Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa
File:                     0d6b90d2-2492-3695-a106-a29303fe9cb3.roa (raw, json)
Hash identifier:          x+J0RNbwAIiy6QImkzMVNSlA4DwPKm3UdvR644t69Qc=
Subject key identifier:   70:AD:62:56:C0:09:FA:5B:F0:C6:DB:D2:1F:09:16:CA:B4:66:BC:CF
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F4328584ED001DF5A50A5B8E24FB92B00
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        64.35.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:df:5a:50:a5:b8:e2:4f:b9:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=dd4be5d6-a725-497f-8f71-1dd0803cc325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:62:99:0b:95:13:07:66:87:21:0c:22:ca:
                    0e:f1:b0:ce:62:68:e2:f8:91:ab:22:eb:54:eb:e4:
                    e3:2e:c9:72:f8:90:ea:6a:01:02:94:5c:1a:6d:f6:
                    25:66:5a:ac:79:67:a1:4c:ad:76:8f:cb:3a:57:bf:
                    79:04:55:89:e9:f9:33:cf:4a:93:72:3f:25:25:c5:
                    d4:86:e3:27:9b:0c:8f:c5:5e:7e:dd:bc:0c:49:d4:
                    1a:ac:32:b1:2d:fe:78:06:24:b1:d1:e5:0c:77:11:
                    8e:d4:1f:52:20:18:c5:f0:14:ba:3d:11:5e:59:b4:
                    a9:99:3f:f1:9a:1b:a5:04:c7:c6:87:02:bf:5c:71:
                    23:23:b8:66:58:3c:98:cb:53:e1:f3:69:3b:af:b8:
                    6f:3e:f8:89:9e:ff:5f:36:85:bf:c5:7b:15:a9:9e:
                    f0:3b:10:38:b3:a6:a3:41:05:06:16:61:6d:25:82:
                    a3:f7:bd:41:5f:86:dc:77:81:6c:c5:31:15:b7:5d:
                    0e:f2:fb:3b:41:aa:61:d9:4d:ae:ce:f1:55:4c:87:
                    87:cb:4d:f8:e8:ac:52:44:b8:c2:4e:44:8f:d1:0e:
                    4e:70:dd:60:a5:1b:03:e0:ec:f0:ab:84:e2:99:77:
                    48:2b:a5:b8:8a:0c:89:0a:cf:a2:aa:04:21:f8:a5:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AD:62:56:C0:09:FA:5B:F0:C6:DB:D2:1F:09:16:CA:B4:66:BC:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:b9:30:cd:10:49:26:e0:f1:ec:75:b5:a6:29:8e:8a:69:
         29:e2:01:ab:f8:c6:6a:b2:c3:99:2b:af:2d:da:33:d6:cd:4b:
         31:25:9a:ae:cd:f0:6d:20:20:f1:6b:6c:25:d8:66:e6:3b:89:
         36:56:c8:04:26:63:68:35:24:22:e7:d2:58:69:af:fa:9e:48:
         a9:d6:7a:99:0c:18:f8:31:99:e7:8a:f8:b6:35:b7:4d:0a:41:
         14:f6:aa:1a:93:81:a3:33:9d:9b:46:db:76:90:8c:f6:f9:a1:
         a8:9d:54:74:f1:73:18:e5:90:b5:dc:91:9f:3d:17:9f:11:18:
         02:ea:8d:91:a0:e3:dd:90:ae:d6:99:be:eb:9d:d9:19:6e:24:
         49:15:8f:8a:58:b0:88:a8:db:ba:84:b0:6c:05:8a:65:03:62:
         f6:f1:21:44:9e:dd:a3:59:db:d9:21:83:8e:22:6e:6c:0b:37:
         e6:0b:14:32:cf:61:dc:8e:83:93:25:25:3e:62:f0:60:4d:6d:
         63:f9:0b:81:94:1a:6c:ed:cb:a7:07:89:dc:88:cd:9c:45:d5:
         62:d0:9c:f2:14:49:70:c8:98:5e:ad:d9:2f:e4:79:6f:bc:13:
         d8:13:ab:ed:a1:60:3a:e2:e0:4b:c0:f2:30:90:4b:aa:be:bc:
         e4:5e:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:24 2026 by rpki-client