Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/10fb47b0-da36-3f4f-aa03-7d2228ee3fdb.roa
File:                     10fb47b0-da36-3f4f-aa03-7d2228ee3fdb.roa (raw, json)
Hash identifier:          F2UcAG0BR2TOLbX9lwimJvpS7eUvjaKWAaNH4gshjJw=
Subject key identifier:   76:F5:5D:58:DA:73:99:66:9C:BF:1E:F5:EE:FA:79:50:CD:56:B6:2A
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F7A33A1245C761F0BCD180
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/10fb47b0-da36-3f4f-aa03-7d2228ee3fdb.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        64.16.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a3:3a:12:45:c7:61:f0:bc:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=f8bea2e8-8b18-4a55-bec6-dd2d39b75756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:c2:85:73:f7:11:3b:3c:f6:de:b7:0b:af:
                    20:7e:af:ac:0f:dd:64:40:86:f5:dc:1f:57:6b:56:
                    93:5e:3b:91:42:66:9c:b9:23:95:18:ea:24:81:a5:
                    c7:d9:1a:5b:18:2a:16:e2:95:b9:a6:43:99:88:f9:
                    ca:be:88:60:80:7a:e9:f7:cc:92:4b:bf:19:78:b8:
                    fd:5b:f7:67:9d:ee:0f:90:bf:e1:8b:93:40:53:b4:
                    1a:9c:e5:78:91:5f:d4:cb:28:d8:f9:95:19:db:cd:
                    84:04:df:ec:50:41:63:9f:5a:f7:dd:06:18:97:16:
                    03:c6:36:c6:68:08:0d:25:f0:86:77:8f:9c:2e:63:
                    0b:03:55:2e:30:c3:40:e2:92:bf:cb:50:c9:5f:46:
                    f6:e9:15:53:e4:6c:ca:77:de:8e:b0:10:12:7d:9f:
                    80:b2:35:69:1d:03:69:4a:31:9b:c5:a8:b7:02:be:
                    26:fe:eb:f4:3a:71:bf:ea:bb:02:be:79:3e:36:7d:
                    ca:73:ad:8c:28:46:cd:31:e5:0d:12:3e:f2:d2:29:
                    1b:51:33:e3:2a:ce:65:f3:ee:2a:92:88:a9:e7:bd:
                    2f:46:9c:c1:b0:c6:05:04:21:2c:1a:2b:ba:11:33:
                    f6:14:c0:68:85:9a:f2:cf:a9:83:c1:3c:a2:17:d1:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:5D:58:DA:73:99:66:9C:BF:1E:F5:EE:FA:79:50:CD:56:B6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/10fb47b0-da36-3f4f-aa03-7d2228ee3fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:28:fb:fa:23:11:c9:03:11:40:52:31:5a:dd:67:87:a7:0f:
         81:6b:36:21:aa:4a:45:f1:0a:7a:7d:59:be:cd:98:ec:3f:c6:
         c2:cd:bf:07:b5:e2:a5:96:6e:4f:57:61:41:8d:0a:8c:db:43:
         50:5b:77:18:37:2c:8c:25:3c:c2:b8:ea:7d:f8:78:4f:53:19:
         8c:4b:5c:eb:c9:81:67:96:59:b2:88:c2:29:57:ab:7e:bf:81:
         8a:28:60:ff:7a:12:b7:97:f8:29:b9:f0:5a:82:82:46:80:66:
         c9:7a:48:23:fd:aa:95:26:67:60:db:5d:bb:3e:39:5f:d4:df:
         fd:c4:cb:d6:6f:20:7c:60:f4:68:45:89:01:f3:92:98:c9:e9:
         d2:c2:b2:a4:68:5c:98:83:b5:57:34:ac:af:23:bc:9d:ce:40:
         06:a7:54:e2:8c:db:fc:a1:23:04:25:76:f6:28:33:0b:a6:16:
         fb:99:0b:ee:26:f5:de:18:61:2e:e2:80:02:92:d5:80:51:b7:
         61:65:18:32:85:7a:77:4a:2d:55:e7:d9:3b:53:c6:11:86:cd:
         c8:1a:12:9b:b0:f5:5b:3d:cb:9a:81:12:ea:66:9a:e0:e6:4c:
         67:3c:82:54:cc:e2:c9:fb:ae:cf:fc:ef:94:fc:ea:b9:2e:4e:
         12:8b:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:10:45 2026 by rpki-client