Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa
File:                     0efa75e2-cd2b-36ec-81d8-1737411c5361.roa (raw, json)
Hash identifier:          rAry6Ir8nxXKiOjeV/iHArUkqNWbrJa/YPvYjpag+KM=
Subject key identifier:   4E:D8:E0:F0:C4:5B:68:C5:44:CA:53:F4:F9:3E:B9:A0:1D:19:BC:A9
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584EB8476D90F9D4FF48D183B700
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.136.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:6d:90:f9:d4:ff:48:d1:83:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=be71b600-6581-4ac2-b907-edc507322662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:3e:f1:81:aa:40:ae:6c:0d:f3:b8:3e:7e:
                    6a:b8:5e:b6:f3:b6:47:51:fa:c4:10:36:67:67:88:
                    e5:c1:8c:aa:6c:1d:d3:0e:9e:55:81:22:81:f6:bb:
                    60:86:ab:47:1a:64:4e:2f:f7:05:5d:cb:aa:f7:59:
                    f8:21:1e:6b:23:f2:08:74:cf:9b:cf:f6:de:82:01:
                    9e:be:85:3e:e0:97:fd:6d:a2:6d:fd:2f:a4:82:ba:
                    0f:cd:77:dc:bc:dd:35:2a:5a:bc:7e:98:3e:c2:0d:
                    dc:a7:90:10:63:e4:bf:4d:e7:d7:a5:43:2f:14:6a:
                    06:4a:90:14:fd:dd:4e:72:bc:64:76:a6:84:59:6a:
                    b2:fb:a6:af:8a:77:eb:d1:22:40:06:26:36:20:b8:
                    00:e1:12:8f:89:63:e1:07:f9:0a:d9:5a:55:33:00:
                    44:7c:47:49:f8:f6:82:66:5b:49:fc:b2:40:80:33:
                    21:c2:ef:a0:6e:f5:eb:fd:46:5b:90:53:c2:b2:dc:
                    06:fd:90:6d:8c:50:92:a2:30:28:8c:12:58:07:57:
                    0b:0a:ae:51:62:c9:11:98:bb:25:69:9e:d3:e5:fd:
                    a4:46:f4:c5:ea:26:31:44:8f:ba:98:f2:7d:43:27:
                    a9:b7:af:91:94:74:41:51:5b:b7:f1:1d:c8:da:e8:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D8:E0:F0:C4:5B:68:C5:44:CA:53:F4:F9:3E:B9:A0:1D:19:BC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0efa75e2-cd2b-36ec-81d8-1737411c5361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:39:7c:44:e8:46:63:94:3e:be:2f:6c:ce:6f:f6:58:45:
         88:48:7f:0f:15:ce:a8:5a:86:0a:f0:bf:8a:4d:d7:6c:0a:61:
         b4:d7:f0:85:29:79:4b:25:2f:db:12:ee:51:06:16:40:cd:44:
         49:d5:af:0c:67:62:df:e2:fc:75:bd:71:b7:83:36:92:87:e5:
         6c:e0:01:b8:61:b8:1a:bb:a8:7f:ee:56:ca:ea:a8:16:4c:df:
         f8:83:90:ba:c3:9e:9f:85:fd:a3:72:cc:40:ad:f7:e4:32:cb:
         c3:87:bd:26:c7:d0:ef:e7:be:79:5e:ec:69:06:84:43:19:65:
         41:d0:6d:14:cc:5c:4a:00:30:ee:cc:fa:22:4b:a2:da:00:78:
         01:12:39:fd:40:70:31:5d:92:7e:42:d0:62:3d:c0:a4:1c:36:
         1f:44:bc:27:c8:68:54:1b:5f:d0:7d:fc:00:d8:13:6f:02:9c:
         17:f3:e1:2f:27:ab:48:6b:ea:c8:58:b0:91:2b:63:f3:86:42:
         ad:6f:bf:db:a2:8c:3d:92:66:ca:57:8c:12:eb:39:2a:0b:10:
         5b:5d:84:a3:50:30:24:8c:e8:96:a6:cb:8a:2c:c8:f1:ca:30:
         4a:43:19:f4:98:c6:df:46:41:fb:79:41:1d:36:21:53:76:38:
         83:14:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:29 2026 by rpki-client