Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/917294af-dcf5-31f2-80d2-7c8ea1fac4b8.roa
File:                     917294af-dcf5-31f2-80d2-7c8ea1fac4b8.roa (raw, json)
Hash identifier:          BOWUBCWpekGXhjiv2+T154jT6EAO7gZLwC6swlDhW1Q=
Subject key identifier:   12:50:EF:BF:36:ED:22:49:AA:45:86:4A:E4:DA:F7:8D:2D:AC:86:E5
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F7D0729CEC34CDBAE72D40
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/917294af-dcf5-31f2-80d2-7c8ea1fac4b8.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        64.16.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:d0:72:9c:ec:34:cd:ba:e7:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=7277b046-fb79-4301-9263-5422824aeadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:c6:30:52:65:05:38:38:6b:31:81:34:34:
                    e0:e3:5a:b0:45:78:78:4a:22:b4:b4:be:22:eb:21:
                    cc:85:43:22:20:01:14:4b:57:10:d9:83:17:a6:e1:
                    44:d6:51:a9:fa:e8:48:d5:a8:71:1c:88:35:b4:8e:
                    95:fa:92:0f:2b:b1:67:0c:2d:7c:e3:dc:9f:14:b9:
                    e8:3c:bd:05:93:6c:f2:03:bc:e7:b2:82:60:af:1c:
                    e9:ca:a5:ce:2c:54:25:a9:c0:c8:06:d3:e8:43:73:
                    dc:d6:21:aa:97:9b:cd:99:59:06:4a:0f:07:21:50:
                    39:b1:6f:24:cb:2c:08:c9:29:56:4f:6e:80:b5:5f:
                    5b:ef:28:50:9c:6e:f0:f9:46:83:56:81:88:95:5e:
                    cf:6d:a0:60:db:bb:3d:1e:dd:db:b7:76:39:e4:7b:
                    51:1c:05:74:bc:79:2c:d1:7c:b5:62:34:cc:c9:47:
                    86:f9:cc:43:36:e2:02:e0:a0:58:cd:7e:12:97:85:
                    f1:1a:a2:95:4e:33:66:a5:e2:04:50:cc:1c:94:f8:
                    f0:ed:07:97:d3:dc:03:dc:7e:ed:ba:15:59:43:5a:
                    0f:26:ce:68:d4:fe:6f:72:0c:00:97:8b:db:b9:d6:
                    8b:4a:be:a4:5d:74:ad:be:13:26:40:4a:cf:01:fa:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:50:EF:BF:36:ED:22:49:AA:45:86:4A:E4:DA:F7:8D:2D:AC:86:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/917294af-dcf5-31f2-80d2-7c8ea1fac4b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fc:8c:e9:b2:f7:85:f7:87:02:38:10:37:9e:a1:fc:7e:74:
         18:20:32:b5:2e:09:16:af:0a:54:98:f5:8f:d1:df:63:f1:88:
         99:44:18:40:a7:4d:51:b5:67:19:61:07:9c:b0:55:bb:4c:44:
         63:3f:33:f8:7e:d4:74:b5:94:8e:11:46:4e:44:b4:cd:96:59:
         69:77:86:7f:5b:72:d8:ce:1c:d8:0d:8e:a0:87:54:92:60:8e:
         17:c7:72:05:3d:f9:12:4f:88:41:b6:16:1e:24:11:e0:a1:a6:
         f1:d5:b2:4b:4f:73:fe:e5:ce:0f:d1:2c:71:12:33:fa:41:1f:
         bb:14:5b:b0:e3:58:69:c5:e5:ae:f4:b5:ab:7d:17:4e:44:ce:
         cf:ae:98:6f:2a:16:3d:43:e7:7a:ae:9a:d7:57:72:04:60:f2:
         3c:63:f7:81:c8:dc:f2:a2:7c:72:f4:f3:3d:00:98:cf:b3:6b:
         86:fe:1b:5c:9a:55:9c:07:e0:a4:82:df:25:f7:df:72:4b:d5:
         87:89:bd:5f:a1:88:79:2b:d3:86:f7:38:61:a9:a5:e7:e5:76:
         60:98:fe:54:d4:18:53:1b:60:ce:d5:08:46:fd:3e:1b:5b:d3:
         3c:85:30:f1:af:e2:77:f3:ac:4d:1d:33:34:c5:44:1a:5d:0e:
         a1:03:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:07:39 2026 by rpki-client