Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e1e42717-1bd4-397b-9416-50865a902ff2.roa
File:                     e1e42717-1bd4-397b-9416-50865a902ff2.roa (raw, json)
Hash identifier:          RLnBN5lVT1pvYpveNzmH/w5X/LQtjTL9eertQNcjcGY=
Subject key identifier:   3A:EE:0C:90:6A:90:C3:33:B9:80:F2:45:80:76:9A:94:3A:CF:4E:6F
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584EE7BC9EDF1F3D096D60FE2380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e1e42717-1bd4-397b-9416-50865a902ff2.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     61317
IP address blocks:        64.40.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9e:df:1f:3d:09:6d:60:fe:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=40c5bbc2-19e5-4e8b-982b-59a94126c57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:7a:21:1f:3d:67:78:5f:02:48:06:6e:1e:
                    c3:a6:69:81:67:c3:96:9e:fe:e1:bb:9c:eb:63:9f:
                    07:bb:9b:60:ae:f2:0c:0d:e2:da:18:b7:61:b3:00:
                    c5:c3:76:99:df:ba:55:a9:08:53:7c:0c:ae:ac:31:
                    27:f5:db:96:09:da:13:4a:c4:90:c5:41:5d:a4:0c:
                    5f:90:35:88:e3:bf:bc:3d:c6:b3:ff:d1:80:ca:20:
                    7f:a2:fb:23:af:2f:03:7e:bf:0f:35:25:67:88:03:
                    29:8f:80:72:7b:a3:7a:2a:0b:cc:c3:f7:71:8f:bd:
                    f8:40:75:8b:3a:ec:89:12:cf:b3:65:b3:00:a1:3c:
                    74:b6:37:91:50:ab:ab:d3:a7:98:dc:41:4d:e8:c3:
                    b5:f6:7b:d2:6d:b7:7b:32:e6:de:be:b5:7b:18:a4:
                    c3:3f:3e:03:24:81:53:58:af:af:10:b8:28:0e:cf:
                    e7:cb:05:fa:59:8a:80:93:26:9c:4b:82:61:16:30:
                    c8:5a:94:96:47:6c:5e:3d:7f:52:f6:29:86:16:e0:
                    fc:92:29:f9:cc:42:16:b8:50:00:5c:33:95:80:98:
                    bf:d5:ed:40:f7:37:c1:6b:62:9e:59:22:92:68:33:
                    c7:44:21:e9:d9:57:37:72:d7:45:96:0c:49:50:7e:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:0C:90:6A:90:C3:33:B9:80:F2:45:80:76:9A:94:3A:CF:4E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e1e42717-1bd4-397b-9416-50865a902ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:b3:bc:db:75:b4:cd:67:d5:e5:05:88:f9:01:86:63:ea:
         21:eb:57:55:7d:42:84:a9:84:8b:0f:93:53:18:8a:f7:ae:9b:
         30:b5:3e:e9:45:3a:47:b7:b6:d9:db:48:cc:40:67:db:47:95:
         52:78:e1:71:38:db:20:02:13:52:44:8a:2c:f1:d1:0e:ee:7a:
         e7:53:ee:cb:20:ba:68:c5:85:4f:cf:bf:1e:0c:e2:b1:24:37:
         93:e2:b0:4e:c7:13:0f:c5:5a:a6:c6:d1:be:b5:b1:a0:d9:f3:
         a9:e0:16:ad:bc:6c:4d:d1:59:3f:ff:43:9d:ad:e7:7c:35:90:
         24:12:61:63:bf:cb:6d:6f:90:ea:98:50:72:25:8f:ff:54:45:
         c0:53:49:8e:84:61:cb:54:00:93:72:98:76:fb:4d:68:63:a0:
         81:49:32:8b:09:7e:5d:c9:4a:06:9d:e1:1e:87:c6:c2:54:5e:
         89:be:e2:49:34:1e:3f:5e:5d:9d:54:71:99:6a:88:55:bc:e2:
         67:b1:eb:4c:73:4d:c8:ac:76:25:13:78:3c:c5:13:d0:3b:62:
         28:30:48:62:7c:43:ef:fc:11:9f:7a:1c:38:3c:77:19:a1:ad:
         99:db:11:2d:3c:a5:5a:05:ac:e2:49:f9:f4:36:24:57:34:a2:
         a0:51:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:33:22 2026 by rpki-client