Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aec8f1b7-a24f-30fa-b1c6-b9f89afd42fe.roa
File:                     aec8f1b7-a24f-30fa-b1c6-b9f89afd42fe.roa (raw, json)
Hash identifier:          NqLOM68INhxBFHridrxwXdjWsPxI5dl9xsdknMrs3JA=
Subject key identifier:   57:D6:72:F2:A9:4A:D9:17:CA:B1:A5:F4:AE:6E:84:26:CC:13:11:50
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584DB9568356AD340845FB6177F0
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aec8f1b7-a24f-30fa-b1c6-b9f89afd42fe.roa
Signing time:             Mon 04 May 2026 17:20:26 +0000
ROA not before:           Mon 04 May 2026 17:20:26 +0000
ROA not after:            Sun 02 Aug 2026 17:20:26 +0000
asID:                     398391
IP address blocks:        64.226.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:56:83:56:ad:34:08:45:fb:61:77:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: May  4 17:20:26 2026 GMT
            Not After : Aug  2 17:20:26 2026 GMT
        Subject: CN=b639010f-c827-4e46-a159-32808b217376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:34:19:4f:36:ff:5f:12:fe:87:e7:1d:ff:
                    53:58:c6:04:88:91:23:fb:af:b2:f0:65:73:63:1d:
                    9f:07:12:20:19:10:a9:86:55:5e:1f:12:69:d6:73:
                    b1:42:eb:ec:6d:04:f2:d1:72:a5:73:c5:36:86:41:
                    11:46:99:a6:5b:9f:4b:7a:05:df:fe:8d:fd:6c:54:
                    60:b2:ac:a2:f5:d0:e5:fa:55:46:21:c4:72:3c:77:
                    90:44:a6:c8:0b:c0:a5:03:33:63:d0:90:1f:11:8c:
                    2d:2f:b2:dc:6e:0a:a5:db:6c:f8:65:83:70:3e:91:
                    7e:c8:06:e1:73:3f:5a:51:a9:5e:a8:ad:64:eb:5e:
                    81:f7:58:77:c1:ac:94:9e:17:d5:8c:dd:f0:40:93:
                    2c:59:3c:b8:35:5e:45:88:53:5a:1a:13:b9:68:cf:
                    d8:fd:fd:4d:a0:8f:3e:22:77:c4:87:f5:6f:d5:77:
                    e8:95:00:69:81:f8:70:d1:7a:64:48:f4:97:fe:f8:
                    94:a4:53:8d:ec:d9:f4:ba:fd:f8:51:ef:ae:cb:78:
                    46:ee:c0:1c:e9:1a:1d:71:08:70:1b:60:e9:8c:04:
                    69:4b:7a:8d:0c:67:f1:7d:e4:94:71:9f:f9:04:d3:
                    0f:29:4f:60:1b:30:0a:b9:4d:2a:84:ad:6d:86:0c:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:72:F2:A9:4A:D9:17:CA:B1:A5:F4:AE:6E:84:26:CC:13:11:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aec8f1b7-a24f-30fa-b1c6-b9f89afd42fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4a:b3:1a:46:a2:3f:a8:c3:4f:e8:79:3c:3d:df:55:85:f7:
         ef:5e:9d:88:45:53:66:3a:69:fe:b6:98:67:51:70:3b:d3:d3:
         9f:03:da:7a:ed:5d:7a:48:66:d1:d5:9e:61:88:7e:c5:8f:9d:
         bd:f8:ca:68:6f:65:0f:89:89:9d:09:e8:34:10:8c:d5:7a:ee:
         66:b5:2e:ff:cf:35:cb:3f:0f:00:af:4d:d9:14:81:3b:aa:3a:
         c6:95:02:10:3d:26:32:68:cc:27:ff:8d:3a:47:a4:56:fc:a1:
         cb:f8:1c:82:59:ed:7b:af:92:d6:8e:58:7b:5c:ac:e8:3f:ea:
         d9:0a:a6:7a:fa:f9:0c:54:08:dd:46:bb:36:3c:b4:35:fd:a0:
         b5:d5:44:36:2e:34:b9:2e:d3:62:3c:d8:cb:f6:83:1e:f2:65:
         13:41:71:52:8e:52:20:9a:0e:59:ec:c0:5f:ce:4d:a6:ac:3d:
         e7:20:84:50:08:48:89:48:04:00:3f:89:aa:ae:b6:62:af:8e:
         e6:5e:47:0e:e2:70:e2:fb:25:b5:d2:eb:e4:87:d0:14:e6:13:
         b3:89:0a:92:67:23:5d:31:bc:df:af:43:b4:0b:2e:73:e2:55:
         d6:30:a4:64:82:3c:35:b5:89:e0:0a:e4:9a:ce:f8:98:35:58:
         92:9b:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:26 2026 by rpki-client