Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa
File:                     f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa (raw, json)
Hash identifier:          HxpSAygsygt2VgccZuTJgRVqL9xvwwj7U5VntErk2Bo=
Subject key identifier:   6D:FF:EC:CE:30:65:0E:A1:D5:E1:0F:F5:2F:15:62:CF:34:7E:30:10
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D427212C86DAA5CAB3C0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d4:27:21:2c:86:da:a5:ca:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=5fe382c3-d0cb-42fd-854b-38d0594d4641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6a:53:ac:cb:67:d6:71:0e:c6:af:f0:74:5a:
                    cc:6b:10:c8:a4:61:ce:59:60:b5:5f:a0:0f:fd:37:
                    58:cc:18:c7:3f:b0:1e:e3:ef:d1:30:be:53:62:26:
                    11:96:f2:a7:72:95:e1:c4:ca:91:08:9e:b1:8d:d1:
                    46:5f:e8:4c:ef:0b:d1:6b:5e:ac:37:39:f1:fe:21:
                    28:4a:ff:34:27:70:6e:31:03:1b:d3:c6:f7:6b:ca:
                    bb:ec:8b:70:67:15:80:36:ea:73:68:13:63:b6:f2:
                    98:1f:75:86:10:0d:70:6e:b6:ae:48:db:b4:ec:40:
                    81:78:4c:28:c2:d9:81:43:80:9e:bd:e2:68:b6:64:
                    3e:c7:96:51:87:e0:92:9f:ff:ef:2a:5a:8d:be:4d:
                    f2:1d:28:80:87:b3:ba:02:40:8f:ce:3f:c0:03:6d:
                    63:c4:02:32:78:05:73:fc:0e:f4:5d:a5:0c:08:f8:
                    d5:20:82:22:33:3a:c1:d5:91:6d:b0:e7:9b:94:76:
                    cc:f6:10:77:38:cc:1b:0c:34:0f:9f:94:2f:b8:27:
                    06:7b:03:94:cb:99:52:27:c8:ca:57:34:7b:ae:85:
                    b9:8f:62:5d:69:70:3b:12:5f:68:ae:ec:f2:72:40:
                    cd:fc:49:34:de:36:2c:43:ad:03:00:bb:38:5b:04:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FF:EC:CE:30:65:0E:A1:D5:E1:0F:F5:2F:15:62:CF:34:7E:30:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f02a9d4a-3828-35cb-b5ca-3979075c7f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:da:96:f9:50:0f:81:67:ce:97:e2:50:0f:49:52:35:97:71:
         6a:4d:1f:a1:71:d5:24:1a:74:92:48:b3:be:14:f9:5c:83:9a:
         59:99:5a:65:56:53:97:fa:97:e3:f9:f1:42:a8:a2:49:f1:2d:
         40:55:72:df:7a:d3:df:f7:f1:a9:9c:f4:6d:64:28:dc:bd:97:
         ad:9d:77:bb:a6:68:38:c3:69:37:a0:21:92:55:2b:eb:6f:46:
         22:20:9e:19:20:e0:25:e5:75:e5:87:a8:19:30:06:f7:a2:d7:
         ad:f6:24:75:38:a4:eb:5c:82:86:89:74:e0:ae:da:98:4a:53:
         c9:c7:ee:d9:0c:f2:cb:41:68:98:bd:19:c1:67:64:81:c7:c6:
         e3:4b:53:50:d8:e6:44:fc:3a:d7:f4:91:be:51:38:66:49:1a:
         39:b9:fd:d0:97:76:54:ff:17:2c:97:73:fd:8d:54:4f:10:2b:
         ad:44:e0:59:6e:06:b0:e6:21:85:3b:61:20:ff:e1:5e:7b:ae:
         a3:7a:87:02:60:0b:e5:1c:91:71:97:7c:63:3a:b4:a4:04:a2:
         34:19:84:13:a8:c4:44:f6:d9:5f:30:f5:c0:47:c3:11:6e:a4:
         7d:70:cd:a9:ce:80:c4:80:d6:0c:0e:6e:f5:d3:c5:91:5d:e5:
         f5:fc:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:39 2026 by rpki-client