Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/acdc1522-c0df-3abb-bd48-c6108900bbc4.roa
File:                     acdc1522-c0df-3abb-bd48-c6108900bbc4.roa (raw, json)
Hash identifier:          h5EqQi+V0WE0nMOIxJW89WDvgeq9CQ1/6Zyi3oMsrOc=
Subject key identifier:   FD:62:27:84:D9:A0:12:FA:CD:AD:5F:16:A4:76:B7:96:57:53:68:17
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D1DD235B02251853D780
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/acdc1522-c0df-3abb-bd48-c6108900bbc4.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d1:dd:23:5b:02:25:18:53:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=6bbeae3b-ac24-41dc-bbac-442ccb383894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:27:6c:a2:c3:d1:5b:6d:1d:2d:96:e6:02:
                    05:01:5a:59:eb:55:3d:b2:16:b1:87:9c:56:aa:63:
                    ed:d4:2a:ba:84:a2:e1:3d:dd:15:90:05:8d:f9:af:
                    44:4f:b1:79:a2:03:95:9c:bd:f8:f3:32:ac:90:35:
                    7e:10:20:6a:9e:92:96:3f:b6:7e:4b:0c:b8:04:41:
                    c8:77:51:40:ae:92:e5:cc:28:1b:51:61:1d:1e:7a:
                    68:89:22:dc:cc:98:e1:8e:a2:2d:c3:b8:dd:03:8c:
                    2a:d6:d1:69:cf:65:2b:bf:0b:b1:9e:37:7b:d0:0f:
                    55:07:74:22:b7:d7:fe:da:a1:c0:cd:9b:e9:f4:24:
                    53:2d:cc:02:27:75:fd:18:c5:76:c4:cb:21:09:de:
                    20:24:fd:0d:ce:9a:eb:ea:92:99:3c:14:fa:ac:cc:
                    7c:42:ef:1e:9d:89:c4:5a:96:41:1a:23:f0:66:10:
                    f9:22:55:43:1c:95:82:5e:84:ee:a1:21:2f:56:35:
                    cb:6c:57:63:7a:18:a3:46:5e:b0:53:3b:ed:dd:a5:
                    68:50:1c:61:b0:42:a3:40:69:6a:ec:b1:5e:38:dc:
                    98:d6:b7:dc:76:15:07:09:18:45:b9:cd:61:f8:77:
                    56:6f:9d:72:9e:63:73:89:6c:70:20:fa:b8:e3:cd:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:62:27:84:D9:A0:12:FA:CD:AD:5F:16:A4:76:B7:96:57:53:68:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/acdc1522-c0df-3abb-bd48-c6108900bbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:16:a2:c6:f8:1c:18:1d:d5:87:da:82:06:c0:8c:f5:93:21:
         2d:77:1a:e3:6c:ff:5b:c0:e8:2b:e7:2d:bb:23:ea:e0:fd:5c:
         0e:7f:13:25:b5:20:fc:31:62:24:9e:2a:8f:03:14:d2:07:83:
         aa:e7:93:7a:f6:6d:2c:81:7f:41:eb:ab:46:9a:2a:ca:41:fa:
         17:5d:fa:98:25:01:1d:b8:7b:fb:c2:03:9f:17:76:01:77:27:
         18:32:fd:f4:51:e3:0a:e0:13:73:3f:cc:38:da:62:51:5a:68:
         c6:ac:48:f8:2f:ab:27:55:c9:80:ca:e1:2b:a5:a1:31:a3:13:
         5e:de:19:00:ad:7f:2a:88:ea:e5:17:3c:58:05:ed:5a:0b:99:
         a6:7d:5c:63:9c:b3:75:6b:16:39:fc:35:f0:89:b6:eb:9b:ba:
         e5:85:c2:53:fc:75:41:ba:5c:3f:69:10:00:44:a4:79:20:af:
         6c:46:48:bf:b8:8f:b1:4f:e8:3a:90:22:e5:9b:c7:54:be:ca:
         44:44:5c:6c:f6:c5:48:32:2e:16:17:ca:90:79:c4:87:57:45:
         60:d0:a4:ab:f3:99:d7:c0:43:33:07:30:1c:ee:81:7d:35:99:
         4a:37:bc:54:0d:19:a4:a9:bf:f8:30:64:65:60:8d:bc:24:32:
         84:9c:49:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:01 2026 by rpki-client