Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c43a7581-185f-308e-8e36-cba162ef6088.roa
File:                     c43a7581-185f-308e-8e36-cba162ef6088.roa (raw, json)
Hash identifier:          ziUO6YKY9Rd9W0qhnVfvnWPPJJE5SU7LCcqohRxcT80=
Subject key identifier:   0B:7E:E4:B4:18:D8:FF:05:22:77:26:BE:80:57:2C:BF:A9:C6:87:2B
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584E71FB99607E4365223C3CB680
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c43a7581-185f-308e-8e36-cba162ef6088.roa
Signing time:             Thu 09 Jul 2026 20:41:48 +0000
ROA not before:           Thu 09 Jul 2026 20:41:48 +0000
ROA not after:            Wed 07 Oct 2026 20:41:48 +0000
asID:                     11696
IP address blocks:        64.190.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:71:fb:99:60:7e:43:65:22:3c:3c:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Jul  9 20:41:48 2026 GMT
            Not After : Oct  7 20:41:48 2026 GMT
        Subject: CN=9885ec2a-9465-4734-9ed4-6c733728c1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:aa:eb:0e:ea:18:23:84:87:82:c9:b4:f7:
                    30:59:76:c2:d2:db:52:bf:fb:8d:dc:cf:f6:71:86:
                    61:27:27:c9:9a:54:da:46:9e:1e:11:df:58:71:39:
                    3f:00:0d:75:55:22:ee:63:81:f1:74:eb:03:ab:bc:
                    c8:d7:9e:91:9b:1b:4b:27:bd:03:26:15:41:b7:f5:
                    16:a7:20:af:a8:3f:12:43:c0:4e:d6:0b:02:fe:c3:
                    c3:17:a9:38:dd:cb:b8:9e:84:b2:18:5e:d8:e5:3d:
                    8d:aa:a5:fe:68:40:2b:a1:41:19:33:9a:ae:16:95:
                    55:34:7f:38:5f:f2:fa:71:b2:1e:67:62:21:23:6a:
                    5d:54:d5:36:c4:3f:ca:3d:52:7b:bc:88:e7:62:90:
                    19:67:79:a9:44:5d:18:2d:22:e3:9b:df:10:ef:ac:
                    11:ab:45:ab:3c:e8:d4:b7:1c:6b:c5:29:37:74:bc:
                    fa:70:1f:61:5a:34:45:3a:f3:52:06:c8:25:0a:54:
                    52:e8:9e:c2:d0:20:bd:92:f8:29:e2:87:1d:0a:a5:
                    22:f8:aa:0a:73:f0:c8:a1:9a:c5:33:69:54:3f:de:
                    d3:e4:de:94:c9:ce:c9:78:c9:91:fe:ab:d7:f0:ba:
                    5e:20:4f:70:34:1c:8f:ac:b8:dd:a8:63:2c:7f:31:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7E:E4:B4:18:D8:FF:05:22:77:26:BE:80:57:2C:BF:A9:C6:87:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c43a7581-185f-308e-8e36-cba162ef6088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:ed:d6:07:63:3c:23:de:89:77:6f:2d:ed:97:20:0f:14:
         44:eb:77:10:5f:38:34:d8:be:93:8b:25:6b:79:b6:27:60:98:
         8a:a6:62:08:b4:78:eb:c0:b8:94:e3:d7:90:78:87:12:d8:f3:
         34:e3:0b:7f:89:76:f8:22:d9:db:c9:5b:bf:43:04:c5:b0:00:
         c7:dd:bd:e0:ca:2f:97:fb:fa:08:9f:38:70:6a:12:fb:9d:0c:
         c0:c4:d2:1c:a3:f1:44:99:c0:7c:93:60:12:50:3b:c7:fb:09:
         82:51:f7:8a:a3:c2:a5:ea:d7:15:1a:f3:82:09:5b:e9:0d:82:
         27:1e:11:02:48:b2:ce:5c:53:d3:e5:cc:d7:df:44:e6:c0:80:
         d1:f4:6d:cc:8c:95:1c:e5:7e:02:b3:fe:82:c0:16:5c:c1:6b:
         9c:14:69:d5:c1:cd:86:4a:a8:29:93:1b:34:59:9c:60:79:a3:
         a3:15:df:46:b5:5b:db:4b:da:0d:2f:26:39:34:fa:0d:b6:b3:
         31:8d:d6:3c:10:7d:39:e9:bb:64:81:18:ec:09:50:74:04:f0:
         7a:29:63:8a:20:b3:66:3c:3b:d4:29:5f:ee:5d:ab:8f:12:e9:
         32:ce:38:46:8a:6f:2c:45:c2:a3:8b:d4:22:9d:67:b3:d3:87:
         4a:14:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:50 2026 by rpki-client