Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/38ec34bb-59f6-3047-8372-ab940e16e074.roa
File:                     38ec34bb-59f6-3047-8372-ab940e16e074.roa (raw, json)
Hash identifier:          NhGB4Ynhd4LkdQAUG6ZrUjuA4NasEdqK4x/2uXbb5dY=
Subject key identifier:   B8:86:83:F1:15:49:16:94:C9:D2:17:D4:69:BC:07:80:EE:EB:36:DF
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F4328584E9A7FCEF0DF836DA991F68800
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/38ec34bb-59f6-3047-8372-ab940e16e074.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     400945
IP address blocks:        63.133.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ce:f0:df:83:6d:a9:91:f6:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=759f158f-2aa9-469f-8c76-dd734e7b48c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:33:01:17:0a:e5:e3:6e:f3:47:11:b0:8c:
                    fa:2b:37:0b:cd:cc:6f:04:d4:2b:66:a2:7a:e2:6c:
                    31:ec:07:12:c5:a7:6f:c8:c1:52:14:46:90:11:93:
                    43:45:0a:5e:64:f6:43:24:82:4d:03:5f:d8:72:19:
                    71:89:24:de:b2:cf:a5:57:e2:ed:80:d2:19:ed:e4:
                    53:3b:ca:f0:44:78:e4:fe:89:50:75:43:68:a9:6f:
                    bc:19:84:4a:37:5e:02:94:f0:30:01:f4:cd:05:bf:
                    24:ce:18:2e:1a:53:24:15:30:77:8a:38:30:ce:8b:
                    16:89:b7:88:74:f1:28:03:f9:b9:bf:4e:09:e5:67:
                    c3:e8:dc:f0:ab:6d:df:25:df:cf:90:ee:b2:31:9b:
                    28:54:67:d2:4f:f4:b9:b1:3c:e5:95:81:a9:fd:ce:
                    be:b9:6c:79:2a:fe:87:82:c0:43:51:94:8a:38:5a:
                    a8:2d:a0:e8:ab:19:0d:b4:bf:31:97:ce:cb:4b:24:
                    de:e8:5e:c2:44:5e:ec:59:7f:d6:67:71:15:63:fa:
                    cc:cb:ce:32:6b:c6:1f:19:c3:6c:3f:09:a5:ef:75:
                    3e:2e:2f:2c:17:dc:4e:bc:27:7a:4a:41:09:40:4b:
                    70:3e:7f:2a:cb:77:8e:4c:5d:5c:c9:b1:e5:e3:9b:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:83:F1:15:49:16:94:C9:D2:17:D4:69:BC:07:80:EE:EB:36:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/38ec34bb-59f6-3047-8372-ab940e16e074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:69:0a:1a:be:35:5f:de:9b:e8:ce:17:45:03:d3:35:d9:
         62:fa:37:af:ef:75:f7:7d:67:bd:c9:25:b1:69:10:25:86:27:
         7b:e9:07:ef:35:a8:59:3b:19:9c:b5:8c:5e:a7:6a:5c:16:6d:
         f0:e8:7a:e5:64:54:6a:63:62:da:85:94:80:04:d8:10:fc:2b:
         23:41:5a:49:82:ca:10:c0:0f:63:16:56:79:5c:e9:f3:10:8d:
         8e:3a:41:89:aa:95:13:08:db:ca:14:3f:bd:8f:8e:01:dd:06:
         2b:e0:d7:92:0b:66:bb:b2:f0:42:47:4f:a9:ea:dc:28:84:f8:
         08:2b:75:bb:6b:20:0f:ed:d4:00:b2:e6:6d:5f:b5:ac:3e:5d:
         e6:53:f7:c1:96:e3:07:a1:1a:31:f0:97:36:88:1f:cc:31:f6:
         9b:ba:90:36:e1:27:6a:d9:99:2b:1f:40:5c:bc:b4:8c:cd:8e:
         46:b4:66:d4:2a:2c:45:29:45:65:eb:d1:b5:8e:56:ec:11:e6:
         a6:6d:85:f1:2c:92:15:8e:1d:00:c3:34:e5:42:95:00:be:c5:
         5d:b4:7a:fa:14:a0:bb:5e:e8:c4:80:f1:1d:61:b3:8e:7c:0a:
         3f:cf:36:d6:5e:91:0c:74:2b:29:0e:ab:79:7f:4d:4f:54:67:
         17:70:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:36 2026 by rpki-client