Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa
File:                     bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa (raw, json)
Hash identifier:          Qm6HqVtjFNR27CNCHy0ToPzQSBkpPd0cZLULN/zfn9M=
Subject key identifier:   66:EC:C6:2B:3A:26:A8:81:73:13:62:13:E2:84:EC:27:39:DF:92:03
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584DB1DACC5D0D6CFADDDE02C350
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     14090
IP address blocks:        64.21.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:cc:5d:0d:6c:fa:dd:de:02:c3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=a2dd9588-6fc2-4661-b798-710ccf1803a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:47:9d:84:5f:e1:ad:b1:62:1e:6e:15:c3:
                    1c:85:73:70:89:0d:c8:2c:8a:4f:99:8f:cb:8c:8d:
                    0c:94:52:d7:13:54:27:6b:fe:99:3c:8f:cd:18:03:
                    24:9d:ee:36:5c:9d:87:50:59:44:5a:f5:db:0e:18:
                    5e:5f:35:b1:ea:e7:ab:26:c7:32:df:c9:bd:3c:f5:
                    49:2a:e0:0e:5b:7a:24:25:f1:e5:11:6a:ea:14:18:
                    cb:8e:9a:10:7e:2c:ec:9c:a6:cd:be:52:63:01:81:
                    f6:a4:fd:2b:11:0d:74:01:82:3a:f8:fe:38:ed:1a:
                    b2:1d:f1:16:44:63:b9:7b:31:af:9e:80:98:98:eb:
                    61:2a:84:5b:86:3a:17:2e:0f:3a:ef:a3:72:da:f7:
                    53:bd:76:6b:00:a1:8c:17:6f:9c:7d:9f:a3:dc:cb:
                    06:f5:61:ec:9e:f6:f2:34:e7:a4:42:2a:4f:d6:bb:
                    bd:5d:bb:1b:a0:34:6c:2d:c6:7c:3e:ab:30:4a:2a:
                    fe:da:54:c0:cb:29:3f:c9:71:5d:4c:86:ca:64:6d:
                    b9:55:42:4d:f9:34:0b:83:dc:32:dc:cb:97:07:27:
                    9b:34:df:da:ae:b8:34:15:e2:6c:cb:6d:ad:54:63:
                    fa:44:95:e4:5d:00:80:f2:39:e9:66:e8:f7:e2:e8:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:C6:2B:3A:26:A8:81:73:13:62:13:E2:84:EC:27:39:DF:92:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/bba65f7e-65e4-3d3c-9a5d-12a6168f6bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:09:ad:03:71:a5:ec:2f:39:7f:06:02:f0:b8:97:0e:c1:
         8d:33:72:3d:2b:f1:2a:85:c3:aa:93:8f:4a:9d:b6:30:bd:27:
         11:db:3e:50:1e:88:09:70:52:67:00:51:09:90:1a:09:5a:31:
         72:9c:3d:b2:57:41:f1:d0:72:10:76:a1:00:0f:5b:ff:92:04:
         0f:4f:99:b6:02:78:77:22:92:65:25:ed:33:c1:3a:a9:71:bc:
         25:6e:fb:15:d3:72:d6:3d:9f:a9:b6:d1:fc:99:49:57:65:0f:
         1e:74:73:5e:54:43:96:da:9d:b7:3b:6d:c6:89:06:18:8b:86:
         dd:a1:01:56:bc:15:42:d8:d2:39:1f:5f:fa:76:0a:61:f2:6d:
         26:11:79:78:2a:cf:36:82:56:89:35:23:92:ea:b2:59:51:64:
         80:0c:8a:0e:31:85:a0:0c:9e:d0:a9:09:f8:77:2d:c8:50:62:
         74:7e:a4:4e:4e:b8:b9:5f:af:1c:07:6a:74:a7:50:f4:66:72:
         36:ab:cb:fd:0f:20:a7:cd:b2:a9:8d:8e:d2:ab:e1:ea:8e:7f:
         64:9a:21:62:c4:b4:4e:b9:8e:16:dd:1c:56:4c:49:56:b5:12:
         16:a8:47:54:e8:ce:73:5f:15:29:0e:e8:6a:24:80:40:ad:8b:
         31:91:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:34 2026 by rpki-client