Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
File:                     01b562f0-b1c7-3eae-99a1-f153b793addc.roa (raw, json)
Hash identifier:          kg7lbtjsV/kfuTtdGMMrNaTZ93olTr1MPAKomoHf41k=
Subject key identifier:   3C:74:8F:CE:11:77:4D:B1:13:03:0F:56:70:89:EA:8D:73:16:E5:5D
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584E6F3A39126EB0AF83F5153E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     13768
IP address blocks:        64.34.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:39:12:6e:b0:af:83:f5:15:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4d2959d9-2dc0-494d-951a-61a913b178f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:23:f9:3e:b1:67:62:d9:23:70:00:55:5f:
                    0b:9c:04:8b:3c:4e:b2:27:a6:60:fc:fa:04:1d:60:
                    56:88:a9:52:0d:cf:e5:b5:04:6f:3c:7e:b1:98:d9:
                    ff:f9:1b:55:a7:40:9f:22:fb:03:08:b1:d5:f4:ee:
                    be:0f:d8:47:e0:30:be:93:d9:fc:6e:ca:18:7e:38:
                    1f:32:3c:be:b9:8f:ac:98:b4:08:ab:19:74:3b:8b:
                    cb:a0:b4:61:1b:5d:22:c4:2a:e1:3b:c8:85:f1:9f:
                    d6:3a:98:fc:fe:9d:1b:00:14:4c:0e:3d:71:e4:4c:
                    f8:29:25:c1:ac:dd:5f:2b:b2:8b:79:a6:7c:14:93:
                    1d:12:23:bd:ad:55:8b:00:9a:a5:f8:30:e5:24:29:
                    b2:e5:98:e6:8a:5c:4d:a1:1e:b2:b5:18:07:1f:53:
                    ed:d1:2a:e4:d4:cd:1f:8c:9d:94:8e:d0:4e:d5:f1:
                    a0:f0:b2:6b:9c:85:0a:7f:0a:03:6c:c6:95:c4:b9:
                    ff:21:ed:6b:66:eb:15:be:71:ff:ac:7a:04:5e:5c:
                    3f:9e:51:b8:32:1d:e7:f4:b4:d8:66:f5:4d:73:a6:
                    a9:93:17:71:22:07:d0:ef:64:28:27:b5:fe:d7:1c:
                    47:77:ee:04:60:81:19:d6:60:06:14:c3:1f:56:6f:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:74:8F:CE:11:77:4D:B1:13:03:0F:56:70:89:EA:8D:73:16:E5:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e8:35:2f:63:d9:70:b2:74:55:ed:e5:b5:55:f3:24:c6:51:
         35:9d:36:24:41:c1:c5:f4:0f:8d:de:45:fa:19:2e:04:46:ae:
         f4:b3:0e:71:ee:9d:4d:a4:06:d9:1c:bb:fd:69:f5:93:2d:b2:
         26:58:e0:c6:d3:bb:e0:f3:c8:5c:dc:25:cf:d9:62:89:6d:1e:
         f0:2d:c9:9e:d2:e6:4e:23:24:14:c1:d7:13:66:8b:0d:78:79:
         1f:80:69:30:d8:71:7b:4b:66:85:23:04:b6:66:9f:3b:fb:c5:
         ae:e4:0f:e1:56:1e:76:90:70:0e:86:72:c9:3e:e6:3f:3f:d0:
         3b:36:68:01:75:50:76:20:b3:e7:43:0a:19:2b:56:62:ec:a3:
         5f:c1:9f:d3:a8:d3:55:6c:5a:9c:6c:9d:b6:8f:ed:01:3d:35:
         da:88:73:63:72:ca:27:bf:5d:66:f8:ac:33:da:ce:2f:5d:bb:
         17:74:8d:ab:d4:2d:45:04:2c:85:b7:4f:96:70:7e:6f:ac:78:
         95:9c:bd:33:ea:ac:11:d0:84:11:14:68:4b:87:48:38:90:f5:
         be:4e:50:5d:4b:1f:7f:3a:f0:20:d6:8d:66:67:19:90:3d:30:
         5d:36:2e:14:23:1a:16:6d:fd:cc:c9:88:d2:d8:dd:b8:a0:0a:
         1a:92:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:09:11 2026 by rpki-client