Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/0e651a5d-eb99-327a-a275-5487fc0e5f47.roa
File:                     0e651a5d-eb99-327a-a275-5487fc0e5f47.roa (raw, json)
Hash identifier:          Y7YCdYuDYDpm64eTCq4u0wZ8n71kZorPya56FjuVWzk=
Subject key identifier:   A6:C9:2E:D7:C7:4F:E8:A9:D0:8C:74:9F:12:7E:65:58:35:D2:25:3A
Certificate issuer:       /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
Certificate serial:       010D0C9F4328584E878C33187858513E226C9180
Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/0e651a5d-eb99-327a-a275-5487fc0e5f47.roa
Signing time:             Fri 17 Jul 2026 14:05:07 +0000
ROA not before:           Fri 17 Jul 2026 14:05:07 +0000
ROA not after:            Thu 15 Oct 2026 14:05:07 +0000
asID:                     10279
IP address blocks:        164.153.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:8c:33:18:78:58:51:3e:22:6c:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6
        Validity
            Not Before: Jul 17 14:05:07 2026 GMT
            Not After : Oct 15 14:05:07 2026 GMT
        Subject: CN=d0482a09-07ef-4ab6-858e-1580a8e7e479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:67:cd:8a:b4:ca:cd:84:de:c8:bd:af:2c:
                    20:45:24:2c:32:a9:02:19:07:bd:31:93:44:95:1c:
                    55:f1:8a:a0:55:74:78:b3:04:39:11:a2:f5:66:0c:
                    b4:ad:9d:02:b2:d5:d7:97:5a:7c:5f:cd:42:ba:c4:
                    10:ce:07:21:a5:7d:03:91:45:9c:a1:8c:d4:64:55:
                    31:92:9a:d9:11:bc:89:02:89:64:3c:56:f9:3e:eb:
                    a4:c1:10:8b:a7:0f:ff:2f:74:4a:9f:e7:34:3c:21:
                    33:2b:4f:c7:2b:e7:5f:9c:e0:3b:9a:c0:8e:0c:7a:
                    f5:67:e2:39:75:3b:b9:93:7a:5b:6d:ee:08:a2:eb:
                    df:88:59:f6:cf:74:9c:54:e6:13:59:8b:aa:a7:9c:
                    72:71:38:75:da:fe:2e:2c:6c:51:cf:99:35:c2:ba:
                    74:8d:10:5c:37:b1:51:7a:da:db:f7:46:51:4b:3d:
                    47:3f:2f:e0:07:8f:e2:e4:02:12:a6:cb:18:95:63:
                    9a:ee:8f:26:d9:25:58:20:be:0f:17:84:41:e5:19:
                    b9:2b:27:fe:60:ed:7c:2d:d1:49:d7:55:bf:09:46:
                    e0:fe:f5:42:24:61:1e:0c:7f:f5:f9:ae:35:80:2b:
                    3f:ab:1a:60:7a:b7:08:2c:f4:4a:60:07:8b:8b:38:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:2E:D7:C7:4F:E8:A9:D0:8C:74:9F:12:7E:65:58:35:D2:25:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/0e651a5d-eb99-327a-a275-5487fc0e5f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl

            X509v3 Authority Key Identifier:
                keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:15:c9:65:46:57:da:0a:98:e1:50:dd:a7:68:b0:d9:f1:ea:
         76:c2:8e:36:6d:6e:bc:23:91:b0:da:32:ba:56:99:e4:12:d9:
         8d:75:48:6d:aa:3c:a3:58:95:c2:d6:2e:40:14:bc:bb:50:75:
         ee:64:c8:8c:b9:1e:cc:55:ea:8a:42:f9:60:76:cf:f1:cd:4d:
         c9:f1:5a:fd:ec:12:c8:1b:26:a9:58:45:59:91:c5:42:fd:d4:
         f3:8e:ad:60:ba:e9:cc:c7:3a:c1:c1:ca:94:3d:be:81:b1:fc:
         45:25:9d:64:8c:d1:1e:39:9b:b3:42:ee:14:32:08:7a:85:93:
         2f:2e:96:34:33:40:a0:19:a2:73:54:2a:fe:0f:12:a8:e3:87:
         53:fc:56:c2:a6:80:a7:af:c0:46:ee:63:00:2a:d0:b8:ec:6a:
         b4:9e:33:a7:3c:43:18:45:50:a0:5a:31:7f:6e:84:8a:58:7e:
         8c:3a:d7:a6:bc:f4:99:9f:e0:b5:5b:b9:1f:b7:cd:d6:15:e6:
         d9:38:fe:0b:0d:fd:ef:c7:27:4f:32:8d:0d:d4:08:e0:85:8c:
         af:3d:06:08:e5:0a:1d:5f:db:bf:e4:21:d4:17:1b:e1:d0:15:
         e6:8c:42:f4:9f:cf:b7:b4:61:c9:f0:4f:a9:8f:2a:c8:ad:4d:
         82:7a:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:04 2026 by rpki-client