Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/4abec270-a1f2-3551-87f4-8015448a4836.roa
File:                     4abec270-a1f2-3551-87f4-8015448a4836.roa (raw, json)
Hash identifier:          ufYGIOg+m1ydY8bE6M5CTsTH/ArtRyZX9CBWeGWNaJ8=
Subject key identifier:   83:BD:CB:D0:0C:48:6F:01:44:7B:8E:19:DA:B8:C1:1A:38:FF:F0:17
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584DB95683A3B0210CFA449E9300
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/4abec270-a1f2-3551-87f4-8015448a4836.roa
Signing time:             Mon 04 May 2026 17:20:26 +0000
ROA not before:           Mon 04 May 2026 17:20:26 +0000
ROA not after:            Sun 02 Aug 2026 17:20:26 +0000
asID:                     398391
IP address blocks:        64.227.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:56:83:a3:b0:21:0c:fa:44:9e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: May  4 17:20:26 2026 GMT
            Not After : Aug  2 17:20:26 2026 GMT
        Subject: CN=131a5c84-f37c-4995-b5d7-d178b2b7f659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:e0:dc:39:98:c3:71:49:33:af:43:f8:9e:
                    24:2a:b7:5f:f9:a6:f9:a6:98:42:2c:af:90:db:b7:
                    28:51:cd:ba:bd:d4:b1:0a:e9:24:fd:02:43:50:36:
                    ac:78:26:fd:bd:28:3a:60:4d:4a:25:dc:1c:9d:d8:
                    1e:0b:c7:d4:8a:53:31:2b:ed:4d:d7:f5:b7:89:d6:
                    37:81:b8:53:22:c9:ef:52:46:d1:92:00:e2:06:53:
                    08:56:37:f8:d1:6c:8b:c0:08:fe:6f:42:48:16:f8:
                    75:75:ae:14:ca:9f:6e:7a:13:9d:98:f0:22:51:0f:
                    1e:3c:e8:96:aa:01:23:8c:ab:6b:3f:a1:a0:fd:1d:
                    c5:0a:f7:99:7c:72:0b:1e:5b:24:b1:0b:ce:a2:32:
                    98:03:fd:d4:03:47:0a:cc:7e:b3:33:26:47:fe:33:
                    9c:26:50:e5:37:a5:7b:5f:55:cc:30:ee:79:14:4a:
                    d0:f5:dd:e6:4e:cf:10:71:b2:6c:f7:86:92:38:99:
                    0b:db:90:c7:4b:4e:72:ef:ab:07:8f:0b:d7:e8:84:
                    c1:d3:d2:1a:e4:10:ee:14:ea:fe:2a:18:25:81:62:
                    6c:1f:9f:6b:bf:ac:1d:a5:0f:0c:7b:63:4c:06:2a:
                    62:5d:e7:f7:e0:f1:e8:5e:2e:98:91:69:82:65:b2:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:CB:D0:0C:48:6F:01:44:7B:8E:19:DA:B8:C1:1A:38:FF:F0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/4abec270-a1f2-3551-87f4-8015448a4836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:b2:09:f7:24:9a:f1:5e:0f:a3:e1:78:54:b4:ab:96:ad:
         62:15:84:ba:58:52:7e:56:cd:a5:c9:c1:16:c8:e8:cd:1a:82:
         56:97:39:b0:d3:76:c1:f0:09:70:38:17:ab:a9:8e:5d:65:4a:
         41:c3:16:57:e1:00:c3:6a:ed:25:2f:7b:65:d1:a4:ae:c4:c0:
         53:3b:12:3c:94:7f:3c:9f:3d:16:e6:f5:da:1e:f8:09:49:c2:
         d4:c9:3d:07:9a:3a:e7:02:51:ec:d3:31:d3:7f:c1:8c:57:cd:
         09:26:14:48:e7:c1:e9:39:62:77:34:71:89:7c:96:af:ff:46:
         77:ed:11:b4:d1:4b:34:9a:8a:0f:3d:25:25:25:9d:e7:f9:50:
         ae:83:bf:f5:21:73:31:2c:99:07:b5:7a:42:44:ec:dd:c9:64:
         59:4d:11:56:87:34:ab:f7:6b:94:a2:ae:7a:28:b0:b4:5c:bb:
         79:e7:76:78:52:8a:a3:f7:37:7a:46:01:a5:fa:05:b5:ac:77:
         e6:5d:cd:d9:c3:4e:e7:f5:53:8f:4e:58:70:62:3b:ed:cd:c6:
         f3:47:4d:79:8f:6f:30:80:d6:30:1e:b7:6f:c8:fe:52:2e:31:
         3c:f0:6d:08:76:6c:c9:6c:3a:19:b7:f5:28:a9:d7:2e:46:0e:
         be:85:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:19 2026 by rpki-client