Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b28309d1-1c31-3013-a7cf-0d32d2408c34.roa
File:                     b28309d1-1c31-3013-a7cf-0d32d2408c34.roa (raw, json)
Hash identifier:          +cGo9cojQzu5dODZWHgB7WxHSSPzPyn4PzP0ldrv8RQ=
Subject key identifier:   7B:B6:D1:0C:6B:10:37:52:B1:E2:78:CE:0D:0B:D9:1A:CB:EF:71:87
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F4328584EBD30935593288C9BF26574C8
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b28309d1-1c31-3013-a7cf-0d32d2408c34.roa
Signing time:             Wed 05 Aug 2026 19:14:10 +0000
ROA not before:           Wed 05 Aug 2026 19:14:10 +0000
ROA not after:            Tue 03 Nov 2026 20:14:10 +0000
asID:                     395394
IP address blocks:        64.184.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:30:93:55:93:28:8c:9b:f2:65:74:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Aug  5 19:14:10 2026 GMT
            Not After : Nov  3 20:14:10 2026 GMT
        Subject: CN=79b93633-3585-42da-bbf1-e6275acff15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:35:a9:89:a7:29:99:fe:ce:37:21:76:5b:
                    e4:b4:9c:c9:82:19:56:1d:61:09:21:c2:2e:fc:12:
                    1f:17:c9:33:53:48:cb:64:df:7b:1a:2e:c2:ce:a4:
                    32:b0:f4:b0:62:1c:54:68:a0:6e:f0:b4:74:36:be:
                    44:58:cb:f4:fb:dc:8c:9b:14:30:26:1f:c8:c5:b8:
                    4d:9f:c3:41:67:97:62:9e:5d:a4:82:c6:26:0f:9b:
                    47:66:27:7e:08:4a:37:4b:7a:60:17:9f:14:32:e0:
                    11:da:6e:65:4e:b0:78:5c:61:1f:92:6e:ab:3d:a8:
                    8e:40:27:41:2b:b9:23:b5:0d:45:3d:15:c3:86:e7:
                    6b:1c:bb:48:9a:35:5c:c7:3a:54:c8:d2:0b:69:20:
                    45:0e:32:ff:3f:90:4e:a2:db:42:9b:55:cd:b7:8b:
                    6c:e2:72:99:5d:12:1c:b6:83:39:5a:4c:fc:00:24:
                    b6:b8:ca:f6:d5:97:97:7b:d9:7c:60:ae:09:21:08:
                    41:93:3f:72:3c:e0:56:c2:8e:73:7b:c8:8a:98:2a:
                    2a:62:c2:25:67:06:87:20:4c:b3:19:2f:b1:db:79:
                    78:48:3c:fe:21:8d:7e:e0:c5:98:dd:2c:ff:5f:3e:
                    a5:2a:ed:40:d8:60:1e:ed:64:92:98:27:35:2a:7e:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:D1:0C:6B:10:37:52:B1:E2:78:CE:0D:0B:D9:1A:CB:EF:71:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/b28309d1-1c31-3013-a7cf-0d32d2408c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:6c:2e:f5:8a:6a:b4:4b:80:cf:e4:b9:d1:c7:36:69:ae:
         80:89:55:95:7c:a3:84:75:bb:b4:6e:8f:11:f4:1d:55:a5:64:
         21:8b:a3:2f:b6:8f:62:81:29:5f:56:f8:e6:e2:55:1b:c7:ef:
         e0:85:31:f7:7c:3d:c9:5a:3e:0a:8e:13:71:0e:92:a2:4b:49:
         01:15:d0:a5:c7:ca:f6:d0:50:c9:ec:d2:40:04:6c:13:36:26:
         19:38:1a:e4:44:3a:3b:64:12:52:62:c8:93:9d:47:96:94:cb:
         5a:5d:b5:08:c1:04:d0:ec:bc:f8:e8:b8:29:90:5e:83:76:28:
         51:2e:f0:34:4c:74:56:62:b7:2e:a3:81:79:dc:95:46:9a:a6:
         55:1b:f0:c5:cb:67:91:8b:95:41:54:2c:3c:b6:cb:65:bd:25:
         bf:40:86:9b:23:e8:4e:c2:81:78:73:6a:fa:c6:96:9a:5b:00:
         68:11:89:13:a0:68:fe:af:ea:ff:2f:b8:9b:a1:f7:18:e0:5e:
         da:ed:e4:36:c8:f8:98:e8:36:b1:93:01:e7:28:97:88:f2:6f:
         01:f8:64:7b:e8:5c:a8:ef:62:17:f2:d8:91:ae:c1:9d:42:ee:
         6a:02:60:14:e3:cd:b0:aa:d7:64:36:33:27:63:9b:e0:7d:f2:
         c0:b5:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:52:14 2026 by rpki-client