Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f9fdec8-62ae-325c-ac6e-7219548b9240.roa
File:                     3f9fdec8-62ae-325c-ac6e-7219548b9240.roa (raw, json)
Hash identifier:          cAXjX9EnSpuovo6FqEDu1h0No9e+3sgkAvP7xyOA4wA=
Subject key identifier:   BC:B1:2E:35:D9:5D:15:AB:B6:A6:0C:0F:8F:77:79:AD:28:4E:60:A6
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D417FA1F0FC17F55DD00
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f9fdec8-62ae-325c-ac6e-7219548b9240.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d4:17:fa:1f:0f:c1:7f:55:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=37664cd3-8458-42e9-a011-e5539e4802fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1b:bd:d2:8e:e7:e6:ec:ce:ea:e2:4b:d2:17:
                    d2:9c:60:b3:e3:1e:a4:0f:e4:2c:be:dc:f8:db:2a:
                    39:b6:2e:c1:d0:12:ea:87:95:3e:07:87:80:2a:50:
                    42:24:5f:01:62:c2:4c:8f:3b:c9:8d:e8:2c:bf:bf:
                    fa:79:37:17:f6:8f:24:96:0d:e8:80:51:4c:61:75:
                    a5:2d:22:96:f0:77:98:09:3c:80:13:de:c4:ad:4a:
                    98:f5:03:a1:c5:3a:35:6f:e4:b5:2f:cb:c2:df:11:
                    2c:f7:dc:31:93:e0:bd:e1:33:06:ba:df:dd:ad:82:
                    6b:8a:e4:e3:85:b6:96:14:0a:c1:f5:96:a5:f5:0a:
                    a2:6f:48:bf:b8:a9:b5:8d:44:53:97:8a:d9:d7:73:
                    ab:90:4a:b4:c0:e2:c8:2f:44:3b:88:98:12:c0:76:
                    6d:2f:fe:31:2e:02:ed:5b:24:9c:34:d9:fd:c2:d0:
                    1a:f4:42:82:b3:7f:73:6d:75:b7:e4:ec:a8:ae:19:
                    b2:50:c5:b3:be:1b:6b:e0:df:24:4f:80:83:ee:33:
                    6b:df:8f:4a:22:a1:37:91:03:b5:90:df:da:a3:fc:
                    01:fc:48:a0:75:a0:27:72:75:15:3e:00:3f:4c:f8:
                    19:5b:94:6c:01:ea:6e:e9:97:43:30:be:b0:43:c5:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B1:2E:35:D9:5D:15:AB:B6:A6:0C:0F:8F:77:79:AD:28:4E:60:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/3f9fdec8-62ae-325c-ac6e-7219548b9240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:0a:2c:c0:df:eb:5b:6b:b8:4f:44:4c:48:97:c9:42:63:
         65:13:f7:9c:96:b7:12:4a:dd:84:c0:1f:3f:25:71:f2:3c:4d:
         99:de:d7:69:d5:05:1d:f7:f2:e6:31:a1:69:5a:ab:ef:d8:ef:
         e8:45:24:8e:1f:e3:14:fd:1e:4c:d8:a7:32:53:a3:45:3c:ca:
         3d:92:ee:8b:b9:a0:65:74:f3:3a:55:4e:fb:7a:22:0e:36:83:
         83:c4:c7:3b:b4:c8:a0:2c:a0:c3:63:37:75:d8:b2:1d:e3:63:
         f0:c1:68:3d:b6:d3:af:e9:01:bb:0a:7e:16:76:24:ea:64:5a:
         41:1d:db:e4:62:67:ea:42:b7:c9:e7:12:18:59:a6:c5:53:e4:
         d3:1b:fa:97:93:a3:3e:53:c9:90:14:85:36:bb:0e:4f:c6:db:
         fc:1a:56:ee:46:dc:60:f1:5d:22:b0:16:51:ac:18:bb:55:57:
         55:6f:ef:f9:89:18:d7:0a:88:eb:91:77:72:a9:a6:fa:c1:38:
         87:3f:19:e0:f0:b5:0c:55:8e:e8:49:27:0b:4c:54:47:92:9b:
         18:d1:e0:61:9c:78:30:b1:ee:09:94:eb:10:f6:67:20:24:70:
         0d:23:34:09:f4:02:93:13:f8:b7:cc:71:cd:54:10:b6:15:df:
         3c:4d:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:44 2026 by rpki-client