Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/afa7f66d-6bc2-3978-9d9c-6ffa67453619.roa
File:                     afa7f66d-6bc2-3978-9d9c-6ffa67453619.roa (raw, json)
Hash identifier:          eQ46x9z8vQHM50ZXqB4ze+MkrEggKbTk7iWCHfYuOAE=
Subject key identifier:   94:B9:70:F4:AB:B1:FE:09:CF:36:62:19:FB:F9:E6:62:6E:52:AE:54
Certificate issuer:       /CN=807e0353-894a-4214-89b5-40ce5ac7089f
Certificate serial:       010D0C9F4328584E37008F1BD9E583D0F9123840
Authority key identifier: FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/afa7f66d-6bc2-3978-9d9c-6ffa67453619.roa
Signing time:             Thu 18 Jun 2026 17:39:06 +0000
ROA not before:           Thu 18 Jun 2026 17:39:06 +0000
ROA not after:            Wed 16 Sep 2026 17:39:06 +0000
asID:                     400494
IP address blocks:        64.70.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:00:8f:1b:d9:e5:83:d0:f9:12:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807e0353-894a-4214-89b5-40ce5ac7089f
        Validity
            Not Before: Jun 18 17:39:06 2026 GMT
            Not After : Sep 16 17:39:06 2026 GMT
        Subject: CN=1671421b-7e7b-479c-ad10-cc591491a245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:56:91:49:b6:a6:83:46:f5:1d:3a:0e:5f:
                    a6:2e:5d:5f:9c:17:aa:72:18:0a:a3:54:b0:69:5f:
                    12:3a:2a:9e:d5:04:f6:7b:f0:ec:33:1b:72:3a:f2:
                    75:fb:3c:76:09:da:9b:e4:0c:24:58:9f:fd:00:a1:
                    ba:36:ce:7f:7e:1c:e4:a3:ae:46:95:5d:81:b4:c8:
                    ef:e1:1d:19:46:02:41:8b:1d:fe:1b:5f:55:56:43:
                    82:8b:95:56:16:de:e3:48:e9:99:aa:fe:50:86:3d:
                    80:a9:5c:ad:64:30:f7:46:17:4b:83:50:9a:7d:83:
                    17:e6:5b:86:18:03:4f:95:0b:f6:7f:c7:52:a5:a2:
                    e3:1d:d1:d1:0f:ff:e3:e5:1b:87:20:00:54:45:1e:
                    2e:ed:8c:21:9e:3f:02:37:b9:d7:0b:fc:9a:8a:72:
                    c8:c4:fa:9c:88:ab:d3:ae:b5:57:6d:25:18:1c:33:
                    aa:7a:65:50:40:5b:4d:72:42:da:75:6c:20:02:52:
                    7e:77:13:5c:c4:9a:ad:f0:bf:47:a9:73:c5:dc:1c:
                    0b:af:88:9f:c8:1e:66:fd:09:64:43:e1:10:32:32:
                    9e:e8:99:d3:5b:56:84:69:d7:19:19:c9:ef:63:32:
                    9d:fb:85:60:8d:d9:4f:24:2f:1d:31:82:49:48:c0:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B9:70:F4:AB:B1:FE:09:CF:36:62:19:FB:F9:E6:62:6E:52:AE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/afa7f66d-6bc2-3978-9d9c-6ffa67453619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl

            X509v3 Authority Key Identifier:
                keyid:FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.70.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:1c:0e:fb:df:d8:90:61:0f:79:e3:04:26:cc:5b:c9:20:
         73:9b:24:8e:ff:08:12:0c:d2:00:47:1a:60:2a:ce:a2:e1:de:
         7a:44:29:02:13:2c:48:d6:b3:53:4a:1b:96:ea:94:77:b5:70:
         26:a2:23:d4:17:8e:9f:73:4c:f4:75:92:d8:c9:51:60:49:aa:
         fb:5d:6f:b1:55:5c:1e:46:2e:de:f8:53:c8:d8:7f:84:ea:5a:
         e1:d3:36:f8:d0:84:3f:b3:2c:71:a2:4c:47:d6:73:6b:0b:0a:
         1b:d6:4d:91:24:45:b6:45:c3:bd:0e:2d:9c:96:21:0b:6f:50:
         64:e0:11:5c:19:4b:99:4b:15:6b:f6:60:8b:83:94:a4:0b:88:
         55:e7:cf:37:10:0f:5a:24:b2:9d:3f:21:b7:2f:fb:d9:52:27:
         a2:3d:83:2d:50:a3:63:42:f8:ed:9c:5e:dc:ca:4f:98:e0:b6:
         1b:a8:7b:a2:21:77:bf:f1:aa:ec:02:6c:73:63:c1:47:b1:8c:
         a8:d4:0f:10:15:1e:33:24:01:33:54:56:27:8f:75:17:b0:da:
         3a:8d:ab:6f:9c:e3:10:f8:a4:54:64:55:bb:bc:41:c4:c3:38:
         70:80:de:78:2e:c0:65:84:e9:67:f9:8f:59:4d:00:da:1f:03:
         ff:1c:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:57 2026 by rpki-client