Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7fd95a5a-e5fe-327e-b4e8-7d1d873855e1.roa
File:                     7fd95a5a-e5fe-327e-b4e8-7d1d873855e1.roa (raw, json)
Hash identifier:          SE3kyuG17ednqm+CFFowHuHTK0IGCMKmJDbM+KH38+Y=
Subject key identifier:   C5:BF:E3:BA:1F:F3:58:66:2B:96:B1:FB:49:13:DD:81:F1:32:C3:12
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584E4D5117DD2EE1A449A1D87220
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7fd95a5a-e5fe-327e-b4e8-7d1d873855e1.roa
Signing time:             Fri 26 Jun 2026 17:29:09 +0000
ROA not before:           Fri 26 Jun 2026 17:29:09 +0000
ROA not after:            Thu 24 Sep 2026 17:29:09 +0000
asID:                     64286
IP address blocks:        64.64.97.0/24 maxlen: 24
                          173.239.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:51:17:dd:2e:e1:a4:49:a1:d8:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 26 17:29:09 2026 GMT
            Not After : Sep 24 17:29:09 2026 GMT
        Subject: CN=589408a0-0830-4b76-8e8b-0421d5b3a76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:d1:ad:47:5b:c3:13:32:de:46:43:26:97:
                    f2:bf:c8:8e:e1:0c:8e:35:c6:32:3e:b4:be:e3:1d:
                    d4:87:45:4a:16:82:3e:34:77:85:35:f6:1a:8c:38:
                    79:6d:80:03:10:bc:cd:f3:64:d9:75:a5:2f:2a:e1:
                    3f:a0:53:47:fb:3d:fa:2d:bd:65:98:45:ed:5c:e7:
                    6f:48:05:8b:8c:72:09:e8:a4:87:28:c4:70:bf:2f:
                    ac:be:95:73:2f:08:f3:bd:b4:b1:b9:48:ae:51:20:
                    0c:93:5d:47:69:c9:b7:fa:b4:9c:e5:cf:1c:d5:0d:
                    db:74:12:61:07:1a:ac:ba:2c:ca:1a:38:8e:d9:6e:
                    66:ea:bd:f9:e3:0f:50:7c:85:96:f4:a8:a2:82:e9:
                    10:8d:f0:4e:95:04:76:92:5a:2a:d1:81:21:c8:96:
                    51:7f:2d:3d:24:ef:e0:43:9e:cc:a6:ca:f5:95:50:
                    9e:21:32:48:2c:88:9f:6e:53:66:09:46:f0:bc:6a:
                    07:c6:ca:ce:ba:63:7e:01:c0:0b:ed:a1:4d:47:78:
                    04:0d:d7:b3:15:0c:92:4c:7f:1f:a1:65:bc:b2:15:
                    de:97:d0:d8:47:5e:d8:a8:58:f0:ab:27:dc:6b:85:
                    1b:19:1b:4a:f0:b2:94:dd:d7:79:a9:5d:74:fb:67:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:E3:BA:1F:F3:58:66:2B:96:B1:FB:49:13:DD:81:F1:32:C3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7fd95a5a-e5fe-327e-b4e8-7d1d873855e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.97.0/24
                  173.239.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:f4:e3:1e:73:59:c8:b8:89:f7:c9:00:2d:8f:9f:9f:f7:
         8c:0b:ac:19:a5:0d:22:0d:68:aa:61:0a:9d:62:dd:55:85:66:
         72:6c:e8:d9:84:5c:56:60:a6:40:1f:03:d5:cf:c4:33:e4:72:
         ee:82:00:c9:6f:55:b6:35:82:bf:b6:1c:04:aa:e7:d3:f8:e0:
         9c:08:d5:3d:6f:9c:49:65:3f:14:f3:9d:63:34:50:11:89:97:
         1e:0f:ee:af:c5:a4:bb:a7:0c:e2:cc:16:7d:8d:a9:a1:03:82:
         ef:92:15:1a:97:be:79:70:07:d4:9c:e0:a5:af:84:1b:bf:35:
         25:21:9a:32:d5:96:03:ae:de:5b:aa:1c:49:b4:22:30:4b:e2:
         b7:fc:35:eb:34:69:23:6b:14:9c:07:9c:f8:15:15:85:c6:06:
         5f:0f:bd:54:f6:d0:5f:8c:63:ab:c7:2a:4d:14:14:62:ce:45:
         d2:43:f4:9e:71:ba:54:de:e9:eb:c7:4b:6b:87:09:f2:1a:a5:
         08:5d:1f:ec:63:f5:98:f2:86:b5:93:76:b7:96:98:24:7d:4f:
         56:3f:08:55:48:2c:33:8c:1f:9f:a7:fc:ae:f9:9c:43:6d:79:
         8e:5b:7a:10:2c:5e:52:d2:b7:12:a3:10:cb:d6:1b:86:a1:a1:
         8c:13:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:43 2026 by rpki-client