Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3ec70fbd-855b-35af-b959-30bf9db48b25.roa
File:                     3ec70fbd-855b-35af-b959-30bf9db48b25.roa (raw, json)
Hash identifier:          aPTD3Ba7T3qjKYMcnxpo/lPq2ezABHhzoxVySAQVflM=
Subject key identifier:   44:14:53:2C:0B:85:3E:68:12:E7:22:F2:AE:8A:A0:6C:4A:77:E1:77
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584EA787A7FB9826BA761A96B090
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3ec70fbd-855b-35af-b959-30bf9db48b25.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     812
IP address blocks:        64.119.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a7:fb:98:26:ba:76:1a:96:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b0ae6aa8-95cb-47a7-995d-c85974748c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:07:ff:f9:62:bb:1e:b0:a2:de:22:77:20:
                    5f:e5:a8:b6:34:d0:f0:56:ad:bc:62:0f:11:a9:48:
                    3d:9f:26:3a:30:79:c4:53:46:23:3e:35:06:0e:92:
                    bc:57:f8:18:b9:d3:41:0f:6b:e8:b6:0d:49:25:44:
                    1e:fc:38:b1:4a:5e:bd:2a:93:c8:f6:9f:02:60:6a:
                    c5:62:31:4f:89:72:2d:f8:95:85:68:73:83:8f:66:
                    b2:5e:d3:ed:bf:eb:b5:02:00:52:d3:a0:f6:6b:e6:
                    f2:cb:c5:ea:63:c8:4a:e8:66:53:d0:a7:be:d1:c5:
                    0e:67:07:62:c7:e6:6a:dc:e5:2a:39:27:8e:3e:77:
                    53:3a:10:17:e8:0d:71:87:aa:38:83:33:a5:5d:46:
                    58:94:44:6a:13:c3:76:38:04:fa:59:4c:80:13:66:
                    b2:97:b8:70:00:c7:79:21:fa:9a:ca:b0:20:59:92:
                    04:2f:98:5a:8f:6a:75:1b:6c:60:cd:4b:fd:68:c0:
                    83:2f:ed:82:f5:91:11:88:d6:20:79:6a:29:15:43:
                    e8:e1:4f:1d:2f:04:31:03:2a:9c:76:27:95:54:90:
                    a6:97:36:7c:54:e3:0a:5d:30:1d:71:35:03:65:1b:
                    7f:5f:f9:d1:84:dc:b0:cd:f3:e5:dd:34:60:71:f8:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:14:53:2C:0B:85:3E:68:12:E7:22:F2:AE:8A:A0:6C:4A:77:E1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/3ec70fbd-855b-35af-b959-30bf9db48b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:f5:0c:29:7a:af:39:67:45:b9:b7:cc:4d:c7:7e:0e:97:
         87:e6:12:32:f5:60:f1:17:8f:9b:aa:2f:44:f4:8e:7f:6b:d8:
         88:f5:07:9f:47:fd:06:5d:8d:ea:91:55:b6:09:f8:b8:a5:a3:
         5f:53:ab:e5:1f:d5:ec:f5:7f:b8:95:4c:1f:dc:01:3d:05:3e:
         21:04:82:67:72:b6:56:11:00:86:0f:1c:70:02:49:84:03:67:
         d1:0c:d6:bd:67:85:48:53:08:d9:94:37:51:73:49:30:17:03:
         63:0c:0f:cd:d1:b3:6f:88:9b:78:33:7d:68:a2:40:c3:7e:33:
         c3:e2:31:85:0a:d7:bc:d4:be:6d:03:e1:e8:3b:c0:33:1b:b2:
         a1:79:f6:a9:36:dc:85:e0:25:ad:2a:76:cd:e4:08:1f:b9:7a:
         ce:88:81:00:c6:32:3c:77:46:4e:27:34:b2:cd:83:a1:c5:7f:
         b9:31:87:18:6a:5b:dc:eb:1a:4b:da:50:4a:2b:de:ed:87:7c:
         50:2d:74:aa:25:42:59:14:70:4b:3f:f5:6c:bd:05:a5:a7:82:
         30:67:5e:5f:cf:df:a8:3f:6f:8d:ca:d6:a3:ac:0d:db:4c:2c:
         d7:d7:9a:53:42:52:95:ab:4e:fa:8f:d1:d2:c4:05:d1:bd:70:
         f9:78:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:45 2026 by rpki-client