Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
File:                     a64918a4-9404-3759-bfe5-583ac62a247a.roa (raw, json)
Hash identifier:          H5l8kf4sfjKKTn+y7LmIGI/ntAkxKb4HpyqMJS9IOU4=
Subject key identifier:   B9:AE:72:F2:76:0E:3B:30:74:D3:11:A3:F7:CA:AB:D4:F3:5D:08:6C
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584E4AEF3CD16B4B120D928CF000
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     399810
IP address blocks:        64.29.137.0/24 maxlen: 24
                          2607:f3a0:a009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:3c:d1:6b:4b:12:0d:92:8c:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=d6126b3a-2676-4af9-8232-d7ab438059f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:72:3b:70:5c:0e:d5:8c:ab:95:1c:46:2a:
                    c7:e6:cb:df:76:f8:8c:7b:22:9a:e3:f1:a3:e7:c9:
                    d0:2f:3d:0b:51:b8:65:78:c5:02:c3:bc:69:51:a2:
                    1b:b0:f7:76:d0:1a:e3:2d:54:74:eb:d9:3e:f5:12:
                    9d:d2:06:48:67:6c:d9:72:08:47:7f:70:e3:c1:ce:
                    fc:bf:d7:80:7a:ad:29:b8:cb:43:c4:29:d8:9e:68:
                    d1:52:d4:11:50:a8:4b:17:d5:9e:96:ae:cd:99:19:
                    f6:20:17:32:aa:bc:36:e8:7c:57:ad:69:9f:76:c8:
                    0b:d2:e6:fa:a6:e3:2e:8b:ff:e2:4e:ea:5d:12:e5:
                    c8:2b:18:89:1d:73:6c:07:7a:99:42:5c:14:a3:bb:
                    cd:f7:c0:85:19:69:29:80:39:60:ff:96:0a:d1:04:
                    bc:db:fd:46:59:54:11:1a:75:97:79:15:b3:27:f3:
                    db:bd:e0:e6:2c:dd:d0:0b:9a:ba:95:56:54:75:79:
                    c8:58:48:26:01:55:fa:f7:90:cf:4c:28:82:05:65:
                    8a:1d:ea:69:0f:43:5a:6e:2c:a8:1f:d6:26:e0:ec:
                    c9:70:33:65:da:f0:6c:5a:07:0b:78:f4:32:41:23:
                    f8:f8:5b:22:4f:3a:1e:c7:e8:6c:c9:33:c1:e3:8d:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AE:72:F2:76:0E:3B:30:74:D3:11:A3:F7:CA:AB:D4:F3:5D:08:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.137.0/24
                IPv6:
                  2607:f3a0:a009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:0f:41:5b:8f:d1:c1:2f:09:17:93:68:ba:05:cd:9c:11:
         69:f0:8a:11:43:31:2b:79:81:38:15:bd:66:38:07:93:14:01:
         80:d2:76:88:50:09:cd:6a:e7:95:fb:16:53:35:a2:bc:31:e0:
         56:e3:aa:df:1e:d4:37:d2:b3:b1:8b:28:cf:bc:fc:25:c9:78:
         8a:52:cb:89:8f:38:e4:cd:c8:56:ed:2c:e1:8d:09:7a:df:fe:
         a0:31:2d:63:e6:13:ec:d2:8a:e9:c2:c2:fb:4b:d6:72:a2:7d:
         2a:d5:9b:69:7e:89:03:04:a3:22:49:06:5d:82:69:b0:64:a9:
         a7:6a:a4:63:39:01:3d:2b:b7:f7:31:98:11:9e:a4:cc:c9:55:
         06:cf:b0:d7:a6:63:4f:7b:5c:14:3d:d5:5e:51:42:72:89:8b:
         5b:92:06:08:b4:bb:5e:bf:63:13:69:d5:ab:fe:d9:8f:50:30:
         14:2c:9f:9e:cb:77:b8:86:d3:2d:38:b0:27:c4:fe:84:27:7c:
         60:d0:90:12:46:92:44:9e:11:59:f1:ae:4c:7f:f8:d5:c9:c6:
         82:ac:1d:f9:4f:e1:cc:00:3b:b1:6f:59:97:fc:52:bb:ef:67:
         12:82:8d:03:4f:bf:41:cb:34:95:41:e6:0c:dd:17:f5:49:a6:
         5c:05:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:50:05 2026 by rpki-client