Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/51904c6d-2772-3b8a-89b2-a26bfd22636d.roa
File:                     51904c6d-2772-3b8a-89b2-a26bfd22636d.roa (raw, json)
Hash identifier:          ifl5YfoXBDSSPI1+C52+d2/cg0UHx7nmH0YpDQ4cVbY=
Subject key identifier:   A0:0B:AC:5E:6C:3F:30:2F:0D:84:12:CA:0E:04:13:81:4E:B9:40:D1
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D3FAB6550B557AFA3880
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/51904c6d-2772-3b8a-89b2-a26bfd22636d.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d3:fa:b6:55:0b:55:7a:fa:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=738a0cdb-1a12-44dd-8f78-1ae2a6342e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:01:4e:00:bf:f5:49:0b:09:80:33:66:bc:
                    13:69:cf:90:b0:a1:72:12:f8:c4:c0:9a:8a:10:40:
                    61:f2:11:b4:a3:fd:dc:ce:f2:03:94:38:db:d8:1e:
                    2b:b9:fa:98:81:a0:a4:8d:78:34:33:5d:bc:6b:6b:
                    be:77:0c:49:90:51:24:e3:28:81:2e:28:a1:be:27:
                    42:85:45:69:7b:44:e3:af:33:78:4d:54:30:5e:16:
                    04:e9:db:71:ee:e3:f9:97:60:6c:d5:01:62:ed:b7:
                    71:c9:8f:ed:cd:8d:b7:a3:af:e5:0c:02:c8:46:1c:
                    de:54:b4:5a:83:6b:c3:f6:cb:bf:a5:a2:63:33:58:
                    10:b2:09:d0:6f:9d:92:e8:d6:f6:55:8b:12:c6:4f:
                    d0:32:44:36:ae:b0:84:28:a2:f4:da:ec:c4:55:2a:
                    a5:2a:c8:a4:55:45:b4:cb:80:12:bb:cf:59:a1:56:
                    e0:62:60:ad:25:a6:dc:2c:4f:4f:b1:04:6d:ec:99:
                    b9:12:40:14:54:c1:2a:53:03:d1:44:de:14:f1:ce:
                    37:58:14:ff:45:ab:a3:a1:b1:a3:b9:b1:49:e8:6a:
                    2f:bb:d3:36:a1:3e:fd:34:aa:9d:e6:ce:f1:25:22:
                    31:6e:29:d7:ba:d7:5c:44:e8:23:79:75:73:45:a5:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:AC:5E:6C:3F:30:2F:0D:84:12:CA:0E:04:13:81:4E:B9:40:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/51904c6d-2772-3b8a-89b2-a26bfd22636d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:10:e6:4e:dc:39:40:0f:77:d2:ee:e5:f6:84:57:22:f8:
         4c:48:71:af:0b:66:49:38:4f:ce:6b:83:1f:ee:60:c3:fb:de:
         35:fc:d9:a0:b2:11:ea:b8:c8:10:b8:c3:b3:e8:46:b5:46:e5:
         1e:61:1e:bb:60:ee:ca:34:08:d0:4e:2f:be:06:72:81:ef:bb:
         76:2a:e4:01:74:2c:62:4d:df:d5:e0:61:49:fb:26:e8:dd:1d:
         16:5c:af:d1:63:c4:29:02:e9:d4:9d:11:16:c8:12:bb:97:56:
         19:2e:ca:5f:0c:d5:60:90:ff:e7:b3:ee:ee:67:7c:50:68:ff:
         80:8d:db:31:dc:ca:c2:29:12:f2:0b:de:2a:af:1e:37:83:b7:
         2c:bb:aa:da:64:ee:55:76:f8:cd:43:ef:54:01:c7:35:86:de:
         f9:c8:b4:40:b5:13:f8:e3:58:35:b4:bb:27:b8:77:5c:ea:55:
         e1:76:b4:6c:90:e4:c5:e2:92:40:5d:f5:29:de:6b:af:38:e1:
         6f:e9:b7:54:bd:3a:cf:f2:33:2c:a4:dd:4f:07:d5:06:a3:5a:
         17:48:6f:d3:f3:9e:7f:50:93:5d:8f:1c:97:88:24:d7:79:56:
         74:31:69:20:82:c2:8e:06:3f:ea:45:6c:c2:29:41:e6:8d:4d:
         53:78:32:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lNP6tlULVXr6OIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
NzM4YTBjZGItMWExMi00NGRkLThmNzgtMWFlMmE2MzQyZTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSYBTgC/9UkLCYAzZrwTac+QsKFyEvjEwJqK
EEBh8hG0o/3czvIDlDjb2B4rufqYgaCkjXg0M128a2u+dwxJkFEk4yiBLiihvidC
hUVpe0TjrzN4TVQwXhYE6dtx7uP5l2Bs1QFi7bdxyY/tzY23o6/lDALIRhzeVLRa
g2vD9su/paJjM1gQsgnQb52S6Nb2VYsSxk/QMkQ2rrCEKKL02uzEVSqlKsikVUW0
y4ASu89ZoVbgYmCtJabcLE9PsQRt7Jm5EkAUVMEqUwPRRN4U8c43WBT/RaujobGj
ubFJ6Govu9M2oT79NKqd5s7xJSIxbinXutdcROgjeXVzRaX+RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKALrF5sPzAvDYQSyg4EE4FOuUDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvNTE5MDRjNmQtMjc3Mi0z
YjhhLTg5YjItYTI2YmZkMjI2MzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo9EOZO3DlAD3fS7uX2hFci+ExIca8LZkk4T85rgx/uYMP73jX82aCy
Eeq4yBC4w7PoRrVG5R5hHrtg7so0CNBOL74GcoHvu3Yq5AF0LGJN39XgYUn7Jujd
HRZcr9FjxCkC6dSdERbIEruXVhkuyl8M1WCQ/+ez7u5nfFBo/4CN2zHcysIpEvIL
3iqvHjeDtyy7qtpk7lV2+M1D71QBxzWG3vnItEC1E/jjWDW0uye4d1zqVeF2tGyQ
5MXikkBd9Snea6844W/pt1S9Os/yMyyk3U8H1QajWhdIb9Pznn9Qk12PHJeIJNd5
VnQxaSCCwo4GP+pFbMIpQeaNTVN4MpY=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:17 2026 by rpki-client