Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa
File:                     bb041189-fc4a-373b-8858-10cef827368d.roa (raw, json)
Hash identifier:          83bVP0aC4fNSzUWmgBSEcrbZG1we0EZnYBjNlezn8qw=
Subject key identifier:   8F:3E:81:2E:84:65:83:FC:DA:84:F8:34:05:D9:F9:6C:F9:97:56:BA
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584E66DA1366D2F6C0BECFBE5580
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     26042
IP address blocks:        64.22.97.0/24 maxlen: 24
                          216.180.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:13:66:d2:f6:c0:be:cf:be:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=1185bb15-726d-4b23-82c6-6587e0bf255b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:0d:56:e0:af:e7:cf:21:6e:66:57:8c:4a:
                    c6:a9:3f:1b:a4:13:6b:62:b8:c3:a3:52:ef:d0:ae:
                    ce:c1:4a:61:7c:19:15:54:79:7f:b7:f9:44:05:11:
                    d2:bf:b9:c9:a9:2b:6f:b3:b4:3c:a7:de:6f:43:05:
                    68:f1:6d:cf:7a:c4:5e:3e:31:f2:52:3f:d4:05:02:
                    cc:56:75:70:74:35:cb:0d:5c:cb:aa:3a:77:5a:78:
                    a8:a0:2b:c6:9f:a7:79:ad:55:af:f0:ef:6c:1b:31:
                    38:a7:81:be:e5:91:0e:36:51:ba:19:b9:69:c6:f3:
                    db:7d:bd:68:cf:7e:90:50:05:69:b6:95:41:96:b2:
                    9e:af:69:62:31:39:37:cb:e2:6c:d8:21:b0:a1:07:
                    d6:dd:2b:1c:00:5f:fc:2e:8c:7c:7f:1a:b7:bc:e2:
                    38:0a:6d:bd:46:c6:68:32:bc:d4:1b:cf:3d:3b:fe:
                    e1:02:a2:2b:06:41:7d:73:c9:78:c9:85:6b:31:88:
                    b0:b7:1f:a2:0e:57:bc:21:c7:aa:a4:31:2f:54:4d:
                    af:4e:e2:a3:09:46:da:ad:8d:8b:b0:7a:94:01:00:
                    16:60:94:7c:bd:f2:56:84:19:e2:75:69:51:27:3a:
                    08:a3:d0:40:7e:31:67:10:86:cc:11:d0:fe:4c:cd:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3E:81:2E:84:65:83:FC:DA:84:F8:34:05:D9:F9:6C:F9:97:56:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/bb041189-fc4a-373b-8858-10cef827368d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.97.0/24
                  216.180.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:23:a6:fd:70:db:ce:b0:75:39:39:c8:af:7f:cd:bb:9f:
         15:a7:b0:e5:b3:f5:4b:13:45:f8:4b:b1:75:96:23:00:31:35:
         70:92:36:12:92:4b:c5:5c:db:74:27:03:f0:44:ba:7c:4e:6d:
         19:8c:b9:4e:21:ba:52:79:ad:d9:99:77:b5:29:e7:af:42:98:
         05:66:29:0d:6a:52:a0:e5:ca:0b:37:72:a7:21:aa:f7:1f:90:
         02:6a:8e:37:ee:0f:3e:29:aa:d1:7c:70:e9:f2:1b:30:c5:05:
         c5:fe:50:c6:34:9e:90:34:a3:30:37:98:1f:c3:87:77:7b:8a:
         4d:96:05:ab:5e:df:05:bf:bc:45:e0:cf:f6:4a:8b:d0:28:74:
         f5:b9:36:2b:a5:f7:b9:c7:51:93:e8:23:9f:e4:04:5b:d0:f3:
         ec:a0:33:51:80:8a:08:38:f0:b7:f5:12:13:63:17:b0:46:29:
         5d:4c:c7:3b:b5:16:d8:65:c7:fb:a7:03:ed:ad:e6:75:44:52:
         3f:48:d2:75:d6:b0:1e:1d:8b:ad:f6:2a:36:e8:98:64:b5:d3:
         6b:1b:46:a3:e2:ec:a2:be:b2:57:a3:52:6c:71:81:c0:19:a0:
         ec:c2:8f:f3:98:5e:42:e0:99:51:d9:50:0a:8c:43:f6:1e:2f:
         10:53:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:46:26 2026 by rpki-client