Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba/f90c659a-494d-3efc-84e4-c9118ec755aa.roa
File:                     f90c659a-494d-3efc-84e4-c9118ec755aa.roa (raw, json)
Hash identifier:          3cG9upPTSIEEhlWQ25pUVeJnloNNN4IqAaBmhqyc8Vc=
Subject key identifier:   91:4C:7A:E6:FC:C4:45:06:6E:7E:54:6B:7F:1C:0A:92:C8:28:2E:6C
Certificate issuer:       /CN=d7c5decc-dd20-44b0-8042-a51f2f88b6ba
Certificate serial:       010D0C9F4328584E809D96970F47D268A2A61140
Authority key identifier: 30:99:E6:5B:67:E5:D0:88:DE:AF:AC:3A:B3:52:6E:D9:C0:B2:74:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba/f90c659a-494d-3efc-84e4-c9118ec755aa.roa
Signing time:             Wed 15 Jul 2026 02:29:30 +0000
ROA not before:           Wed 15 Jul 2026 02:29:30 +0000
ROA not after:            Tue 13 Oct 2026 02:29:30 +0000
asID:                     31898
IP address blocks:        64.247.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba/d7c5decc-dd20-44b0-8042-a51f2f88b6ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba/d7c5decc-dd20-44b0-8042-a51f2f88b6ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:80:9d:96:97:0f:47:d2:68:a2:a6:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5decc-dd20-44b0-8042-a51f2f88b6ba
        Validity
            Not Before: Jul 15 02:29:30 2026 GMT
            Not After : Oct 13 02:29:30 2026 GMT
        Subject: CN=b4842e00-bbf5-4761-b23a-90d0c7098eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:63:2e:05:85:94:71:f7:0c:64:1a:4a:b2:
                    06:f3:ed:72:45:d8:76:56:bf:e0:96:04:d1:0d:8b:
                    49:d6:bc:3a:21:cc:18:2b:1e:5e:a7:3e:b3:61:33:
                    27:67:de:2a:eb:83:f7:fa:e3:cb:b9:1d:34:b3:3d:
                    1b:01:dd:d5:cd:f2:22:d0:34:96:df:27:50:68:99:
                    c0:87:c7:ab:7a:b4:2e:19:2e:b6:37:c4:42:41:44:
                    0a:3f:4d:5d:07:1b:26:03:54:49:c4:e8:c1:06:e3:
                    3f:27:03:47:d2:73:d5:d0:46:94:78:7b:34:0e:bd:
                    35:a0:5a:9f:27:d5:ea:b7:8c:ec:69:fb:f2:a0:23:
                    20:28:d6:56:66:0d:1e:c3:90:ae:d6:51:31:fe:85:
                    2e:e2:2c:10:a0:ad:79:6f:f0:c4:e8:9b:b1:2e:88:
                    90:40:bf:b7:d7:86:5f:9b:07:7f:66:74:aa:85:d0:
                    e1:8a:95:52:bf:f5:e4:f0:69:f3:74:93:90:af:60:
                    fd:68:db:8d:bc:6f:52:fa:70:44:b6:d5:5d:9d:28:
                    4e:64:4c:e8:df:9f:f1:85:cd:21:a1:a6:f3:6c:98:
                    28:33:10:ca:ed:09:58:49:72:96:c9:02:e2:0a:1f:
                    fd:5d:05:b6:79:65:9d:29:c2:cc:6d:fd:74:93:b4:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4C:7A:E6:FC:C4:45:06:6E:7E:54:6B:7F:1C:0A:92:C8:28:2E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba/f90c659a-494d-3efc-84e4-c9118ec755aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba/d7c5decc-dd20-44b0-8042-a51f2f88b6ba.crl

            X509v3 Authority Key Identifier:
                keyid:30:99:E6:5B:67:E5:D0:88:DE:AF:AC:3A:B3:52:6E:D9:C0:B2:74:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d7c5decc-dd20-44b0-8042-a51f2f88b6ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.247.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:c0:07:31:db:a6:54:18:a1:5e:3e:cc:6a:e3:77:db:fa:77:
         83:fc:73:c1:96:08:11:7a:a2:2f:37:01:4b:02:0e:85:ad:de:
         a1:98:4e:65:8e:a7:46:55:95:32:c0:ad:e7:81:38:95:cb:04:
         03:e4:06:4c:a4:ea:19:09:01:4d:92:ec:eb:d8:1e:9b:77:79:
         c5:c1:e8:66:b4:b7:de:d2:88:7e:b6:0b:70:c8:9b:22:ea:da:
         0b:9c:f3:00:2f:c0:99:01:49:b2:9c:ff:e1:fc:f4:9e:4c:50:
         1c:3b:d2:d3:dc:40:ba:1f:1c:96:62:8e:e0:f4:62:b4:3a:00:
         10:18:a0:ee:be:07:72:b6:f9:59:75:76:e6:29:66:1f:e4:2f:
         99:30:97:94:1c:f8:1d:c3:e9:4b:ac:fa:ac:e7:17:a3:44:d5:
         5c:e6:c1:c6:49:24:d0:ef:3a:dc:4a:7a:f8:06:23:30:43:46:
         28:0a:a6:76:52:e5:00:5e:87:38:66:a5:b6:ac:71:3c:e5:bb:
         08:b6:2b:3d:3e:9c:2d:f7:cc:69:2d:36:27:db:40:ab:8c:80:
         0b:0e:65:7f:47:e3:7a:8e:0f:71:b1:e5:9b:7a:f6:e0:28:f1:
         b0:ae:6c:b4:5c:c7:b7:73:7c:2e:41:04:b4:66:9b:38:69:cb:
         29:0a:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:02 2026 by rpki-client