Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/313be640-91e3-3bcd-94a3-a94cfd931fac.roa
File:                     313be640-91e3-3bcd-94a3-a94cfd931fac.roa (raw, json)
Hash identifier:          DnOkiAXKCa0KWADyBEJRGrVzXBTy6xNLsaogBIdT7nQ=
Subject key identifier:   91:4C:42:B6:C8:C7:30:3A:53:17:B2:92:40:DD:29:87:28:35:2E:BE
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D24DE29F190D619D0980
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/313be640-91e3-3bcd-94a3-a94cfd931fac.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d2:4d:e2:9f:19:0d:61:9d:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=1be29102-5f31-4bb8-8394-75550f794a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:69:08:76:88:21:1a:22:43:13:40:f3:05:
                    e1:30:b6:f8:1b:aa:ad:58:1a:78:66:cc:c2:15:e4:
                    80:33:13:32:6d:24:bd:3c:c9:53:91:bf:07:74:ca:
                    e7:2f:0f:99:e9:7c:ec:8e:09:d9:70:df:31:5f:85:
                    8a:09:d8:ae:d7:4b:77:1b:95:dd:1c:fb:29:03:2d:
                    d5:79:a9:12:35:d8:3d:26:c9:5d:e4:da:50:38:87:
                    d4:da:c5:20:8c:72:dd:28:84:2e:47:07:59:f3:d5:
                    f1:77:ad:d1:ef:a6:bd:b4:f8:ae:e7:62:0c:c9:d5:
                    56:4e:68:a4:f4:53:56:55:28:82:be:83:e1:f0:76:
                    f5:aa:4f:56:3e:0b:10:b1:57:4a:96:96:fc:25:95:
                    4b:bc:2d:10:f3:20:4a:c7:13:b1:ff:74:50:64:cf:
                    d3:6f:64:00:4d:d8:b2:06:15:95:26:50:e2:52:c7:
                    88:25:c2:bc:23:c4:13:4a:4b:8b:b2:f7:00:2c:91:
                    c0:3f:b8:6c:c2:90:b3:e9:ac:6d:10:d1:f5:e4:20:
                    88:3d:28:c3:b0:3a:5d:7a:c2:0e:1d:93:7d:98:5e:
                    5f:b4:fc:27:dd:e2:52:cb:13:6a:78:bc:53:b7:0a:
                    6c:b3:5b:39:b4:54:e9:18:03:26:83:3b:26:af:e7:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4C:42:B6:C8:C7:30:3A:53:17:B2:92:40:DD:29:87:28:35:2E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/313be640-91e3-3bcd-94a3-a94cfd931fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:81:fd:84:94:f1:8c:6f:68:5b:18:d7:5a:83:a2:fd:26:68:
         f6:10:95:da:d1:1c:8a:f5:d4:64:b6:62:97:cb:99:6a:03:45:
         0b:21:8e:f7:00:78:d0:01:d0:d0:47:7a:d4:92:de:29:18:35:
         ec:b8:3b:ad:09:a8:57:99:5f:c8:c2:aa:27:db:7d:84:bb:56:
         2c:ee:d9:aa:38:22:06:af:fe:c3:f3:a0:35:8b:85:95:44:6f:
         6a:ad:f9:9e:b6:6a:08:a4:d8:91:a6:8a:43:d3:24:d5:d1:45:
         8d:b4:cc:96:34:60:7d:21:9d:9f:1b:6d:94:30:0a:d1:a5:28:
         6b:bd:7b:c4:08:87:73:ad:5a:dd:fc:0a:9c:83:60:c4:4d:3a:
         8d:22:95:ac:6f:f5:0d:8b:2e:e1:2f:4a:f9:2c:6c:e6:ec:27:
         a3:6f:bf:e6:a4:20:d1:aa:4f:9b:a0:a9:e2:f4:a2:cb:5f:09:
         f7:02:03:1d:9b:d2:8c:cd:72:28:96:7b:90:bb:bf:43:7b:40:
         d1:60:5d:33:93:67:ee:62:ed:18:fe:c0:bb:34:f9:59:09:01:
         27:22:82:da:6a:39:9b:ab:70:40:43:94:58:f2:d7:f1:1d:3b:
         fe:14:ad:50:bc:81:1d:54:f2:73:10:33:e9:d3:94:8f:c5:db:
         8a:80:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:14 2026 by rpki-client