Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/678fb152-0dcd-3918-aacb-7b6557829790.roa
File:                     678fb152-0dcd-3918-aacb-7b6557829790.roa (raw, json)
Hash identifier:          /GOc7utGLsBpox/j+R7pP2T/3AwsQZE8Ov1rJuZfnbA=
Subject key identifier:   0F:5B:F2:58:FA:A3:9A:B7:80:94:C9:2F:31:A8:A6:F7:CB:1F:D8:8A
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584EA79B5CEEA9E66241D0A16A00
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/678fb152-0dcd-3918-aacb-7b6557829790.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22781
IP address blocks:        64.145.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:5c:ee:a9:e6:62:41:d0:a1:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=52610daf-18e3-44e5-9955-666c119f4163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:ac:85:03:61:f1:78:17:40:c8:21:c7:98:
                    64:9f:c1:bb:99:e7:99:13:40:7b:b5:05:86:c9:6d:
                    ec:31:5e:fd:1d:c9:7f:15:cd:b1:85:ef:25:81:5b:
                    06:6f:b7:40:bc:e6:96:3d:ee:81:a3:35:10:9f:c7:
                    6e:40:19:9c:05:fe:3b:6b:c3:c8:5a:c0:c9:05:a4:
                    81:65:dc:59:e6:6d:2f:a3:b4:d6:ba:95:64:01:01:
                    33:2f:93:fe:08:92:5f:ff:04:4f:34:48:b6:54:b5:
                    74:6a:ca:5f:e3:86:40:0f:41:16:1d:35:09:10:23:
                    b7:13:4b:ae:d7:73:06:ff:a7:84:08:b3:fe:29:53:
                    c6:4b:93:db:de:7a:4a:b1:51:9d:ed:fd:bb:c7:a0:
                    d2:af:87:e7:fe:0c:f9:df:e8:f9:ae:9b:a6:bf:24:
                    83:96:d9:98:3c:46:e9:87:35:9d:df:da:da:8c:06:
                    22:dd:10:b6:cd:21:19:aa:53:38:d2:8c:38:7c:6a:
                    ab:6d:28:b4:d5:22:89:4a:13:93:8c:da:93:b9:94:
                    37:35:df:66:61:9e:fa:7a:f6:f4:88:6e:0d:7a:3e:
                    b5:aa:40:42:53:c7:2a:ab:cd:32:d7:01:a4:ae:c0:
                    fd:77:fc:a6:aa:06:f0:f2:7a:8a:36:ca:36:59:71:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5B:F2:58:FA:A3:9A:B7:80:94:C9:2F:31:A8:A6:F7:CB:1F:D8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/678fb152-0dcd-3918-aacb-7b6557829790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:a6:33:e2:d1:72:49:72:4d:c7:45:7e:0a:e8:3f:a9:f3:
         57:23:98:f5:3b:01:21:69:a3:2f:0e:7d:0c:76:9a:e8:8a:3c:
         b9:44:a3:f2:e5:f1:7d:f5:67:9c:16:7b:fe:95:17:1a:e5:94:
         df:f4:71:5d:b6:85:f7:66:6e:66:03:b5:d7:fb:2e:4f:d8:d7:
         e3:c6:82:85:bf:20:cf:96:a3:60:f3:bc:b6:d7:f0:24:74:ad:
         7b:c5:92:64:ad:30:0f:39:a1:2a:cd:2e:c5:50:7e:d2:18:cc:
         85:cf:d2:b4:5a:79:ca:8c:94:4b:64:2c:06:9d:39:9f:33:78:
         b9:b5:45:18:81:89:40:6c:e6:f1:a1:5f:7b:b4:f5:3d:c8:ae:
         10:e3:7a:31:83:22:0d:8e:c9:fa:4e:5e:ce:92:13:17:c3:d3:
         bc:05:f7:b6:81:1c:a2:ac:58:66:31:96:67:31:61:63:db:2e:
         d3:09:88:9a:29:1b:d4:d7:c0:75:2e:83:1d:98:9e:51:1d:ac:
         a5:9d:80:a8:d2:c4:98:2d:16:2f:60:4c:c3:de:a8:a8:08:03:
         c0:f0:54:3b:b9:18:f5:7a:d8:c8:fb:42:3d:79:82:9f:82:93:
         53:e5:c1:3c:1b:17:1e:f8:ed:8f:4d:68:56:c9:23:38:6c:b1:
         7d:2d:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:52 2026 by rpki-client