Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/bcd123dd-93ce-392d-a704-25004bdd6c55.roa
File:                     bcd123dd-93ce-392d-a704-25004bdd6c55.roa (raw, json)
Hash identifier:          zQYyt3NmBx1Y9bjLbT4gwyHgw9S6BsKlkk6wSnf+47M=
Subject key identifier:   00:D2:A8:FE:62:EA:81:F1:33:A3:0D:9A:71:42:EA:48:5F:61:74:F5
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F4328584E2D9F120620C577FD65B0B600
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/bcd123dd-93ce-392d-a704-25004bdd6c55.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        64.35.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:12:06:20:c5:77:fd:65:b0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=2339419d-5de3-4111-92f3-bbb4f5fb8c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:d0:02:06:57:e3:2d:fa:4b:1f:4c:8c:22:
                    50:84:26:c6:39:36:90:58:9a:ea:c0:89:10:77:2a:
                    bf:85:82:d6:1a:22:17:46:6d:52:df:b4:30:15:66:
                    74:5c:69:07:28:79:20:10:6d:68:ba:05:a6:5c:e9:
                    b1:56:6f:41:91:37:85:42:f5:01:96:53:4b:26:cb:
                    ec:1b:b4:dc:ff:38:38:54:a8:54:35:1e:3c:d2:80:
                    cf:49:5a:3c:59:7a:4b:7f:e9:8b:23:bf:e4:e5:30:
                    7c:69:e8:fc:ce:b9:97:19:e3:fb:8b:5f:40:8f:a2:
                    34:e1:a0:7d:eb:90:41:14:3a:c5:8d:2d:60:12:99:
                    47:4a:d3:14:51:fc:fe:cf:75:4f:05:72:3a:01:23:
                    44:be:b7:7e:f4:a8:c7:a5:08:9d:2b:68:81:26:b9:
                    0a:0c:ce:ab:b5:45:59:31:6d:2c:31:97:62:d9:49:
                    32:a7:f9:e7:3b:23:c8:69:a8:99:9b:9a:41:63:2b:
                    5f:73:09:6c:13:44:05:8d:7f:2a:46:17:97:0b:64:
                    ea:53:ec:30:88:b5:af:27:c4:64:f0:94:44:d2:ab:
                    ea:c5:66:09:e8:a5:11:4f:b0:f5:d6:aa:e5:cf:df:
                    43:f4:ed:e2:05:ad:0f:42:dd:d6:dc:f1:cd:de:3d:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D2:A8:FE:62:EA:81:F1:33:A3:0D:9A:71:42:EA:48:5F:61:74:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/bcd123dd-93ce-392d-a704-25004bdd6c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e9:6e:cf:67:be:c8:66:3a:6e:07:25:d2:95:db:a9:21:8b:
         c5:21:9e:31:8e:94:86:13:9f:5e:c5:af:42:d8:62:b0:9d:2c:
         71:f2:8e:04:6e:75:33:c2:f6:84:fc:85:51:10:19:76:bd:99:
         1b:3d:1c:1f:3e:79:b8:a3:4e:e0:2e:51:8f:5f:7a:90:07:eb:
         b0:4c:e1:73:a2:67:58:75:d2:88:ff:9b:00:d5:d8:a1:77:13:
         34:a3:13:09:5d:6e:f8:7f:ae:23:08:39:61:17:99:25:b3:32:
         95:3a:ed:de:38:1b:7d:69:21:34:49:bf:8e:0e:1d:47:a7:d0:
         fa:43:ed:1d:05:25:e9:de:83:31:64:97:5a:66:17:1a:3a:ac:
         6e:6b:7b:4e:1d:05:69:e3:c5:b6:5f:4c:d7:13:e3:be:73:b6:
         a3:eb:6d:99:b8:7f:50:d9:c6:cf:62:33:43:dd:66:3d:7a:74:
         8e:1a:f3:bb:b8:5d:9c:25:a1:f7:46:80:79:1c:97:27:c1:70:
         6c:56:1d:8f:b3:38:46:66:34:72:f2:75:69:e2:c9:1f:96:8d:
         6f:21:c5:f3:d3:7a:0d:63:e5:8d:71:0e:a6:df:ac:29:87:46:
         53:fd:79:55:50:f2:57:38:2e:c6:ce:fc:74:58:fc:6e:04:d8:
         3e:dc:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:22:58 2026 by rpki-client