Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a40c1f8c-04c8-3112-82b1-ef36cd8a2ed9.roa
File:                     a40c1f8c-04c8-3112-82b1-ef36cd8a2ed9.roa (raw, json)
Hash identifier:          wMlbqG9U2FpnhzqE+O+7+u9TNbXRfnGcwVnjHeJBdLs=
Subject key identifier:   8E:78:C4:16:47:6F:40:DC:A8:2D:41:86:9C:3F:57:84:19:70:C0:4F
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA7886A3FFBED6913E21ED500
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a40c1f8c-04c8-3112-82b1-ef36cd8a2ed9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        64.226.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:6a:3f:fb:ed:69:13:e2:1e:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b97f80be-51c2-49b2-8738-36470c44847b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:d6:f5:d8:6f:6d:bd:c2:f3:7a:85:bb:ec:
                    57:70:35:3f:a1:cd:ac:49:f5:a9:d0:47:4d:4d:cf:
                    58:c2:6a:d8:11:c7:b9:64:ed:79:42:d5:cc:4e:33:
                    e3:50:32:ff:bd:93:28:51:9d:db:ea:c9:f9:e0:51:
                    1e:83:4a:a7:72:43:63:79:f4:b4:f8:e6:86:90:be:
                    56:ac:87:13:b6:9d:1d:b1:99:8e:e5:de:6e:39:22:
                    d2:84:37:37:ff:27:06:e6:50:47:6a:8e:32:88:85:
                    5d:57:cc:88:e7:ba:8a:f0:6f:b3:16:aa:8b:58:f1:
                    9a:9b:26:6a:d3:0e:24:1d:19:8e:59:94:44:1d:61:
                    c0:91:6b:24:04:d4:81:35:02:35:de:63:a0:1f:4a:
                    3e:2b:c7:e4:80:28:d9:8a:00:1a:c4:ed:ec:06:a6:
                    5b:62:e3:31:36:2b:7a:f4:e8:34:5e:49:d3:8e:5a:
                    6e:5c:16:d2:fd:95:4f:eb:12:5f:b8:1a:62:e2:d3:
                    79:78:29:05:6f:c3:73:9e:44:91:27:f7:44:33:c3:
                    46:3d:1d:c1:7e:05:2e:6e:38:98:92:f9:ac:af:f0:
                    ad:00:5a:8b:93:ba:26:c4:69:60:22:e0:88:65:d8:
                    e1:8b:f5:d2:5c:55:10:cb:b0:74:3a:23:4e:a0:d4:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:78:C4:16:47:6F:40:DC:A8:2D:41:86:9C:3F:57:84:19:70:C0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a40c1f8c-04c8-3112-82b1-ef36cd8a2ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:ac:51:23:63:0d:a4:01:37:f7:a7:c9:29:20:29:5c:6a:
         1e:de:83:b7:18:29:f1:0a:eb:fd:a7:ea:70:2a:08:51:c0:36:
         ae:dd:ee:ab:30:47:36:5a:c6:b7:ef:43:5c:b8:56:69:63:a8:
         af:53:ce:9b:a9:fb:e7:eb:4a:2a:c4:9a:cc:34:30:63:bd:0c:
         93:4b:00:33:48:d2:11:59:8c:e3:d6:4a:12:02:6d:9b:c3:1d:
         6d:d7:82:af:2b:18:00:ca:04:b5:08:73:cb:21:4f:d3:52:bc:
         f4:51:74:43:ee:8f:ea:60:c8:f5:a5:70:6d:08:d2:09:0f:1d:
         8a:2c:49:38:4b:fa:26:18:19:42:b3:4b:74:96:b6:37:58:56:
         da:5e:51:8d:75:54:e6:ab:64:2d:d8:1d:0a:ec:f8:f2:c5:bc:
         94:10:2b:3a:49:d7:94:e9:5c:1b:21:75:38:4b:8f:87:31:7a:
         19:52:4c:f9:40:63:8d:97:fc:12:e2:b6:86:d1:5c:2f:4c:61:
         37:b3:51:4f:64:de:7a:ab:72:1b:0a:a6:ba:ad:1f:87:57:9e:
         7f:8c:d9:cf:af:a2:3c:03:4f:f4:f0:95:48:ce:49:20:3d:1f:
         4c:81:06:f8:da:0d:3b:30:2a:b8:e3:05:12:c7:e1:f0:ca:ff:
         60:71:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 10:39:25 2026 by rpki-client