7C40
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     20454
IP address blocks:        64.38.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:56:c3:48:d6:cb:e4:d0:5e:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=4a3f117b-f006-48cd-af1d-b9babb0b6c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:3a:f0:aa:a7:6d:04:9c:99:10:1f:e1:8e:
                    ef:a8:53:85:67:dd:a8:30:75:37:57:69:05:b0:ad:
                    ef:fa:6b:2f:28:8a:e5:56:d7:7c:16:eb:6e:9b:7f:
                    74:9c:b3:90:02:c9:7f:e8:96:42:2a:c4:9f:b8:48:
                    b5:ce:04:db:2f:7c:c2:5f:aa:9c:b9:52:44:44:e7:
                    4a:07:ad:49:f9:9c:18:f7:81:03:be:26:d6:d3:2f:
                    de:42:fc:b7:22:98:20:49:4b:66:d3:6a:a8:de:59:
                    5b:46:9c:de:2e:e7:b3:84:32:42:cb:6b:dd:4c:ce:
                    39:01:39:6a:51:34:70:09:62:72:f9:07:10:63:7e:
                    75:a6:c4:00:6d:42:9e:8e:2f:d5:7e:ee:0e:8a:4b:
                    d4:28:7f:98:52:1e:9a:6c:e1:8a:1c:9a:ba:d9:49:
                    4c:6a:f3:73:f9:23:d1:2f:d5:c3:6b:b1:58:a3:25:
                    7b:9f:e7:97:33:af:7f:b5:69:41:ed:f7:64:03:3b:
                    08:25:4b:df:25:34:84:7f:c7:36:e2:99:ef:7f:fc:
                    4b:ca:55:c0:af:46:fc:5c:75:7e:b6:03:30:e9:15:
                    c5:94:2a:b0:4f:26:70:c4:e7:0d:11:05:1c:28:17:
                    e0:2a:c3:64:12:44:21:f6:3e:d7:23:c9:8d:f5:53:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:C3:6B:3E:E7:91:B9:AA:6F:7B:3A:39:89:D6:7B:2A:0D:E3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/df4ae81b-3b81-359e-8c36-1c826165e898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:7f:75:4f:11:9c:27:d3:9c:f8:d4:7c:07:d3:d3:9f:a1:
         db:00:cc:08:69:41:52:db:b2:05:2d:bb:04:73:26:7d:e4:48:
         30:64:2f:5c:95:6d:7c:e2:11:43:a3:aa:c9:91:95:d2:71:02:
         e6:73:9f:8d:7c:98:34:dd:0b:20:a6:53:9d:e2:97:e5:bc:11:
         42:53:1b:e9:3c:10:14:4a:48:6d:1b:13:2c:5c:7a:c6:f3:f5:
         a0:ee:83:59:3a:73:5e:b3:c7:3e:a7:8c:7d:6c:28:9c:3f:01:
         a4:95:40:74:0d:f8:77:0c:5e:d0:db:60:61:9e:be:43:01:5c:
         b0:27:86:99:ba:5b:95:48:e3:60:91:80:74:db:56:1d:95:c7:
         73:dd:70:be:1a:f5:d2:a3:3f:a6:09:b9:a3:35:7a:99:e2:1e:
         67:2d:46:de:d1:a2:dd:55:11:69:00:00:b9:4c:90:59:72:bc:
         d4:05:a0:ee:98:60:c1:c3:f8:10:98:d2:0d:54:76:c0:6f:75:
         4b:41:ea:e8:62:a9:65:13:2c:93:3c:57:a3:00:7a:7c:58:f1:
         84:93:15:9d:24:63:5b:a2:bf:40:b7:86:00:18:f8:89:e4:06:
         65:4d:85:d9:d3:a9:b9:2a:2e:51:c5:0a:d7:4f:5b:5f:4a:5a:
         d8:90:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:27 2026 by rpki-client