Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/430c0044-5ca2-3e78-8f00-f8a271d3dd9a.roa
File:                     430c0044-5ca2-3e78-8f00-f8a271d3dd9a.roa (raw, json)
Hash identifier:          14Th3097WTuHku4JGRNQu6s1nyntyN4eZUL94QvTqJg=
Subject key identifier:   70:71:77:71:06:E8:29:10:D1:34:81:E5:FF:E9:A5:89:19:0A:FF:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E54B4993C9E00924ECBFAE480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/430c0044-5ca2-3e78-8f00-f8a271d3dd9a.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     401725
IP address blocks:        64.62.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:99:3c:9e:00:92:4e:cb:fa:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=da8f7143-efd9-4ab4-8d77-a629999cd49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:15:1e:3b:61:b5:80:eb:1d:2b:8d:f7:e9:
                    18:e4:f5:6f:05:0b:53:89:ab:68:59:f7:e9:8f:1a:
                    f5:ea:cc:bb:b3:e6:08:2d:3d:61:55:93:fe:50:73:
                    d5:38:3b:4a:c8:dd:56:a2:f9:23:00:3b:34:ca:a9:
                    6b:1f:8c:8d:f0:69:f5:37:86:d4:a5:8a:74:65:ee:
                    2b:88:d6:41:e2:03:6a:76:90:c8:c9:db:16:1e:f9:
                    9e:b7:3d:b8:b0:b8:cc:9d:a6:67:48:08:54:41:24:
                    fd:2f:7a:81:e8:d2:77:a4:64:ba:64:98:a4:71:ea:
                    ea:c2:b1:94:4f:5f:1a:26:ee:1c:95:64:74:03:7d:
                    1c:5a:9e:ba:fb:af:2f:40:35:24:2d:73:3f:64:35:
                    7a:dd:90:8c:ae:7f:52:97:b4:15:05:37:09:54:1a:
                    4b:f8:2d:d5:ca:f3:e6:17:90:d7:b3:73:68:66:ce:
                    01:1d:ba:35:a1:db:fc:57:fd:10:3a:46:01:fe:4b:
                    0d:27:16:63:fc:5d:32:5c:7d:dc:36:9c:62:37:f7:
                    38:d2:c9:2d:e3:03:9b:20:d8:31:ec:d6:f3:36:58:
                    59:b2:b4:c5:05:86:0d:43:7b:cf:de:07:87:2e:6b:
                    8a:dc:5f:3c:4b:17:75:50:5b:a6:db:29:b6:ab:04:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:77:71:06:E8:29:10:D1:34:81:E5:FF:E9:A5:89:19:0A:FF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/430c0044-5ca2-3e78-8f00-f8a271d3dd9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:24:ea:77:79:a8:74:63:a4:27:18:f5:40:cc:8e:92:09:3f:
         ed:ec:ea:39:61:18:dd:e0:62:20:36:3d:10:df:7e:46:0a:b1:
         df:2e:b0:1c:04:61:12:ed:83:5a:22:f5:7c:24:85:2f:a8:44:
         37:27:21:09:13:22:df:15:0b:3d:99:4a:23:66:c8:47:34:13:
         93:c1:cb:9f:55:ea:d4:39:a8:73:91:9e:60:25:c2:ef:65:6d:
         b8:47:8b:0e:e0:b2:db:78:43:43:e6:0b:70:5c:6c:76:58:0a:
         7a:f0:8f:5f:73:d8:08:98:39:a9:22:ca:00:16:bc:63:05:76:
         a6:92:15:80:86:79:9f:6d:ae:e5:f3:f1:22:8f:0c:d8:fe:98:
         21:1e:5d:1d:77:38:9c:be:ee:81:1a:9b:81:68:2a:be:ba:e0:
         e1:81:cd:60:70:d5:6f:a3:0f:04:c9:58:b4:2b:6b:b5:38:40:
         87:cf:7f:9c:80:52:98:b3:84:d3:f5:77:b8:15:04:96:be:37:
         cb:56:2d:13:7b:50:cb:2a:eb:7c:fa:dd:a8:4b:09:0d:d4:9e:
         77:c7:3d:11:43:da:4f:91:e7:f1:2b:76:48:37:d3:03:74:03:
         02:a0:b8:be:42:b5:86:58:88:f7:2c:6f:78:b4:da:34:12:a9:
         39:09:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:21:17 2026 by rpki-client