Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
File:                     a87435cf-a6f2-3201-8a93-631966f582c4.roa (raw, json)
Hash identifier:          y24VKmazkVsDGJUO6HnBuyGEznKEjwgMwz7B6fRCvEM=
Subject key identifier:   19:F6:E6:B0:7A:0B:9A:0E:E4:C9:68:A2:24:E9:90:48:0B:DC:7B:5A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E3A2F184EBC596AD0B8DA3740
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        134.224.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:18:4e:bc:59:6a:d0:b8:da:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=a6796756-a4d7-41b1-afbc-9047c2b0c89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:37:9a:4b:11:a5:32:33:65:9b:bf:5d:f2:
                    5e:1b:7d:5c:ed:3e:da:fc:8a:85:bf:20:ad:6d:f6:
                    6a:2d:ab:14:e8:e0:b9:bb:37:82:d8:4b:28:37:47:
                    18:4d:30:b8:96:22:c9:09:73:8b:de:f9:05:18:46:
                    15:24:b1:3a:77:91:5d:31:8b:92:dc:81:c5:ee:81:
                    73:0d:6c:8e:f7:fe:e4:13:f6:6b:c6:d6:25:1e:6d:
                    59:3a:55:cd:ba:4d:76:ce:84:f9:3d:6b:c1:62:1e:
                    db:ba:30:e4:4e:f0:47:fb:20:1a:9c:92:ea:86:52:
                    b1:fe:6f:06:1c:87:c5:35:82:8f:08:33:8d:71:b3:
                    d0:9a:91:23:0d:ed:05:ad:41:73:ee:e2:38:6d:a3:
                    d9:6e:4c:44:0e:c3:ab:a8:c8:de:8a:ba:60:df:40:
                    58:06:57:a2:2b:86:9d:e4:c4:d5:4b:44:1a:d0:c9:
                    51:1e:de:ce:bc:0a:e7:7a:50:b4:90:2f:8d:c6:39:
                    53:22:46:10:79:46:4f:c9:c4:0b:ad:d2:84:2f:26:
                    ed:39:09:00:e8:15:45:6c:e1:f4:e0:7a:78:de:4c:
                    3d:8a:f1:76:2b:50:95:33:e2:6c:0b:d7:f1:21:8b:
                    df:4d:c2:02:ef:c3:18:39:7a:17:b3:03:a8:9d:fe:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:E6:B0:7A:0B:9A:0E:E4:C9:68:A2:24:E9:90:48:0B:DC:7B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a87435cf-a6f2-3201-8a93-631966f582c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:65:39:b6:91:b1:1e:54:b2:93:e4:3b:92:a0:2e:81:0f:a3:
         55:12:1b:3e:d2:05:e3:e7:2d:88:03:6b:e5:c0:d8:56:39:2f:
         09:b0:d6:13:8a:3a:c9:a0:37:45:07:40:7a:3e:1f:22:cc:aa:
         78:ef:20:70:30:c3:ef:71:bf:a1:46:db:d9:b0:82:7b:cb:7a:
         10:8a:48:33:d0:85:87:de:9a:82:5f:bd:b5:63:5d:03:3c:35:
         97:af:76:45:3a:dd:b7:c1:20:4d:6c:b7:25:20:e9:7a:be:69:
         e9:e7:fc:26:83:22:a9:7b:d0:9c:30:a3:2c:d4:bd:08:d4:ee:
         92:e9:cb:ad:5c:cb:aa:78:0a:75:c5:8c:b9:e9:86:76:29:c9:
         fe:50:14:02:32:61:40:db:c5:7a:5d:b3:8b:c0:cc:a0:9f:07:
         b8:68:dd:cf:63:7a:b8:4b:2f:65:74:52:74:df:14:75:b1:de:
         01:1c:62:21:ba:40:42:62:9d:76:56:47:5d:33:ce:6e:d6:64:
         e7:36:62:0c:11:28:f1:38:61:40:bd:aa:a2:25:4e:43:34:91:
         1f:e1:dc:e8:48:f3:94:78:a6:a9:fc:b6:fd:54:ee:50:57:50:
         e8:a5:c7:e7:18:ac:c1:d0:cc:41:08:c0:b3:9d:a0:4a:3e:c7:
         03:a9:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:06 2026 by rpki-client