Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          PV/danS37iHJrJRUndsB9ugF2QiiqMX2sHaxvrbH0oA=
Subject key identifier:   E3:29:99:FE:88:59:A0:FB:54:C7:9E:F6:0C:74:C7:BD:94:89:EB:E3
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F4328584EE0C1EBAC905776DE48458F00
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:eb:ac:90:57:76:de:48:45:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=451f158d-d06e-4387-bd2f-aa91e9511037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:7a:59:5f:ab:7c:20:92:64:00:ba:88:3d:
                    28:fd:9e:dc:73:d4:90:5a:94:d5:cb:71:6b:69:0d:
                    dd:e8:c4:d1:80:d7:f5:5a:dd:ff:19:e0:9c:9a:bc:
                    aa:ca:79:e8:75:e4:ec:69:47:1e:c7:42:d3:72:a8:
                    42:82:5e:c6:f4:57:61:3d:71:0d:33:8b:97:e1:d8:
                    61:36:2b:95:c1:ab:bd:3c:83:a3:50:51:b4:4c:54:
                    12:cc:52:5f:22:1d:16:23:91:07:3c:d0:c8:a3:69:
                    3e:e4:cf:0f:61:ad:67:be:a4:d1:09:90:3a:84:b3:
                    0c:ae:9a:0c:7b:32:2a:de:8e:a5:1a:66:83:cd:18:
                    e6:b7:cf:31:e5:21:8a:bf:cd:92:cc:ce:8a:1b:f6:
                    50:e1:4d:00:55:23:79:ae:b4:37:1b:5c:02:22:50:
                    1a:75:b7:17:9d:c2:1a:52:a9:b7:66:b6:df:8d:d2:
                    de:9d:21:b3:75:c4:02:33:25:6f:5c:b1:ff:e8:ef:
                    3f:12:3f:a0:63:f7:ba:e8:c5:3b:ab:d2:7b:5d:62:
                    78:61:df:a6:1a:dc:4f:07:fb:63:2b:27:1a:96:35:
                    18:d0:94:08:45:4c:86:bd:a6:5d:a5:c2:9c:3e:f1:
                    76:b0:3c:ca:b3:a5:d7:bc:b8:72:a7:14:f0:8c:67:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:29:99:FE:88:59:A0:FB:54:C7:9E:F6:0C:74:C7:BD:94:89:EB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:d6:25:c3:48:bc:f7:b7:8c:b6:6a:dd:75:67:02:c9:f9:
         1c:90:e6:52:47:10:a3:9f:33:5c:c2:40:e3:ee:a4:b6:83:45:
         6f:4b:53:5a:52:62:9f:26:8d:62:53:0c:c8:fd:30:ee:49:94:
         37:3b:c7:14:a2:8b:50:11:8b:99:7a:7b:ec:0a:64:1b:45:fe:
         01:4d:27:64:31:00:3d:84:21:50:a9:92:ee:14:46:57:90:5e:
         3a:d9:93:79:25:d9:4e:ab:a6:29:2a:8d:8c:c5:14:4b:1e:f3:
         c2:2f:21:e8:3f:57:d1:fa:44:5c:90:35:98:05:14:b6:72:25:
         9f:12:86:89:cb:f5:f2:96:1d:4d:c9:fd:fb:2c:45:38:29:23:
         63:5c:b2:ed:f1:51:ac:0f:b9:05:e4:13:ac:46:d5:f1:38:73:
         56:cc:32:a8:ae:f8:1e:3d:40:9a:d1:4d:51:08:98:96:6a:ef:
         48:1b:7f:f6:7d:4b:fc:46:18:5e:de:d7:d4:cf:1c:b9:a3:93:
         03:d3:e9:65:58:c9:40:b5:36:91:69:46:91:3f:17:d7:f6:73:
         38:f7:2f:b9:a7:5b:8f:00:4c:bf:0d:e1:73:57:68:bf:82:28:
         f0:cb:06:66:49:b8:02:e5:ad:cd:aa:ce:59:d1:a6:aa:bb:08:
         dc:02:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:39:30 2026 by rpki-client