Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa
File:                     48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa (raw, json)
Hash identifier:          2/7Y217xnX+xMOnV5szSBowIlUSoEYMXy2Copk23usM=
Subject key identifier:   6A:19:11:AF:DC:CE:40:98:38:A0:15:36:60:D5:BF:51:33:11:5F:56
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584E210EF3A08B8D5CCBF408B780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     11537
IP address blocks:        64.57.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f3:a0:8b:8d:5c:cb:f4:08:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=fb8df4fc-814d-49f4-8abc-2a3afb19898b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:8e:12:6d:c3:b0:91:cc:01:ea:da:6b:cc:
                    63:3e:c2:bd:50:26:c7:35:42:67:07:61:c2:92:a6:
                    db:bd:9b:b5:f5:a9:48:e5:f3:6d:92:0d:96:5e:d2:
                    46:c1:a1:e3:96:cb:d9:b4:b0:89:e5:ee:51:e7:6c:
                    e8:a4:04:31:63:e6:d8:27:80:3f:55:d3:fb:3d:67:
                    43:2c:25:f4:15:8c:0d:67:7b:ad:39:fa:fb:e3:c9:
                    6a:bd:a2:a3:2f:0b:61:b9:09:6c:64:12:0d:38:85:
                    1f:04:88:92:7f:cc:89:60:b0:bd:02:d7:ac:56:bd:
                    10:38:06:49:df:e1:b7:e6:bb:f1:6f:ed:b0:55:f1:
                    84:aa:8f:30:e9:c1:4b:c8:7b:f6:0f:a7:f0:96:c9:
                    16:c1:81:1e:01:1e:d8:3f:4a:d5:f4:8f:dd:1f:e1:
                    2c:6e:44:29:21:3f:a1:5a:70:13:56:06:ae:34:89:
                    aa:a5:7d:ac:93:69:57:58:47:1f:7a:8c:4b:ed:4d:
                    1a:91:31:4a:b5:42:6e:3e:f9:60:7f:bd:6f:ea:2d:
                    74:81:ef:01:d1:bb:2a:cd:cd:18:95:26:e4:80:2b:
                    c2:e9:86:01:d8:63:13:56:ed:46:ee:25:84:17:15:
                    86:7d:1c:7d:02:96:c3:3b:6d:63:4b:7e:12:44:47:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:11:AF:DC:CE:40:98:38:A0:15:36:60:D5:BF:51:33:11:5F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/48c4b22a-03c8-3f17-bc86-80d5d7ec8c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:bc:73:30:94:b0:05:98:c0:49:2d:20:86:d2:6e:e1:98:1c:
         12:93:8b:b6:4d:3f:81:c1:9d:81:06:b1:4d:2b:33:c3:bb:33:
         b2:74:c4:5f:71:64:90:84:ba:32:86:8c:7f:93:b7:8c:73:21:
         6f:5f:1b:d6:9c:22:71:96:de:bf:83:2c:20:d2:97:5b:69:11:
         3a:2a:10:f7:ac:4f:30:52:d3:4e:ae:3e:4f:cf:df:32:c4:b9:
         09:1c:0b:ba:62:61:59:79:52:d2:e6:1e:c4:80:fb:c7:d3:68:
         ed:58:2b:15:c9:d5:84:d9:e6:f0:df:87:da:78:03:22:65:5b:
         73:61:9d:3f:53:b6:b9:45:8e:a2:73:c3:f6:09:dd:41:94:60:
         b5:e7:16:ec:77:ed:4a:78:19:ec:c4:89:05:61:b9:f6:2f:73:
         72:98:60:7b:16:14:25:3c:9a:a3:d3:f2:cf:37:e9:6a:2e:89:
         97:f4:e2:ea:4c:7c:c5:10:db:62:49:8b:33:02:f6:d3:7b:70:
         10:ed:42:26:c2:31:67:aa:6a:c2:81:7b:4b:27:b2:b6:f3:ee:
         21:eb:ec:d9:ae:b4:75:dc:ed:32:b4:50:04:70:8a:a3:0e:b1:
         b9:16:9b:60:ba:a7:1c:d9:89:f7:01:4d:5f:c5:f6:0b:82:24:
         03:25:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:15 2026 by rpki-client