Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa
File:                     7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa (raw, json)
Hash identifier:          3/osCagESGDThPuzfv4tSbio2lDwGSOxNQeXdfeC/T0=
Subject key identifier:   85:84:EF:D7:F3:5D:DD:39:83:DD:22:53:0A:A5:41:16:AA:F1:B1:1C
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA7886A4A4723454424FE1D80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        64.226.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6a:4a:47:23:45:44:24:fe:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eb90c12e-e185-4f20-84fc-2a55ab2ca360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:51:cc:da:92:0c:24:a6:aa:ce:1d:52:d9:
                    57:61:60:1b:e4:6e:9b:5d:f0:bb:18:e7:16:ce:23:
                    0a:aa:d3:42:06:52:1b:7b:31:cd:12:06:31:b3:a6:
                    0f:b4:36:64:6e:af:1c:97:7b:52:d5:14:b6:b5:0b:
                    10:dc:f8:ab:32:84:fd:7a:b4:56:d0:b7:0f:ff:49:
                    89:c5:ea:e9:03:b2:9c:68:c9:f4:67:bc:29:19:02:
                    45:41:a1:a2:31:84:b5:31:12:7f:d8:a0:e9:01:01:
                    59:cd:8e:80:4f:59:17:bf:a4:04:66:0d:e1:2d:b3:
                    db:2e:7c:0e:d2:05:1c:c7:ef:5f:12:00:e7:e9:5c:
                    88:0d:ec:d6:79:1b:b7:39:93:1a:f0:41:11:a3:f1:
                    e4:bb:71:2d:7e:d4:6f:82:1f:fb:a9:4e:dc:52:c1:
                    98:ff:f3:81:bc:1b:91:7b:10:89:f3:a6:4c:2b:2f:
                    30:b7:11:8e:ef:bb:24:36:89:c7:98:e1:af:a2:ed:
                    51:52:7b:83:ed:af:46:0d:a3:aa:01:41:11:e9:5b:
                    aa:ae:d6:53:cd:6c:e9:8d:6a:0f:b3:4a:4e:3d:bd:
                    82:b5:bb:5d:bf:e4:54:24:50:14:0c:64:58:5d:fa:
                    ef:6f:e3:2c:f8:d5:fe:0c:47:73:23:85:b0:47:2a:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:84:EF:D7:F3:5D:DD:39:83:DD:22:53:0A:A5:41:16:AA:F1:B1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:bd:71:ce:22:bb:08:e2:7d:e4:71:a4:70:8d:7d:42:9f:
         02:a4:22:87:de:09:e4:2e:f5:57:e3:bf:c3:e6:64:a7:ac:10:
         cd:48:f3:8d:91:28:01:da:57:0b:ed:f8:1f:96:dd:96:88:e8:
         77:a3:c2:a9:15:f5:c3:10:8f:a8:32:06:67:39:e7:fe:ad:11:
         f2:2d:64:45:87:3e:13:44:b7:13:3d:83:af:a2:eb:b4:5c:fc:
         bd:1e:49:9f:29:d0:27:4e:37:0d:b6:e6:67:10:73:e9:1d:63:
         92:59:dd:b8:3a:6f:0f:99:32:05:da:c6:36:f0:8b:d4:7f:ae:
         2c:08:b0:60:2e:87:88:67:6e:73:f8:fa:24:ac:20:b0:fd:79:
         3a:97:ef:0c:1c:a1:b0:48:ac:8b:c3:43:00:1d:de:81:cf:44:
         c5:88:bd:b1:8e:e2:16:f4:de:ae:65:ca:68:db:9e:42:2c:7a:
         ce:2e:88:58:02:42:c4:8c:db:a3:db:cf:66:96:8d:a3:a7:22:
         d6:e1:4e:e7:ff:45:3a:36:7e:56:b6:94:8f:e8:7d:04:85:2a:
         64:39:56:b7:42:21:7e:1c:27:0f:3a:39:0e:84:e0:7e:ed:22:
         c5:49:06:e1:e9:53:15:de:b5:8f:a2:a3:cd:fd:4d:5e:e0:06:
         51:a0:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 10:39:25 2026 by rpki-client