Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/3c6c5963-1b1c-3522-b4d1-c43c420a3dcd.roa
File:                     3c6c5963-1b1c-3522-b4d1-c43c420a3dcd.roa (raw, json)
Hash identifier:          sqbVKGtqon7wEDxKJh8aVMMuJz7eSOcrMP0E+6HMdZM=
Subject key identifier:   1F:48:0B:63:85:D2:40:BF:2F:FE:5D:2A:7D:56:0C:15:C5:C7:55:4B
Certificate issuer:       /CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
Certificate serial:       010D0C9F4328584DA94A4FBC18185E6AD8077780
Authority key identifier: 0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/3c6c5963-1b1c-3522-b4d1-c43c420a3dcd.roa
Signing time:             Tue 28 Apr 2026 23:22:55 +0000
ROA not before:           Tue 28 Apr 2026 23:22:55 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     40939
IP address blocks:        64.6.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:4a:4f:bc:18:18:5e:6a:d8:07:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
        Validity
            Not Before: Apr 28 23:22:55 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=0ac5f3fc-bc5f-43d1-9b96-4d0eb379d293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:eb:17:3c:bf:6d:db:cb:d0:90:ba:54:1a:
                    86:45:87:ba:e2:77:4b:78:f8:ee:a9:aa:f2:3c:6d:
                    9b:8f:08:7c:9b:7f:a8:63:a6:04:ea:e5:9e:04:33:
                    75:64:56:7e:8d:c6:d5:93:e1:0f:e3:ba:b8:47:23:
                    74:85:29:50:3a:6b:93:98:9f:f0:0e:fa:ab:11:c9:
                    d5:61:bc:82:37:62:76:dd:3a:7b:7a:c1:4b:32:e8:
                    54:18:77:84:42:33:7b:fc:f9:95:ab:c5:08:f4:96:
                    4e:cc:ae:b8:62:dc:c3:d4:ab:2d:3d:52:57:47:a4:
                    f7:2b:e1:aa:0a:d1:57:ae:63:8b:65:7c:39:56:9f:
                    c1:bb:13:b3:e9:7a:8c:38:45:d5:ff:8a:b7:34:cd:
                    40:67:d8:4b:48:20:95:c0:4e:e8:64:12:e9:85:f4:
                    fa:30:01:46:fc:f9:04:ae:3a:55:9d:4c:1f:04:0b:
                    8e:86:c7:72:9d:a2:44:9a:9d:96:0b:d4:c7:31:38:
                    dc:ce:45:74:59:5d:8e:62:1f:b4:ef:68:3e:21:1b:
                    11:49:57:75:48:d0:3c:a3:8a:d9:16:c2:36:85:19:
                    e0:1c:9c:bb:ad:6f:54:b9:01:06:3f:aa:86:a1:a3:
                    f8:6d:6f:5a:e4:1a:b3:55:c1:85:92:fd:ce:85:a2:
                    6d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:48:0B:63:85:D2:40:BF:2F:FE:5D:2A:7D:56:0C:15:C5:C7:55:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/3c6c5963-1b1c-3522-b4d1-c43c420a3dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:09:30:e2:22:e4:95:7d:26:22:b4:98:01:70:4b:6e:96:03:
         3c:4b:8a:7a:7b:d5:1b:3f:3d:c0:8a:64:d1:f3:eb:30:39:a5:
         81:61:cd:a2:40:23:9d:4f:9a:3a:13:97:8a:db:03:a9:b8:4c:
         93:8a:6f:35:7f:73:f6:47:c7:4e:c7:e0:94:cb:e5:6d:79:2e:
         96:f0:6c:02:9c:ba:cf:c3:9d:be:ba:7b:c7:a5:96:d6:f7:85:
         07:de:f9:21:ec:bd:b9:fc:aa:da:ea:02:c8:c8:c5:40:51:d6:
         22:64:f0:dd:94:29:2a:bb:01:80:4b:24:d4:9b:18:3f:fe:b0:
         bf:09:fa:8c:30:1f:63:75:fd:9e:20:7a:79:31:ec:ef:74:17:
         fa:67:54:db:50:8d:88:40:f1:d3:f7:ce:cc:dd:c3:90:68:c2:
         29:16:0c:a7:ec:81:ce:be:a2:a8:9d:fe:1d:c2:d1:23:15:52:
         26:63:2c:9b:57:fc:f9:a0:d7:b8:d3:04:df:b3:e9:29:a0:6d:
         a9:dc:75:fb:31:33:31:a4:72:8d:8c:b4:42:fd:5c:8b:fd:2b:
         87:75:28:e6:d0:18:eb:d5:6b:15:30:a5:22:9f:b6:e6:29:8b:
         d3:8a:a9:73:43:8c:7c:e5:5d:79:87:e9:33:ea:16:e0:3b:51:
         3d:88:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:33 2026 by rpki-client