Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/50a6dab5-b736-3ae8-a418-132139e20b22.roa
File:                     50a6dab5-b736-3ae8-a418-132139e20b22.roa (raw, json)
Hash identifier:          3O5JSTN0W5QXJY1FtvsLMCMlxTmKUZDFAyTr5d+FENg=
Subject key identifier:   80:1C:AA:C9:28:95:89:84:A4:5A:F9:FE:01:DC:8A:E7:0B:57:19:4C
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D1A6597740984F22BFCE
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/50a6dab5-b736-3ae8-a418-132139e20b22.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d1:a6:59:77:40:98:4f:22:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=df6f5aee-156b-4916-95f3-15a7b01c44b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a8:6b:d2:cc:9e:06:3d:85:14:d8:30:c2:ba:
                    df:7a:db:50:6d:aa:b8:60:cb:16:fb:be:7f:5d:f0:
                    2b:bd:5f:2e:57:db:ed:a2:55:0c:f9:d4:f6:78:30:
                    cb:5b:de:98:c4:3a:de:61:fa:1a:fc:45:8b:eb:e3:
                    6e:b5:39:a4:e4:23:d9:55:3e:ce:71:63:fe:d0:32:
                    e2:d4:d7:5c:a3:3f:bf:74:77:c7:27:fa:92:f1:0c:
                    8f:b6:ef:51:57:6a:30:bd:77:eb:2f:65:11:4b:3f:
                    17:0f:af:19:40:08:ee:2a:90:6c:8b:54:0c:63:52:
                    00:1e:09:d6:00:ac:71:26:af:51:df:7e:52:93:46:
                    77:28:87:9f:83:4d:79:c6:fb:7d:d8:1a:e6:84:dc:
                    d2:60:99:00:d2:7f:75:4a:be:f8:21:c8:4d:b2:fe:
                    41:b3:8a:4e:43:dd:98:23:4f:6b:61:06:28:65:bf:
                    53:73:c2:d5:41:78:a1:c7:06:1a:59:d7:5e:a2:13:
                    25:6e:2c:71:4f:be:9e:eb:e3:d5:ae:95:29:f0:19:
                    75:61:57:6c:ad:26:d3:ac:20:d3:76:f0:b2:33:92:
                    a7:15:d9:c1:e0:c1:f4:98:dd:20:b7:02:1d:17:bc:
                    71:65:f9:36:a3:df:a3:81:b9:e0:64:44:8a:ca:85:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1C:AA:C9:28:95:89:84:A4:5A:F9:FE:01:DC:8A:E7:0B:57:19:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/50a6dab5-b736-3ae8-a418-132139e20b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:03:6f:c6:3c:c4:ad:19:f7:38:f6:50:c4:a4:1d:3d:42:f3:
         0d:a6:66:9e:de:09:06:29:3c:14:b4:00:a1:1a:34:0b:7d:1a:
         b0:3d:5b:77:51:7c:90:7c:78:33:4f:96:d5:73:fc:df:31:be:
         da:95:58:1e:a6:87:bf:28:a1:fd:de:07:ae:d8:10:19:1a:4c:
         51:b0:01:f7:a2:d2:34:b7:da:1d:3d:b0:f9:38:7d:45:98:2d:
         8d:3e:65:2b:ff:01:5d:e3:15:76:45:6d:7c:f6:fe:4d:2d:ad:
         d7:db:05:fd:09:7d:54:bc:44:ec:fa:a4:de:1a:23:2b:0e:71:
         a0:08:f0:f8:5e:3b:1e:e8:2a:db:03:79:a2:1a:28:fa:f3:3a:
         51:78:90:9c:96:be:d4:a0:18:c2:51:c8:13:34:d0:29:9e:51:
         7c:68:d4:74:91:f7:03:94:5b:5b:c8:af:bc:90:dd:29:c3:28:
         0e:48:d5:07:1f:18:d6:3a:4e:fc:ad:da:c5:69:e1:33:94:82:
         d7:1f:89:70:72:c5:bb:b4:d0:4f:6c:45:82:73:8b:a0:8b:23:
         ce:0e:33:17:9a:d5:88:00:64:eb:51:5f:27:16:77:ab:f3:ff:
         59:a4:ef:60:b8:74:a6:f8:9f:59:d5:60:43:b8:f4:1c:f3:d2:
         86:c5:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:44 2026 by rpki-client