Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/585b4e70-c014-379b-bab2-39920e77a00c.roa
File:                     585b4e70-c014-379b-bab2-39920e77a00c.roa (raw, json)
Hash identifier:          HFmDSzmz9Ft+SssxR6FVqvdrM0kyYCcIhbuSduR7gGY=
Subject key identifier:   42:FC:2C:48:F3:15:6F:68:AC:AA:85:BE:C5:60:01:55:1C:AD:1D:3D
Certificate issuer:       /CN=f64137c1-c8e3-4317-96e8-9ad64c7e74ac
Certificate serial:       010D0C9F4328584D9A2013DD5BD49A4BE0252E80
Authority key identifier: C0:CE:28:8A:D5:CC:B2:1D:1A:A7:19:30:D6:37:8E:6E:C9:AB:BE:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/585b4e70-c014-379b-bab2-39920e77a00c.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     16865
IP address blocks:        139.64.219.0/24 maxlen: 24
                          2602:814:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:13:dd:5b:d4:9a:4b:e0:25:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64137c1-c8e3-4317-96e8-9ad64c7e74ac
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=5cd4b302-3d45-4842-b26d-f472b60af464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:93:b9:6a:69:d8:00:67:73:ea:af:18:e8:9e:
                    bf:2f:9b:02:23:d0:0d:63:0a:0f:96:19:4e:92:8b:
                    5b:b5:70:f6:9d:fb:f5:58:9b:6d:77:d5:db:f8:a6:
                    fb:ca:b3:9c:6d:25:74:2c:52:f4:86:b5:89:08:3f:
                    8b:41:ca:2b:f0:89:67:28:ef:0d:f7:ae:27:72:3e:
                    87:26:41:76:26:62:ad:87:b1:74:59:66:87:2f:e0:
                    8e:a6:35:f6:20:05:eb:03:05:de:4e:bd:2c:a7:be:
                    4d:d5:c8:ab:d8:a9:9d:b2:9c:68:dd:8e:e6:38:bc:
                    4a:39:8f:2d:b4:e1:0a:3a:bf:35:bf:52:ab:71:62:
                    7e:e2:33:8c:26:ff:47:19:6d:3d:fd:5b:3c:f1:28:
                    86:4a:39:ff:e9:0d:5b:6b:f6:1e:60:6b:82:f4:91:
                    42:1c:8d:e1:00:9b:e5:f5:6a:8c:8e:28:57:be:0b:
                    d4:78:21:d5:55:ed:dc:bb:bc:92:e3:fb:a5:bd:43:
                    26:49:ac:44:f1:2a:4a:44:8d:05:80:f2:64:66:2a:
                    12:44:28:16:97:dd:12:63:d8:92:06:c4:d6:0b:e3:
                    68:17:fe:5f:35:9e:f9:9c:61:75:ea:95:d3:e5:4d:
                    7e:19:b1:6f:2f:97:13:55:7f:3b:d9:e3:91:6f:d4:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FC:2C:48:F3:15:6F:68:AC:AA:85:BE:C5:60:01:55:1C:AD:1D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/585b4e70-c014-379b-bab2-39920e77a00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.crl

            X509v3 Authority Key Identifier:
                keyid:C0:CE:28:8A:D5:CC:B2:1D:1A:A7:19:30:D6:37:8E:6E:C9:AB:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f64137c1-c8e3-4317-96e8-9ad64c7e74ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.219.0/24
                IPv6:
                  2602:814:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:09:c4:bb:99:66:71:34:7f:12:97:2a:bd:85:9e:f9:a3:b9:
         4a:50:d9:4c:2d:14:8b:aa:a0:e1:9d:ce:dc:36:c9:5d:0b:ea:
         55:a2:23:0a:8b:b0:87:06:53:6c:1e:7b:43:34:98:ee:86:12:
         38:22:f9:29:87:ec:e8:ce:28:27:e3:5f:69:2e:b8:f0:1f:00:
         63:fd:e1:52:8d:87:08:6c:d4:7e:68:71:45:77:1e:94:b4:fa:
         d2:ea:ef:3e:19:95:69:53:f6:82:ce:cf:d0:2b:14:94:3a:98:
         6e:5e:91:3a:ca:bc:eb:9a:6c:16:ae:65:0b:51:65:c6:40:79:
         fd:cf:18:04:67:8b:bb:ce:c4:6b:02:b2:39:0b:39:ea:c6:51:
         b1:fc:7d:c8:65:11:48:a3:ba:71:ae:f5:84:54:33:aa:21:e2:
         7d:6d:ee:9a:05:f7:41:66:f2:f1:16:da:21:71:86:4b:6e:b8:
         53:23:a3:00:8b:b6:9f:d5:c3:f8:b1:1c:67:03:60:fb:fd:d7:
         d3:7f:b0:c8:3f:f3:eb:1e:fd:50:ad:94:0a:78:8b:65:f6:03:
         42:c6:2d:6d:b7:96:e4:7b:5f:a3:6c:cb:0a:7d:56:e8:a4:04:
         46:5b:82:0d:c3:ac:74:f5:78:70:91:eb:d3:72:2d:22:52:df:
         15:59:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:22 2026 by rpki-client