Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bfcfc8ad-e0be-31c2-8f65-b3ea072d505f.roa
File:                     bfcfc8ad-e0be-31c2-8f65-b3ea072d505f.roa (raw, json)
Hash identifier:          JW4us36GlNU56xBmjtnDQoOYURrY8i3nUbKzWPrlGDY=
Subject key identifier:   10:72:8F:4A:4E:5D:2C:6E:EC:5D:1D:26:C0:28:07:06:9F:A4:38:F4
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D95D402CFCEDEA57F5C0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bfcfc8ad-e0be-31c2-8f65-b3ea072d505f.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     397630
IP address blocks:        64.16.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d9:5d:40:2c:fc:ed:ea:57:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=e932a5c9-654d-4414-953b-8992e054db53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:ba:77:51:0a:ae:e2:6a:bc:83:62:56:eb:
                    cd:9c:8f:98:18:97:26:34:1d:2a:b9:ac:aa:5d:92:
                    3f:4f:bb:6e:b6:b7:fa:ca:35:59:0a:ed:eb:dd:c1:
                    43:c8:90:36:89:44:70:f9:59:32:cd:41:7a:40:0e:
                    f7:7a:8a:79:5a:3d:2c:6f:09:ec:19:57:bc:c6:95:
                    c0:10:fb:ad:9e:68:f7:8b:90:b1:65:8a:94:56:d1:
                    1b:4e:61:3b:df:cf:20:42:bf:d1:65:c9:43:5e:77:
                    43:ba:cc:cd:b4:11:47:ba:8c:b1:8f:af:91:f0:dd:
                    c6:1d:6f:56:db:27:e4:1d:96:e4:87:b1:79:d6:69:
                    62:0a:86:7d:0e:1e:8e:12:14:1c:7b:34:fd:b6:0a:
                    09:f4:11:d0:16:d2:07:1e:92:1c:d6:51:7f:e1:09:
                    10:62:b2:13:d0:0f:c2:36:44:4d:ca:36:d4:b8:2d:
                    bc:a2:52:49:ca:4e:b4:ca:76:5a:dd:b7:ab:88:3c:
                    1d:65:15:89:cb:02:2b:5d:02:05:a9:d3:6a:55:4e:
                    3a:32:8d:1e:03:51:51:66:e4:7a:d7:10:d7:fc:31:
                    f9:f0:b2:41:08:03:40:a5:85:ec:10:3c:49:d7:49:
                    a2:8b:25:01:23:27:92:f7:9f:d7:f1:25:1e:d7:40:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:72:8F:4A:4E:5D:2C:6E:EC:5D:1D:26:C0:28:07:06:9F:A4:38:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/bfcfc8ad-e0be-31c2-8f65-b3ea072d505f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:14:eb:37:36:dc:09:f0:fe:e0:9f:30:a7:ff:82:fe:65:
         66:81:ef:48:b9:e0:7d:35:0e:b0:d6:76:5f:f3:f4:43:11:ac:
         b5:7c:66:32:e7:98:fb:04:62:4e:44:eb:57:8a:cd:92:33:f1:
         c4:12:96:bc:f0:c5:a4:f7:a9:7c:85:f9:b9:4a:79:ea:23:69:
         19:1b:89:27:98:6b:91:0d:65:fd:2b:66:b0:d6:79:e9:e5:3e:
         e4:d4:6c:9c:45:70:d2:c7:ad:ef:06:60:7d:c5:27:d8:77:1c:
         9b:1b:98:f4:b3:ae:cb:49:34:e4:ae:c8:da:90:97:39:09:94:
         a1:1e:e8:72:15:a0:a6:ac:e1:fa:da:1d:dc:1f:be:77:c0:73:
         0a:8a:97:25:ad:3e:14:f2:7c:01:a6:c5:e5:c9:2e:de:8a:0d:
         64:2d:31:7c:d1:bb:2d:b8:82:79:f6:e8:7c:43:d7:39:e0:91:
         38:7a:55:62:88:8c:e9:69:c3:15:d1:2b:7b:e2:c1:c5:38:09:
         6e:67:87:74:b0:76:25:3a:2f:a9:17:4f:0e:cd:a5:e3:ee:0a:
         97:b7:47:60:92:5e:b1:bc:32:31:9c:ee:cc:52:50:0f:ee:ba:
         f0:01:90:ce:d3:d9:e9:81:c6:01:f8:98:15:fd:ad:c6:46:3c:
         6c:ea:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:38:55 2026 by rpki-client