Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa
File:                     72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa (raw, json)
Hash identifier:          pdAaTMgvxugNjERylzZ+Dt7orIVP5t1kBAa2ZKlNOFk=
Subject key identifier:   88:EF:4C:BE:CF:46:3F:C8:4C:1B:B7:D9:6E:9E:AC:F9:B1:A1:CE:40
Certificate issuer:       /CN=34b8b05c-fc82-4616-8954-1c456aa48a7b
Certificate serial:       010D0C9F4328584E69A4B97D2873EDBEA032C820
Authority key identifier: 2A:84:1B:A4:6D:3F:BB:FE:25:CC:90:9F:0B:29:85:79:11:6B:AF:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     18725
IP address blocks:        64.250.20.0/24 maxlen: 24
                          64.250.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/34b8b05c-fc82-4616-8954-1c456aa48a7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/34b8b05c-fc82-4616-8954-1c456aa48a7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b9:7d:28:73:ed:be:a0:32:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b8b05c-fc82-4616-8954-1c456aa48a7b
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=97ef9171-4893-4665-b7db-5ba6b9e39ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d7:49:b9:22:66:eb:67:1b:48:a3:2b:da:74:
                    91:c6:12:2a:06:b6:1d:ae:1a:f0:92:34:c7:33:91:
                    d4:ee:6c:0f:d2:4c:e4:9c:22:f9:00:68:f2:6d:4e:
                    4d:f6:70:4b:34:56:e1:42:41:2a:9c:68:0f:80:c6:
                    ea:11:4e:09:ca:86:3a:69:60:66:b7:88:8d:9d:50:
                    51:c3:35:5c:2d:90:c5:56:6d:bc:c6:4e:ad:cd:a4:
                    37:f4:26:35:17:a5:26:52:8b:ad:5c:33:9a:13:c2:
                    d3:46:83:fd:73:a5:ae:be:61:f9:3b:2f:48:ff:4f:
                    29:09:5a:17:23:79:35:6e:f5:dc:97:ad:15:c5:86:
                    33:17:89:c5:00:6e:38:3f:bf:f4:19:ad:28:e5:40:
                    4a:f5:4e:4d:b4:76:68:48:99:fa:56:06:27:3f:ba:
                    86:4a:c7:c5:db:dd:c9:9b:ac:1b:fd:19:b5:5d:ef:
                    24:3d:76:ed:04:c8:07:81:55:d1:5e:fa:c2:c4:78:
                    88:9d:96:03:52:36:77:f2:08:84:b3:d5:12:71:6b:
                    32:89:a8:66:2d:ab:2d:4b:44:fd:ff:b0:fb:85:0f:
                    4a:78:bd:da:4a:57:b5:02:5b:b8:d1:05:6b:c2:cb:
                    9f:42:11:2f:7a:2c:d2:09:06:a7:34:6f:f7:e7:1e:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:4C:BE:CF:46:3F:C8:4C:1B:B7:D9:6E:9E:AC:F9:B1:A1:CE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/34b8b05c-fc82-4616-8954-1c456aa48a7b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:84:1B:A4:6D:3F:BB:FE:25:CC:90:9F:0B:29:85:79:11:6B:AF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:b7:25:dc:c0:d5:c2:12:88:a2:04:e3:f8:04:4a:a0:c2:
         73:bd:bb:da:f8:c3:37:4a:7e:34:46:23:c3:44:e6:4d:e1:d1:
         15:0a:2a:17:a4:bf:4a:36:2d:37:c8:21:8f:fb:ba:9f:b3:85:
         3f:0a:c2:96:e7:5a:32:80:03:43:cf:3f:fc:31:36:86:c9:cf:
         eb:96:2a:a6:7d:dd:61:17:47:e4:de:bb:97:2d:0e:09:5a:b9:
         3a:cf:42:e8:63:2d:69:70:6b:00:f6:3d:a0:a9:62:9d:aa:68:
         10:3b:ec:1b:08:51:bc:82:fb:ff:b9:e7:df:7d:1c:64:8b:45:
         a5:b5:f2:71:db:51:56:e6:63:59:f9:09:1b:15:31:c0:fe:92:
         08:c3:1a:d6:e6:5a:1b:58:6d:2a:bc:a4:85:1c:3c:53:b7:6d:
         78:d8:99:2a:66:81:b7:a4:34:49:b6:f7:1c:8e:1a:9c:8d:34:
         3c:d1:06:ab:a6:0c:f8:20:aa:65:fa:e5:49:f5:22:cd:19:5a:
         ae:03:a1:78:d9:33:f1:bc:de:d1:27:61:cd:43:79:fb:b3:b5:
         96:fe:c8:8d:27:2e:36:05:f4:27:d1:0d:10:2f:c8:bc:cb:76:
         bf:84:81:af:27:bb:52:29:b2:08:f4:64:f2:0d:b4:37:b2:41:
         23:e7:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:26:03 2026 by rpki-client