Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/3cfd8226-c34e-3840-824c-874ca059667c.roa
File:                     3cfd8226-c34e-3840-824c-874ca059667c.roa (raw, json)
Hash identifier:          JHqo4g5qXP8Dq5eOkXywI5m6YGu9trRZTBuAE93X0JE=
Subject key identifier:   0A:79:6C:E0:7B:5F:AC:B1:AA:3A:6F:24:37:E5:3C:59:8A:4A:6D:77
Certificate issuer:       /CN=51b6f239-2daf-4afb-a5b6-78bf5a8e6369
Certificate serial:       010D0C9F4328584D15A251AD4057F22AD169C7C0
Authority key identifier: F9:3B:5F:0D:C9:B9:DA:00:0C:19:2C:87:75:EA:5D:DC:1E:28:9B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/3cfd8226-c34e-3840-824c-874ca059667c.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     53340
IP address blocks:        64.112.60.0/24 maxlen: 24
                          64.112.61.0/24 maxlen: 24
                          64.112.62.0/24 maxlen: 24
                          64.112.63.0/24 maxlen: 24
                          199.43.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:51:ad:40:57:f2:2a:d1:69:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b6f239-2daf-4afb-a5b6-78bf5a8e6369
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=4a17a3e6-2743-4ad8-9361-b8fb339d86f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:3d:56:df:67:e5:d2:63:08:f7:93:5d:34:
                    86:88:f9:c9:fb:6e:23:99:6c:b8:ec:78:c6:0f:8d:
                    7d:78:14:5b:42:72:45:f3:8b:bb:ee:07:74:8d:c2:
                    a3:f7:0f:25:be:12:ad:3e:dd:28:92:12:54:59:a6:
                    0a:ee:fa:44:0e:91:85:dc:09:ba:ec:7e:1d:1f:e8:
                    2b:09:cc:63:16:ab:50:5c:42:d6:49:42:3a:5a:63:
                    84:cb:0b:a8:44:13:0a:fa:69:6b:62:4f:6c:48:da:
                    70:66:98:51:50:3a:d8:56:86:55:eb:f9:9d:2f:b9:
                    bb:5c:3c:b8:13:57:87:5b:72:9f:35:fb:8f:aa:77:
                    2f:ef:a5:d5:64:61:c3:d3:21:cc:c9:7d:00:0b:06:
                    a1:b2:9f:86:c3:b2:85:85:71:bf:9a:ce:da:08:98:
                    69:b1:a8:0e:86:be:24:e9:55:43:cf:72:ee:0f:64:
                    79:fa:1b:d2:35:da:15:0a:97:0d:10:41:6e:ce:dd:
                    f2:e4:92:75:a2:c1:e2:47:99:2b:d3:c3:aa:82:11:
                    08:3b:a0:6f:1b:76:ef:c2:34:17:d1:eb:5e:1c:c7:
                    3a:5f:eb:4e:71:24:b0:16:b6:09:7f:ef:fb:62:29:
                    92:ba:cb:24:a1:fe:d9:54:31:31:e3:c6:00:56:7f:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:79:6C:E0:7B:5F:AC:B1:AA:3A:6F:24:37:E5:3C:59:8A:4A:6D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/3cfd8226-c34e-3840-824c-874ca059667c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.crl

            X509v3 Authority Key Identifier:
                keyid:F9:3B:5F:0D:C9:B9:DA:00:0C:19:2C:87:75:EA:5D:DC:1E:28:9B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/51b6f239-2daf-4afb-a5b6-78bf5a8e6369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.60.0/22
                  199.43.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:30:76:0a:8f:45:70:b0:88:95:8c:5f:19:88:87:1e:54:8e:
         a5:c8:a8:5a:db:aa:96:22:7e:5a:4f:08:52:b2:b2:f5:06:a1:
         1d:63:d2:73:fd:a7:6d:47:db:56:a7:4a:30:4a:5f:95:93:10:
         1d:4c:1e:ab:3d:cb:3f:62:6d:ad:f0:57:b5:b3:fa:6d:7d:35:
         5b:b8:a7:09:3b:10:16:8c:c8:7e:c1:3d:c1:a3:34:78:42:2c:
         01:d4:19:df:eb:34:2e:c2:9e:b8:66:44:f7:45:eb:9c:01:05:
         3e:2c:53:b0:08:68:e7:74:a1:4a:00:c2:25:ab:0f:df:14:6d:
         61:cb:a6:a9:38:fb:b3:09:61:6a:33:9e:0f:b6:d6:f1:83:f7:
         dd:35:52:2d:d0:ed:d7:7e:18:6d:81:52:05:36:a4:69:cd:c3:
         0b:62:59:da:fe:30:7f:9b:f0:6a:3c:c3:0e:4c:e3:64:be:6a:
         e5:ce:74:fb:94:33:16:7d:8d:0e:1a:cb:fe:28:80:ce:0a:f5:
         a7:6b:5f:b7:a6:41:de:8e:35:8c:87:bc:cf:2d:71:5c:16:fd:
         be:0a:bc:5d:93:a9:4f:c1:cf:af:cc:04:5a:0e:bc:bd:5c:92:
         45:77:72:46:8b:d8:dd:1c:63:62:ea:09:47:59:89:31:fd:75:
         4d:db:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:36 2026 by rpki-client