Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa
File:                     beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa (raw, json)
Hash identifier:          uXGRHin9JzCrM7SdkyoEGZw1xxUlmrd69jRHw0X0zh0=
Subject key identifier:   41:96:A1:AD:3A:14:2E:CB:5E:13:06:CC:6E:73:8F:DD:3F:7F:21:65
Certificate issuer:       /CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1
Certificate serial:       010D0C9F4328584E709F6802C6D7C472FE246F80
Authority key identifier: 31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     29789
IP address blocks:        64.88.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:68:02:c6:d7:c4:72:fe:24:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=fceb3099-7817-4628-bd32-a0b0a2f8c641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:57:c5:0c:89:12:48:00:a3:ea:4a:2f:e9:2b:
                    c9:ff:26:5e:64:5a:08:66:80:76:de:16:e7:48:83:
                    f7:b7:90:00:b5:66:95:b7:1f:1c:b3:dc:5e:e8:47:
                    93:f8:16:d2:88:82:00:ff:9b:d9:ef:90:4c:3c:c3:
                    ea:ac:a0:7a:6c:3c:a1:47:d3:1a:b3:07:9a:a9:47:
                    16:7e:e7:e5:13:52:3a:29:d5:63:2b:ae:b4:cc:1b:
                    21:db:4f:e8:f6:1e:3b:e0:fc:a9:b5:8c:2e:90:89:
                    98:6c:cf:ea:ce:1c:15:86:7a:60:43:29:6e:fb:2b:
                    9f:ba:2c:12:b1:ef:10:fb:4b:1a:2d:89:14:3c:62:
                    11:47:99:be:f9:48:0d:fc:21:86:f4:65:24:f7:7d:
                    98:c5:45:7b:e4:bb:54:d0:ba:45:d9:4d:ed:d2:37:
                    c1:fa:74:3c:ef:7e:ff:45:41:4c:32:70:8e:90:f7:
                    11:1c:64:dc:9d:37:ec:ac:90:0a:3e:c6:5f:25:e4:
                    a5:34:bf:3d:1d:4e:a5:80:dd:fc:fe:8c:27:19:c9:
                    20:40:d6:7c:0c:e0:54:ab:a3:f4:e4:d1:01:9c:7a:
                    1d:80:f5:8f:a9:16:17:bc:05:0e:78:1c:85:e0:3f:
                    81:17:0c:88:dd:a0:ab:34:a0:76:f0:28:b2:1d:14:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:96:A1:AD:3A:14:2E:CB:5E:13:06:CC:6E:73:8F:DD:3F:7F:21:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/beed4dfc-6eab-3efe-8ed0-638f08c24a3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.crl

            X509v3 Authority Key Identifier:
                keyid:31:55:1F:1B:33:E6:E5:B7:AB:AC:0D:36:B6:7D:DD:EA:B4:60:E3:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7a0ad2c5-6f70-4cd0-8e04-ffa9d9cdeff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:83:34:6b:7a:0c:07:6d:da:ef:c8:97:87:12:ad:6b:63:
         e8:ae:2b:e1:37:07:41:e8:79:91:bc:2a:5a:3d:52:10:9d:39:
         c3:cb:51:13:db:c5:e2:09:85:b6:f0:29:b1:cd:2f:0c:33:02:
         d8:18:01:5c:7c:a1:aa:7b:4d:73:98:f5:ec:c3:8d:01:00:27:
         73:39:21:1c:8f:40:41:4a:53:b5:0f:37:15:c2:c3:90:75:81:
         e1:10:bb:1e:5c:42:9f:b9:dd:25:8f:7b:ab:54:6e:f3:ed:a7:
         2b:5e:dc:63:2a:54:c4:e7:5f:f3:b0:9d:62:3e:b3:3b:53:74:
         bc:0f:26:99:f5:6b:9f:a2:91:c3:63:e9:36:28:3a:99:30:a1:
         0f:b0:61:26:a0:f2:90:d1:6a:a0:ca:ba:c5:cd:66:97:35:87:
         aa:37:8b:c8:31:36:32:ec:b2:e7:d0:2c:78:cf:37:ce:26:ec:
         6d:ed:c2:46:f2:f1:25:63:05:92:cd:fa:d5:53:3b:7d:44:a7:
         4a:9f:8e:10:90:66:b2:8d:cd:47:21:e4:13:bb:e2:d4:37:54:
         e8:36:e6:87:17:3e:e0:e8:dc:bb:91:60:24:2f:be:85:7c:98:
         04:35:c4:b8:ca:59:81:5c:e8:f7:7c:9f:25:35:fd:25:7b:a2:
         0f:01:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:03:22 2026 by rpki-client