Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e324814e-cbca-3e7c-b35f-192443ec9670.roa
File:                     e324814e-cbca-3e7c-b35f-192443ec9670.roa (raw, json)
Hash identifier:          qCwbtPgrSyN/CYDeECsoJWl3dL4VW+2RM5POxiYxhz4=
Subject key identifier:   8D:55:3F:8D:C6:E6:DB:E1:A5:6B:3A:49:4E:47:9E:1E:7A:78:BA:7A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EAA51C1FABA1F562FA2C23A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e324814e-cbca-3e7c-b35f-192443ec9670.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        64.9.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:c1:fa:ba:1f:56:2f:a2:c2:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=ab5c8851-ded7-42fc-8a7b-c0448aa17903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:1b:bb:6d:46:f7:4d:bd:5e:e3:b6:8d:83:
                    94:bf:61:34:17:7c:33:14:aa:cd:f3:5c:c9:91:11:
                    bf:dc:d7:1c:32:81:23:98:d6:77:b8:48:48:c8:c8:
                    ac:fb:31:9f:2f:1a:a7:d8:8f:6e:2a:9c:51:19:89:
                    f3:88:57:c3:c1:c3:6d:57:26:01:9e:b7:8d:89:68:
                    11:ce:f1:e2:55:88:11:95:25:e7:20:ad:65:93:73:
                    7f:99:fd:df:58:c6:c6:10:f1:66:11:d8:85:36:f2:
                    ff:16:1e:bf:e1:c9:ee:b9:94:77:25:65:31:9f:9b:
                    ce:16:60:13:04:8e:5a:16:88:04:74:08:d3:81:73:
                    57:c7:fb:18:3b:28:d7:fa:d6:12:97:54:37:1e:88:
                    2c:bb:7c:9d:ea:1b:fb:49:e1:4e:c1:29:69:5b:e7:
                    85:99:43:58:83:42:99:a0:7b:76:b2:12:31:6c:38:
                    22:df:d8:e8:b6:96:00:99:b7:26:c0:68:34:f0:3e:
                    c8:51:11:a0:18:74:7b:a5:96:c1:84:a9:9c:47:a5:
                    1f:83:00:c2:f4:6f:30:5e:94:b8:fd:6d:fc:f2:1c:
                    07:1c:5d:24:b3:40:3c:ac:d3:a2:d0:47:88:a3:cb:
                    7c:ad:e4:2d:ba:28:53:83:67:9f:f2:c4:65:6d:93:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:3F:8D:C6:E6:DB:E1:A5:6B:3A:49:4E:47:9E:1E:7A:78:BA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e324814e-cbca-3e7c-b35f-192443ec9670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:b0:f3:77:30:77:b8:4e:28:f8:85:0e:d8:c8:8a:ee:ae:
         83:30:c1:f4:d9:56:83:4b:2c:36:d4:5f:13:61:b4:98:80:bd:
         96:a6:37:8d:55:c8:61:de:77:76:63:72:15:39:e6:92:c3:bf:
         38:f4:b6:8c:c5:78:9d:58:e8:b1:11:53:f5:05:d6:2f:e1:fb:
         e5:a2:47:41:8d:8e:41:07:de:05:ab:f8:22:a7:d5:38:cb:5b:
         21:13:d1:e3:f4:b0:c1:70:26:3f:48:5c:2d:cd:00:e1:ae:80:
         aa:d5:e5:a2:08:91:54:2d:18:a4:6b:48:cc:0c:f2:15:2e:87:
         a7:2d:17:78:6f:5e:38:62:e5:77:b4:b4:b8:d3:47:a7:ca:22:
         21:95:16:2d:fb:ca:d1:7a:72:c3:22:37:c4:4d:fc:b2:45:a0:
         3e:36:95:17:7a:31:7e:12:47:a1:7b:3f:34:bb:2c:23:14:98:
         39:16:74:f6:96:1b:9a:5f:f7:0d:81:c2:70:af:db:cd:cb:39:
         03:56:81:ac:a6:71:a1:dd:35:e8:09:da:c4:d6:fd:6b:01:69:
         94:1f:99:34:61:d2:38:9e:ef:4f:1a:67:10:e7:2e:70:35:e2:
         81:05:de:26:7e:f0:1f:55:73:8d:c8:1f:14:95:80:6c:43:4b:
         1f:05:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:22 2026 by rpki-client