Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa
File:                     37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (raw, json)
Hash identifier:          lzmxR7CkUTVX+BqorYEg0azXAV/wUgvkEIEGxxhCMPY=
Subject key identifier:   B5:FF:9D:3A:8D:2E:A1:03:AC:62:F8:38:52:B5:F6:D6:5C:91:26:9D
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F4328584EA7946D7DF4F2A0C28C6C1380
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        64.52.111.0/24 maxlen: 24
                          192.153.76.0/24 maxlen: 24
                          199.201.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:6d:7d:f4:f2:a0:c2:8c:6c:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a3ebd0ac-da4b-405f-ac6a-e790dda16970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:94:36:67:8e:58:b5:4b:0a:b9:82:d9:62:
                    2a:58:d9:e8:d6:d1:db:0e:cc:fe:22:fa:7d:12:0a:
                    2f:f4:78:37:8f:36:86:7e:88:3b:e9:bb:88:99:b3:
                    25:d2:fb:31:07:ae:b8:9c:c7:04:4a:81:b3:92:ba:
                    f9:ff:60:f7:60:a3:24:90:20:14:d3:64:44:70:b0:
                    18:1f:fb:b8:a2:9c:d5:c3:49:7d:ba:65:94:01:0e:
                    9c:74:08:ac:2b:25:1e:fa:ab:27:03:e8:30:a4:1b:
                    aa:5f:f4:52:2f:0d:a5:c2:64:da:02:71:c0:fb:a1:
                    76:4a:30:8a:1e:62:ec:e1:ab:ed:83:67:f9:46:dd:
                    04:2c:db:2d:c3:9c:95:77:af:a5:03:14:c9:6e:5b:
                    95:e6:12:37:aa:71:b1:03:16:7f:f8:fa:c5:fb:21:
                    df:26:3f:69:31:cd:41:90:0c:46:64:06:f1:03:0a:
                    81:50:b7:a3:4b:0a:68:8f:60:00:99:4a:93:a9:47:
                    6f:4b:24:e7:08:46:03:0a:48:23:dd:b2:9b:ff:39:
                    1a:23:42:c3:4f:69:d5:bb:d4:1c:4f:d4:4c:5e:03:
                    77:5a:df:e0:44:b0:53:d3:81:7b:ec:2e:24:78:c7:
                    cf:88:65:8a:64:0a:3d:41:22:73:39:e4:b9:71:1b:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FF:9D:3A:8D:2E:A1:03:AC:62:F8:38:52:B5:F6:D6:5C:91:26:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/37677602-0a43-34e8-9622-a4ac56d7d1e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.111.0/24
                  192.153.76.0/24
                  199.201.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:fc:e4:1b:f6:86:39:05:35:25:bc:9a:31:fd:9b:cd:38:
         32:c3:57:33:c0:14:14:b8:43:3e:99:d6:66:51:93:0d:8d:92:
         2a:fc:6e:9d:44:15:d6:65:f5:f4:a5:52:33:cc:64:fa:c2:59:
         d2:78:53:15:d5:73:61:02:60:f8:8f:da:bf:88:51:a1:1f:5e:
         41:88:5f:6d:cc:6f:15:94:ad:bf:b6:f1:b0:35:89:4f:fb:3c:
         eb:01:f0:37:6f:5e:78:64:70:c7:71:80:cd:59:8e:bb:0e:b2:
         ab:33:19:d5:fb:23:f0:00:7d:e5:e4:1f:65:a1:9e:31:a5:df:
         d7:1c:8b:1e:c3:e2:b2:56:64:79:15:48:16:31:5f:ea:06:7d:
         11:1d:84:59:b9:ed:92:b0:4d:cb:da:33:3e:0a:f1:20:51:e9:
         aa:4d:54:5c:9d:dc:63:bb:13:6c:d5:d9:97:92:2c:18:28:65:
         ac:dd:35:75:43:2b:15:ea:9b:5d:62:8c:2e:84:b7:60:83:78:
         17:8a:52:d3:9e:5d:02:ab:6d:35:b3:49:9c:e0:69:36:8e:4f:
         32:5e:d1:31:5a:86:41:a4:b3:cf:b0:13:5c:78:65:e1:3e:3d:
         85:19:1d:0f:57:f6:76:c1:c5:b0:59:fa:f3:03:96:5e:88:5a:
         37:c3:e9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:24 2026 by rpki-client