Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
File:                     84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa (raw, json)
Hash identifier:          Z9r3z2RKlIeTrkc13gU1mQHFLjg7dQfeXjTEl/4AY1Q=
Subject key identifier:   04:F5:2D:DF:B3:0F:46:0F:CF:DE:88:A3:4A:CC:29:53:54:84:A1:77
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584DCC605B6102200023FB0F7F00
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     11260
IP address blocks:        148.64.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5b:61:02:20:00:23:fb:0f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=cb5ce11d-398c-4639-a5fb-33db3f3d88b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:4c:6d:27:c8:e7:16:22:ce:b8:5b:fa:51:
                    86:c7:30:29:3e:25:0d:75:c4:f0:d5:0d:36:81:8a:
                    1a:bf:4b:19:e1:b5:ba:e3:f9:97:88:a1:e2:cc:78:
                    ac:2d:ea:da:3f:5a:d0:15:99:bf:27:3c:57:55:5f:
                    e8:79:41:b8:5d:4e:11:68:21:d3:d6:fd:df:1a:e8:
                    2e:c4:93:2d:20:7f:aa:34:f3:a7:06:64:6d:de:b7:
                    0e:ad:fe:e2:07:d7:db:57:b1:d2:c3:87:54:cb:24:
                    15:c9:97:bd:31:08:fa:30:83:02:ea:72:63:47:94:
                    c4:fb:7c:24:cc:33:07:83:f4:f6:af:61:92:b4:43:
                    ff:50:10:97:1c:e6:c1:8e:d4:ef:f5:79:db:75:36:
                    97:4a:9f:96:2b:1e:a1:1f:09:f0:cc:0c:58:cf:d3:
                    f0:d0:a4:ad:21:25:ac:e6:2a:3f:a9:01:60:77:70:
                    94:9f:dc:4a:f0:ba:dc:a2:f1:d0:60:81:50:e2:5a:
                    d5:37:5c:f8:ec:13:5b:a6:86:b6:0f:20:61:e7:66:
                    d5:4d:6f:72:7f:ac:2e:fc:a2:50:e0:11:72:ac:72:
                    2b:c0:e7:14:a8:1c:36:36:21:4c:a8:70:4d:03:9e:
                    62:11:fd:9c:8f:cc:f9:9a:eb:7b:e8:f7:f2:42:8a:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:2D:DF:B3:0F:46:0F:CF:DE:88:A3:4A:CC:29:53:54:84:A1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/84b3d41b-9874-3832-8275-c8dd30ba5f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:05:62:c6:a4:5b:69:e2:ef:c8:56:f9:70:eb:ac:f2:15:a2:
         4e:eb:e4:d2:72:2b:e9:d2:dc:1c:5c:e3:14:56:8a:83:d5:9e:
         5d:2f:e6:d1:e9:37:1c:3b:71:3e:ee:a1:cb:f2:42:b8:30:29:
         21:4f:09:e9:47:76:e2:6c:1b:61:69:ac:4d:16:47:48:11:c0:
         9c:22:32:13:4b:6d:8d:ea:e5:8f:bd:80:5a:19:28:1f:3d:74:
         b9:97:16:7f:01:84:5c:f0:f5:60:e5:1d:d0:e8:e3:93:c6:f9:
         08:8e:5e:bc:30:47:81:20:62:81:42:ae:29:1c:be:08:2b:14:
         89:06:3a:8c:9a:6f:18:c4:3e:b6:9b:9a:23:01:7c:d9:ff:71:
         56:5f:2c:f2:01:e6:2c:e9:51:3c:7e:f8:a7:ba:50:66:a7:15:
         c9:72:04:25:f9:68:94:a6:4f:2d:13:4a:0a:1e:d6:24:1c:0d:
         ba:4d:7c:7d:f0:8d:2c:c6:26:45:59:75:2d:d9:02:70:da:08:
         10:ef:21:63:84:c5:f4:66:29:56:0a:f3:f4:72:a6:34:a4:7d:
         7f:76:d5:14:34:8a:68:46:f6:51:3e:82:f7:08:b7:79:fe:f6:
         5b:59:d6:2e:31:3c:85:0f:ce:65:16:86:44:ed:f4:3a:0a:48:
         ea:70:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:30 2026 by rpki-client