Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
File:                     805a6386-9e3a-3c39-9838-a4f1d371b171.roa (raw, json)
Hash identifier:          VK61gwrJkMQbtELMy/G5VazveYnWL9mHhkOyFNzDzC0=
Subject key identifier:   7E:66:C2:73:D4:8C:F8:77:A0:DA:37:7E:51:CF:E0:9A:60:1A:3C:BE
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584EC20C5B6120572F661CEE9100
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     62943
IP address blocks:        64.111.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5b:61:20:57:2f:66:1c:ee:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=881e3c16-23e0-4af7-b46c-e4e6fb65c504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:67:75:65:32:2e:4b:08:ab:01:10:37:55:
                    8e:5f:ca:6a:98:41:f5:76:bf:a7:6d:e4:55:e8:72:
                    fe:0b:c6:70:f1:cb:d4:17:10:73:fe:00:3e:82:bb:
                    17:74:ef:82:7c:01:42:b0:3f:f6:80:b7:66:71:e3:
                    a5:2f:7a:5f:52:b4:03:ce:98:af:7d:6d:12:38:dc:
                    8c:e6:18:e2:07:b7:e8:c8:cc:26:14:34:23:03:ca:
                    7e:bd:81:c2:8f:64:44:b6:a2:b6:04:da:be:ea:8d:
                    59:6a:4a:04:38:42:7e:d7:7c:a6:bb:93:89:d2:a4:
                    4b:dc:28:7f:a9:97:f7:8e:b9:47:a8:4f:22:72:5f:
                    d2:ee:69:6f:bd:5c:16:cc:38:82:8f:0f:af:fa:ad:
                    aa:15:c4:5b:4f:e9:20:7b:74:34:60:98:aa:cd:7e:
                    a9:e8:94:57:9f:cf:50:3b:72:b6:bb:97:5c:1e:0a:
                    8c:b7:1f:f2:95:1a:95:6e:ef:5e:27:0f:99:22:88:
                    7c:b2:62:53:31:e3:97:bd:fa:97:0c:6a:0e:14:0f:
                    73:a1:9b:76:41:db:e6:95:30:f6:b7:2f:e1:1b:fa:
                    88:4c:f4:ba:04:8f:63:cc:9d:85:bd:be:e9:61:0f:
                    f6:b0:9b:71:5e:9b:ce:19:ce:55:5e:30:87:a0:50:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:C2:73:D4:8C:F8:77:A0:DA:37:7E:51:CF:E0:9A:60:1A:3C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/805a6386-9e3a-3c39-9838-a4f1d371b171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:4a:52:f2:16:0f:b3:6a:b0:20:68:46:88:9b:49:9f:f0:
         23:66:af:18:a6:6e:98:7d:17:a8:cf:8d:75:8c:95:ac:04:70:
         0e:3b:64:43:66:f2:9f:89:40:c0:0f:ab:d4:4d:81:96:58:b4:
         0a:5c:64:be:60:12:a1:10:cd:57:67:e0:2f:75:bd:8b:61:b3:
         ed:f8:8a:c6:b9:b6:9b:92:01:97:c1:9c:b1:36:76:0c:28:1a:
         57:60:2a:0c:40:c2:49:49:b9:06:3d:f2:99:07:7b:aa:b8:d0:
         90:46:35:33:73:5c:98:7d:1b:a7:df:28:61:d4:14:2f:ea:8e:
         b9:f3:45:04:59:07:cd:eb:41:80:82:35:67:a0:72:a7:b0:0a:
         ff:f1:73:14:0b:3b:8a:7a:31:63:47:3b:5b:58:55:18:2c:a5:
         87:05:60:eb:b6:cf:b0:ba:42:cf:b3:a4:8c:a6:e4:17:8c:dd:
         a1:32:32:d6:92:f1:3f:75:14:2a:17:a5:df:03:7d:ac:e3:15:
         5d:11:03:82:92:71:3a:19:db:28:8d:47:66:7a:f3:25:b1:de:
         84:c2:3c:04:74:6d:0a:4d:a0:e0:ef:7e:90:d7:6e:00:77:28:
         63:02:13:fe:4c:a6:a9:da:bd:de:ec:fc:54:7f:bf:4b:00:32:
         b8:11:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 19:24:24 2026 by rpki-client