Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f6292869-34da-370c-b176-da28c6ba2d4b.roa
File:                     f6292869-34da-370c-b176-da28c6ba2d4b.roa (raw, json)
Hash identifier:          2br5HF761tSmLwq3SWd9xxSwd2Ps6ScuWZm92pmG1CA=
Subject key identifier:   53:BC:2D:84:AF:46:D2:05:CD:C4:28:42:15:A7:61:28:70:BA:CA:C9
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F7B3BBB60FE6C3356DA940
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f6292869-34da-370c-b176-da28c6ba2d4b.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     397630
IP address blocks:        64.16.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b3:bb:b6:0f:e6:c3:35:6d:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=ec34ccf4-f0be-46a0-90a8-77bda9757027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:4c:5b:0e:80:f2:60:03:eb:a9:94:f7:54:
                    61:2e:0f:75:75:21:21:a3:7f:7f:62:db:fe:34:fd:
                    fd:df:ab:4c:67:c5:8a:f6:70:5e:c0:d5:67:de:0d:
                    a7:67:a1:9a:65:8a:0c:0a:a7:a4:c0:22:f5:fc:83:
                    9c:63:63:7f:70:de:c5:bc:9f:05:69:8f:f7:e8:c8:
                    52:00:2c:39:8a:ef:7a:ab:d0:e3:f5:a8:84:58:74:
                    02:da:a1:ee:25:54:a6:e0:e4:11:ac:bd:f9:50:85:
                    f3:bc:c1:6b:ad:f9:e7:0e:1d:11:31:7d:9a:95:2e:
                    32:1d:a8:26:4c:eb:0b:40:3d:7b:67:39:89:26:18:
                    43:c0:d8:72:40:9d:cf:ad:59:fe:9e:71:6b:a8:95:
                    c9:10:47:43:88:82:91:97:fd:2c:c3:d5:8a:e9:96:
                    8e:ef:87:ae:e0:67:dd:40:ae:b2:ab:14:6b:d6:ec:
                    8e:89:a7:51:41:cc:c3:90:94:1f:cb:4a:5f:89:38:
                    ab:0b:45:02:7d:27:ba:93:63:d5:9a:fa:88:07:78:
                    f0:18:c3:4e:d4:17:d4:c8:e0:f1:d1:a6:df:a1:9b:
                    93:be:ce:1d:5a:56:73:fc:b2:7d:d3:4c:9b:ec:a3:
                    bd:20:2d:1d:6b:c1:1f:90:7a:e4:4d:f2:3b:e8:94:
                    4f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:2D:84:AF:46:D2:05:CD:C4:28:42:15:A7:61:28:70:BA:CA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f6292869-34da-370c-b176-da28c6ba2d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:1e:6b:25:81:4a:ee:8c:9d:14:3b:2e:15:df:94:d3:10:
         e4:17:fd:87:3a:db:85:83:11:fc:71:d7:59:31:69:8b:ad:36:
         db:51:ca:ed:cf:f5:d3:ed:fd:a3:28:a6:f1:50:42:4b:be:84:
         dc:ff:f8:a7:c1:57:7b:14:06:6c:c0:6f:fc:08:c1:ec:99:88:
         18:48:94:0c:4b:2e:67:66:56:e8:cc:92:49:90:11:f4:c4:b9:
         35:c0:86:8b:a0:3a:bc:52:4b:4a:0d:19:5d:f9:38:90:33:44:
         42:7e:3d:0c:c4:61:3d:41:d0:f0:8f:e2:55:3c:24:5d:ab:82:
         3d:c3:76:fb:ab:ae:4b:4b:70:36:fe:c5:ea:ff:49:d1:8f:df:
         6e:3f:fc:bd:96:05:b4:12:d8:bd:eb:86:9a:1d:9e:3a:17:e6:
         d1:df:3a:3e:57:00:38:ea:a0:30:30:8d:d7:16:4e:25:2e:39:
         54:d2:fb:3b:82:98:f0:7c:b4:80:37:e1:56:15:8b:8f:3f:fd:
         b6:b2:25:d3:0f:f7:8d:45:f7:b0:f7:c1:33:21:87:46:f2:50:
         75:49:f6:ef:10:20:ea:48:6f:49:18:e4:4f:9f:66:f0:5b:c9:
         15:79:ea:d2:6d:58:1a:05:6a:67:1e:57:a3:88:b5:09:34:39:
         93:8b:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:11 2026 by rpki-client