Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa
File:                     30a4f60f-dd84-3200-a318-54fb513afa8d.roa (raw, json)
Hash identifier:          04Jh4GfPANbQCMwv0hchn7+9xEEzZFidXYXB3nQuOqM=
Subject key identifier:   2F:3E:51:C8:DA:76:40:C0:1D:CA:BF:48:F4:D9:E2:37:45:BF:DB:0C
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D3EC9C87D672FFD41E80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d3:ec:9c:87:d6:72:ff:d4:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=ac911181-23de-47a2-9959-3f17f467ffc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:1b:86:4a:aa:c5:86:b4:5a:4a:59:75:ed:
                    5f:21:0a:a3:ec:a5:05:d3:5d:08:f5:dd:ee:e9:1f:
                    12:4a:2b:d9:f6:80:af:ae:f2:db:df:de:ff:e7:38:
                    9a:b8:63:f0:04:73:88:3d:4f:e6:a1:ea:a4:7f:85:
                    cb:38:13:62:f8:8a:a8:59:bb:a6:88:65:df:11:70:
                    a4:e3:5f:8e:c1:01:77:11:8e:62:e0:46:a1:41:7e:
                    68:1d:5a:f0:db:4d:e5:9e:93:cb:41:8d:5b:25:9c:
                    23:95:26:2d:07:45:d1:04:51:5a:ff:e6:b5:f9:a8:
                    9f:a4:2b:dc:bf:41:5a:b1:a0:10:32:93:58:42:4d:
                    87:05:67:81:80:bc:22:00:b3:08:14:36:04:9a:82:
                    3a:c5:d5:96:a0:78:f6:7b:3a:21:2a:b9:29:d7:c8:
                    cc:f6:b9:5f:1f:38:69:ab:0d:7d:87:e4:34:a7:3a:
                    0b:25:59:6a:4d:2f:f2:fa:f0:55:c8:00:14:37:4e:
                    67:23:21:41:a4:3c:26:19:a8:c9:b0:db:b5:d9:01:
                    67:74:53:bd:9c:cf:e1:34:17:51:7a:ff:b3:6f:2d:
                    01:09:e8:96:95:07:9a:b9:e6:83:a0:22:4c:a9:cd:
                    39:72:5d:ae:86:d8:40:8b:0e:e9:55:8c:52:39:9e:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3E:51:C8:DA:76:40:C0:1D:CA:BF:48:F4:D9:E2:37:45:BF:DB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:10:46:66:22:2c:e7:07:5d:20:a9:2b:c4:9f:ef:e3:7b:70:
         2b:91:85:00:8d:fd:86:4b:53:9c:1b:76:42:75:72:39:4e:2e:
         28:8b:54:64:4a:22:a1:05:e7:8f:84:b2:48:da:d1:75:51:44:
         12:5b:3c:5d:64:26:b9:a8:f9:9f:d5:20:9a:a0:6c:77:68:9c:
         b1:07:ee:a1:4b:0e:26:c1:90:2d:b1:03:34:33:4a:5f:42:50:
         ed:9c:39:16:52:2d:1b:6e:f7:8e:f1:88:68:49:40:91:22:6c:
         6d:71:3b:e5:f4:63:86:62:1b:c9:fc:15:de:af:c0:98:83:da:
         a2:42:6b:a0:2b:ee:2a:89:d8:8f:a4:fe:95:cc:ea:14:bb:3b:
         ae:f1:50:e8:17:1c:f5:f0:59:28:79:b0:3d:ff:4b:10:cf:72:
         6d:29:08:1b:85:4d:7f:0d:7f:33:8a:f0:8a:51:7f:c3:9c:ba:
         d9:a6:a8:d8:5b:1a:39:cd:c5:e4:24:d8:ff:76:18:ae:71:51:
         e8:67:c2:23:c7:28:e5:ca:d7:f3:f6:1e:ad:d2:22:87:7a:e8:
         1c:44:4b:23:7e:09:7d:64:10:b8:07:8c:90:0a:5e:2f:93:99:
         5e:f6:a6:80:e1:d2:fa:c1:40:2f:8c:88:4d:4a:aa:1b:eb:60:
         7a:5c:18:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNPsnIfWcv/UHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
YWM5MTExODEtMjNkZS00N2EyLTk5NTktM2YxN2Y0NjdmZmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42EbhkqqxYa0WkpZde1fIQqj7KUF010I9d3u
6R8SSivZ9oCvrvLb397/5ziauGPwBHOIPU/moeqkf4XLOBNi+IqoWbumiGXfEXCk
41+OwQF3EY5i4EahQX5oHVrw203lnpPLQY1bJZwjlSYtB0XRBFFa/+a1+aifpCvc
v0FasaAQMpNYQk2HBWeBgLwiALMIFDYEmoI6xdWWoHj2ezohKrkp18jM9rlfHzhp
qw19h+Q0pzoLJVlqTS/y+vBVyAAUN05nIyFBpDwmGajJsNu12QFndFO9nM/hNBdR
ev+zby0BCeiWlQeaueaDoCJMqc05cl2uhthAiw7pVYxSOZ62awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC8+UcjadkDAHcq/SPTZ4jdFv9sMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvMzBhNGY2MGYtZGQ4NC0z
MjAwLWEzMTgtNTRmYjUxM2FmYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcQRmYiLOcHXSCpK8Sf7+N7cCuRhQCN/YZLU5wbdkJ1cjlOLiiLVGRK
IqEF54+Eskja0XVRRBJbPF1kJrmo+Z/VIJqgbHdonLEH7qFLDibBkC2xAzQzSl9C
UO2cORZSLRtu947xiGhJQJEibG1xO+X0Y4ZiG8n8Fd6vwJiD2qJCa6Ar7iqJ2I+k
/pXM6hS7O67xUOgXHPXwWSh5sD3/SxDPcm0pCBuFTX8NfzOK8IpRf8OcutmmqNhb
GjnNxeQk2P92GK5xUehnwiPHKOXK1/P2Hq3SIod66BxESyN+CX1kELgHjJAKXi+T
mV72poDh0vrBQC+MiE1KqhvrYHpcGOc=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:14 2026 by rpki-client