Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/473470cc-3113-3cbd-b25f-49b8c9c6957b.roa
File:                     473470cc-3113-3cbd-b25f-49b8c9c6957b.roa (raw, json)
Hash identifier:          Y7m5Q9cSRLku7lm/W+Y+gkhumfRmXcOXHtAFtY7gKdU=
Subject key identifier:   64:B0:7A:8E:49:2E:5B:8D:89:FC:EE:0F:72:96:71:3C:65:BC:69:26
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584EA787F56056F53A1E43BA6F00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/473470cc-3113-3cbd-b25f-49b8c9c6957b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27176
IP address blocks:        64.40.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f5:60:56:f5:3a:1e:43:ba:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ec1bf3d3-3176-4825-945d-9e60ac816d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:40:c1:bc:f7:fb:6d:d9:d9:c2:e4:90:06:
                    89:29:0b:62:a6:73:47:68:45:3d:08:b8:8b:a6:4b:
                    3e:39:97:1d:04:e1:2b:65:3d:f1:ee:9a:8a:b5:3d:
                    30:c3:81:7b:87:9d:79:27:05:1f:97:e5:e0:9f:d6:
                    78:96:b2:79:1d:1d:1b:b9:8e:bb:08:c0:af:ce:f5:
                    db:9b:e4:c8:b1:1e:ba:25:20:76:7b:b4:84:9a:16:
                    0b:13:61:d0:ad:85:29:98:34:61:5c:2c:62:b6:d6:
                    88:d0:c0:3f:ef:3a:db:b7:41:b3:ce:14:6c:69:d4:
                    e1:01:db:db:c8:a4:08:6f:b5:b3:90:32:ba:77:79:
                    ba:47:31:5c:46:ae:46:34:45:e8:96:c9:2f:a3:32:
                    2f:a0:e7:f5:5b:4c:c2:1f:a1:84:72:65:0e:6b:de:
                    d8:8a:04:e1:7c:49:e3:68:26:4e:88:f1:56:c5:7f:
                    fe:53:be:ba:49:18:b5:49:4a:db:3a:73:47:f2:a3:
                    9c:ac:91:e7:be:c3:fb:e7:5a:59:51:66:ba:9b:e0:
                    30:74:d1:41:b8:27:89:41:87:8c:cc:ce:f4:e2:8d:
                    1e:44:f7:9a:cf:9c:48:cb:fc:46:1a:08:39:34:d0:
                    41:fc:0a:b9:54:24:8a:3f:55:b5:51:f9:05:79:55:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B0:7A:8E:49:2E:5B:8D:89:FC:EE:0F:72:96:71:3C:65:BC:69:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/473470cc-3113-3cbd-b25f-49b8c9c6957b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:79:46:75:1b:17:9e:ec:02:26:d1:87:2d:66:b2:49:7c:e4:
         31:36:ff:fa:a5:71:2e:8b:0a:62:32:ab:f0:a9:c4:9c:b7:96:
         8b:c1:3f:38:d1:01:9d:24:77:65:90:e7:67:20:0a:ac:30:ec:
         32:97:22:79:5f:b2:3d:f8:7d:f8:9a:63:de:a6:eb:16:0c:d4:
         41:bd:c7:41:95:82:48:ce:71:b8:8b:ee:8b:dd:33:6a:96:d9:
         8f:7f:ff:2c:93:62:fb:5b:61:b8:72:ea:e1:2d:d0:36:bd:40:
         16:15:f2:e1:a6:26:2f:4a:5b:02:2c:c6:e2:a7:d6:ad:c5:94:
         20:b9:93:5c:36:cf:18:42:61:09:ae:0b:ff:79:3b:a8:01:ca:
         7e:d9:a6:2d:c1:c9:fa:41:65:a0:2f:2a:d0:a9:4b:93:db:ea:
         44:76:d4:cf:02:f4:d4:c9:51:6d:04:7b:d6:d7:20:3d:f2:05:
         6e:0f:0c:64:4c:95:31:dd:33:07:35:7b:ff:1c:53:37:3a:0e:
         d8:16:a3:fe:f4:1f:82:25:89:a8:3d:ef:0d:0d:07:dd:c4:7b:
         ce:b5:1e:b4:ec:5b:24:a9:4d:b5:5a:02:64:c1:a5:68:2f:51:
         0e:de:96:15:14:0f:3a:69:6e:6a:02:72:6f:34:e8:32:81:70:
         f6:f1:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:43:26 2026 by rpki-client