Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f0e20729-4cb3-3023-b794-9e8d9bc9d86f.roa
File:                     f0e20729-4cb3-3023-b794-9e8d9bc9d86f.roa (raw, json)
Hash identifier:          OF+pG1mEl2MWgd3MnzH2l9/x6CCrgz+AA3zYHJdDblM=
Subject key identifier:   6C:D1:D3:DE:D7:47:D6:B8:12:68:6D:BE:82:64:11:5A:B6:34:94:6A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E5D14AB2436A1A3129751EF80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f0e20729-4cb3-3023-b794-9e8d9bc9d86f.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     21704
IP address blocks:        64.125.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:ab:24:36:a1:a3:12:97:51:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=6f71fbdd-f689-47fe-bf85-e4a015077376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:f6:a4:ea:d2:04:ba:77:8b:fa:81:c8:79:
                    b2:d3:a8:f4:fc:f1:ee:7a:e2:7f:6d:40:35:0f:fe:
                    0a:e1:5f:cd:f0:b4:b3:13:1e:1c:19:09:d7:ab:e4:
                    48:f7:e0:d4:e7:6d:fb:be:df:ff:8e:b3:22:2b:9b:
                    8a:87:f6:d0:2d:c7:10:f3:af:2d:48:97:97:d7:35:
                    ed:c3:32:6d:0d:a7:bc:88:d1:23:dd:6c:50:b2:4e:
                    fc:4b:46:5f:24:d1:89:b5:9a:13:0d:69:09:08:30:
                    a2:6f:76:07:bf:d8:fa:ee:77:4a:30:a8:27:44:49:
                    4c:5c:64:e7:d4:cd:13:55:15:f7:8e:56:f9:39:49:
                    90:01:03:7b:ff:af:f9:5d:2e:17:7c:c3:c3:27:81:
                    e6:8a:b0:3e:af:42:93:23:24:db:af:a3:a8:66:9a:
                    b8:83:09:61:1c:bc:48:14:bb:7a:fc:df:62:1b:f9:
                    b4:fc:bf:c2:09:89:2c:d2:2c:32:83:71:f3:58:39:
                    91:1e:5f:93:c1:91:12:ee:0a:7b:bc:dd:b5:b3:28:
                    40:72:65:cb:d2:5e:71:6b:3d:f9:9b:cd:56:9a:1a:
                    c3:c1:60:e6:12:10:2b:39:6e:c9:4b:b2:1f:7c:b3:
                    b0:2e:48:ec:df:9a:52:f5:15:a0:bd:b7:2c:59:58:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D1:D3:DE:D7:47:D6:B8:12:68:6D:BE:82:64:11:5A:B6:34:94:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f0e20729-4cb3-3023-b794-9e8d9bc9d86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:79:b0:f2:c5:ac:d0:1d:35:45:bb:25:1b:87:ef:b7:48:b4:
         8f:4d:73:e0:2a:f0:52:f4:58:09:01:9a:94:a2:f7:d8:71:24:
         04:ca:b8:ee:b4:f3:f3:e3:54:90:59:92:7d:84:6e:90:9e:53:
         b4:c9:e0:5c:b4:43:ce:d2:90:3b:15:b1:f3:5d:5a:35:2e:b6:
         79:6f:3a:3b:ed:be:82:e9:72:df:6e:84:ed:2f:33:0d:05:51:
         64:78:9a:79:9b:04:fd:97:dd:fe:7f:b7:e9:aa:7e:2b:7f:f3:
         82:26:53:11:f2:3e:f6:da:cd:ab:88:6f:0c:84:db:09:ca:62:
         32:a5:ce:0b:5a:f0:bb:5f:68:b8:2b:b7:e8:5d:b4:e1:ad:8c:
         7d:0a:9d:6b:f6:2d:37:85:9b:9a:6e:f0:3b:cb:07:d6:96:3c:
         23:41:d3:cb:8e:06:c5:d8:49:2d:7a:b8:b4:e0:8c:6e:d5:b0:
         86:b4:6e:50:fd:97:00:ec:8e:68:b4:63:ec:91:dd:0f:7e:0f:
         58:35:f1:eb:d7:68:87:22:4e:f9:da:82:89:f8:f1:42:d9:16:
         07:47:ba:93:de:dc:03:e0:71:e4:d4:17:3b:69:a1:87:fc:43:
         68:1b:5c:c2:50:23:ee:55:fd:47:d3:b6:43:e1:99:11:40:f2:
         07:cb:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:49:11 2026 by rpki-client