Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/02456b41-844a-3d9c-a24f-6a6b8b695132.roa
File:                     02456b41-844a-3d9c-a24f-6a6b8b695132.roa (raw, json)
Hash identifier:          3BF1vyOZdF2znvuHbm7jEXw0UpbVn2TSp2qTAUSw4d0=
Subject key identifier:   39:05:AD:D0:00:00:2F:3E:FA:CE:DD:28:A3:79:DD:91:D0:3F:E8:F9
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F4328584EA795C1E992CEDBA1F4FD1080
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/02456b41-844a-3d9c-a24f-6a6b8b695132.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32346
IP address blocks:        64.49.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:c1:e9:92:ce:db:a1:f4:fd:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=894d6908-b4fa-431f-bfa3-0961061a905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:26:e9:5b:8d:9b:a0:91:46:42:e2:a5:1a:
                    29:b0:49:61:1c:1e:dc:17:4f:48:cd:fb:e2:ae:f5:
                    7e:ff:6e:90:6d:24:7a:a3:d6:ad:8f:14:d5:d5:97:
                    94:c0:20:4f:26:65:53:91:00:33:f6:c1:3d:01:e5:
                    1d:a0:eb:45:ea:34:05:eb:97:16:47:30:c9:3e:67:
                    ae:24:21:7b:a5:8f:3a:bf:ec:37:59:42:3e:0a:15:
                    28:b8:05:be:1f:e7:23:41:35:c4:f0:8e:97:6f:14:
                    cb:60:75:a5:fc:c1:d5:5a:65:a4:4b:1b:7d:4d:27:
                    b9:a8:9e:19:78:e8:55:ab:9c:69:19:46:33:c8:70:
                    ee:11:a6:1c:0e:b8:a7:15:d0:4e:65:83:da:38:89:
                    9f:f0:d4:bf:c1:b6:e5:51:42:c5:a9:69:c8:35:18:
                    d2:ec:8d:14:fd:74:f8:0a:f3:18:b0:be:b8:9b:02:
                    7f:b5:e2:79:84:cf:4d:f9:19:5b:6d:06:0b:3e:de:
                    6a:d3:94:4b:fb:26:d7:cd:56:9e:2f:d2:46:0b:20:
                    43:e0:b5:e7:37:cc:05:fa:9f:b1:9c:8f:ae:1f:16:
                    39:12:07:72:c0:5e:65:eb:ae:de:e6:16:c8:ee:f9:
                    26:0a:39:e5:4a:a2:c4:96:b3:ac:4f:0d:92:92:04:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:AD:D0:00:00:2F:3E:FA:CE:DD:28:A3:79:DD:91:D0:3F:E8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/02456b41-844a-3d9c-a24f-6a6b8b695132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:c0:8e:88:e6:7c:72:fc:4f:29:3f:63:43:ae:9f:ab:d6:
         a7:6a:68:98:d3:41:51:55:b1:b7:64:0c:c6:d3:c9:9b:4d:af:
         af:1e:cc:fe:b9:18:5b:9a:ca:7a:f3:ec:d6:06:61:46:ae:73:
         45:7e:f7:b5:3a:36:c1:b0:7d:3a:ea:1c:ff:ec:e2:61:d8:f3:
         6c:16:ee:4a:84:13:d8:9d:bb:3f:cb:fb:4c:a1:1a:6f:a0:36:
         3a:0e:e7:e1:fb:76:04:c2:c7:52:4f:08:ad:c1:94:e4:52:06:
         54:12:34:ef:06:42:e4:95:7a:70:8c:2b:fb:53:cf:2b:2f:c1:
         40:a4:eb:58:4d:ad:c6:67:ce:e5:c7:4b:f9:ff:0f:f9:25:4e:
         b9:00:cc:82:b9:94:45:ca:24:da:3d:e5:1e:57:cd:fb:eb:3d:
         eb:41:63:cd:d5:43:22:e3:8c:b2:59:6b:d4:86:60:ec:43:47:
         b1:1a:ef:b1:95:bd:ba:a5:f9:fa:21:d7:c6:3d:b2:b7:94:63:
         54:33:ae:d2:e5:95:a5:44:b6:3c:40:61:59:8f:e7:64:c0:61:
         97:e7:ba:f4:d8:ec:98:b7:3a:86:e8:b0:4b:13:7e:e2:f0:3d:
         b0:fb:bb:51:85:98:d4:99:61:e0:90:b9:0b:29:ab:f1:a6:3a:
         d7:7f:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:42:26 2026 by rpki-client