Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/59e05af0-8776-359c-9a0f-c854501a4084.roa
File:                     59e05af0-8776-359c-9a0f-c854501a4084.roa (raw, json)
Hash identifier:          G7b1VHSFH84ElvBiZI2S7FhQ/cgWC1yZ4K0ZUfaqxpY=
Subject key identifier:   62:6F:55:CD:B5:03:32:21:23:C2:9C:67:A0:DF:32:E9:BB:49:FE:9D
Certificate issuer:       /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial:       010D0C9F4328584D19B4B6191CA9251E5EAB0800
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/59e05af0-8776-359c-9a0f-c854501a4084.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        166.98.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:b6:19:1c:a9:25:1e:5e:ab:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=ed3d9770-ff6c-43b4-90f6-30de072acf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:ce:6e:d4:18:45:28:dc:96:6a:f6:55:a4:
                    df:a5:b2:b8:78:1e:c7:72:5e:8f:c4:86:37:c0:f9:
                    db:a5:e4:1b:0b:8c:11:df:fd:56:cf:33:28:7c:e6:
                    c4:f1:16:b6:98:3a:d2:21:81:90:e2:03:d9:49:f5:
                    3e:3c:98:91:f8:f2:7c:25:b9:e9:23:e1:5b:6c:f0:
                    00:f9:74:58:a0:9a:a3:43:2e:55:96:a4:cf:ea:c9:
                    ce:71:9e:41:a9:5e:e6:ea:c8:f2:ed:99:b6:50:05:
                    13:e9:94:b2:1a:ae:28:cf:1d:e9:bb:14:28:c3:12:
                    31:0e:eb:78:bb:6c:aa:12:29:8c:09:7e:20:60:a0:
                    f1:f5:d3:08:0d:ad:e3:c7:e3:af:4f:61:b5:59:a8:
                    f7:b7:e3:e1:cb:ce:fa:34:e4:69:df:cc:07:5e:48:
                    bd:29:25:8c:32:7a:7d:84:fe:07:bd:10:ee:3f:1f:
                    bc:9c:28:ca:f3:00:b6:a6:4b:96:ab:93:81:c0:bf:
                    db:34:47:e7:c0:5c:83:cf:a2:fd:8d:ca:4f:04:ed:
                    ed:b3:fa:71:58:d2:18:62:aa:9c:e7:a4:64:bb:13:
                    e4:4e:57:f5:35:fb:50:f2:3d:ac:9c:89:0c:90:27:
                    60:5a:fc:bb:35:1e:e6:93:c6:c5:72:61:96:87:d6:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6F:55:CD:B5:03:32:21:23:C2:9C:67:A0:DF:32:E9:BB:49:FE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/59e05af0-8776-359c-9a0f-c854501a4084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl

            X509v3 Authority Key Identifier:
                keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.98.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9e:b0:6d:1b:b3:62:c9:d4:ee:71:ba:51:ff:87:f2:2e:66:
         86:a0:54:1c:0f:1d:5f:33:a3:d6:a0:2f:87:38:36:0d:9d:10:
         df:74:d4:45:05:78:3d:46:7f:20:05:f1:88:a4:33:91:cb:d4:
         61:10:65:e9:d2:2f:44:8a:33:eb:e2:14:23:8b:ab:00:5a:5a:
         a4:e9:1c:20:38:7f:0f:b2:c5:82:8b:12:a2:e1:21:bd:34:0b:
         60:82:46:7f:77:60:7c:60:7f:6a:a6:9a:a3:5d:b6:ce:bb:9c:
         3f:4c:ed:7a:00:67:dc:1c:fc:7f:c4:4b:66:0e:26:67:60:01:
         05:8e:22:11:57:aa:d7:43:c0:4c:4c:89:1c:3b:43:bb:c0:2e:
         40:f1:df:6d:6b:8e:60:19:96:ac:b1:3e:73:be:06:6c:a7:83:
         63:94:12:aa:f3:2f:46:df:92:26:1e:40:6c:c6:34:ac:4e:95:
         b8:7b:e8:ff:22:66:b0:d5:5f:13:31:22:7b:b8:d1:b3:b4:6c:
         d5:98:c3:14:0c:09:2e:04:b4:c5:b7:3e:c3:af:13:e3:19:2a:
         94:00:46:13:f3:4f:7b:4a:30:ae:9d:98:05:38:08:90:ee:a1:
         7f:2e:bb:1d:c7:3a:0e:53:84:08:37:ff:f8:a6:17:5d:3a:f6:
         06:12:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:10 2026 by rpki-client