Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa
File:                     651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa (raw, json)
Hash identifier:          RQhATp4uGXrq2M1K7TY431aib5ahFg288OYn5f7r9+M=
Subject key identifier:   71:FB:3A:E2:F5:7E:61:25:C9:6F:7E:D1:AA:4C:00:F5:74:B9:28:07
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E9D4A7007D4CD1E5B011C9400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        64.124.221.0/24 maxlen: 24
                          128.177.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:70:07:d4:cd:1e:5b:01:1c:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=6e4ff7cd-cc62-4913-9ac7-daf9c175b010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:de:08:bc:0f:04:85:d3:59:98:c9:b5:9b:
                    a6:7b:75:22:be:f0:8d:28:da:fd:66:02:6d:7d:c3:
                    49:a2:42:78:f7:80:c4:04:17:98:6c:dc:58:82:ca:
                    2d:ed:71:18:5d:dc:9e:30:6a:90:b9:56:98:58:41:
                    9c:83:8c:e6:77:6f:60:fe:54:04:4e:62:93:40:2e:
                    ad:bd:87:dc:98:b5:93:8d:75:83:fb:16:df:43:dd:
                    0f:14:c1:2f:49:b3:2c:42:a5:08:e2:a1:c5:c6:f1:
                    33:21:ec:10:b4:c3:ff:2a:b2:7f:72:cd:be:ad:a2:
                    77:ea:62:06:96:21:1a:45:e7:08:4e:60:c4:f1:e2:
                    e0:9d:7d:89:f8:70:ef:f3:5c:42:89:77:7f:96:29:
                    cf:2f:8b:47:90:32:51:b0:30:60:7a:3b:44:59:7f:
                    8a:81:a0:e9:fb:f2:33:54:8d:8c:a4:0a:77:2f:ae:
                    bc:28:77:ce:59:cd:b3:c0:48:7e:37:64:ff:d3:62:
                    29:2b:48:c7:f3:e9:c9:84:83:19:0b:4a:1d:7c:52:
                    86:80:e8:51:89:45:4e:78:df:d7:06:7c:54:85:97:
                    c2:b9:fc:52:a0:1e:d4:1a:5d:f8:76:1f:32:e8:ad:
                    fe:3f:1e:f0:0c:84:f5:af:a3:11:b6:b5:d7:d6:c9:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:3A:E2:F5:7E:61:25:C9:6F:7E:D1:AA:4C:00:F5:74:B9:28:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.221.0/24
                  128.177.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:5e:31:47:65:e7:95:6a:9b:81:a0:4a:7b:b5:1e:ff:f7:99:
         c2:d0:58:1c:39:10:34:79:72:34:30:33:a8:46:bb:bd:50:d1:
         6d:39:8f:b8:bb:0e:57:01:25:11:79:06:88:d3:a4:a6:50:de:
         9e:53:98:b1:74:33:12:49:d4:19:37:29:d5:1a:d4:68:91:aa:
         d4:e5:b9:d6:d6:dd:79:20:88:22:17:42:68:f5:99:2f:e3:8e:
         19:26:0f:11:12:0e:41:26:d9:20:02:f5:a0:3f:48:42:df:0c:
         77:4f:cb:5f:4d:4b:9d:40:df:53:49:b7:11:5c:38:59:f1:04:
         61:cb:8b:35:9d:48:f7:00:2e:83:3b:db:e2:e5:30:17:e4:f3:
         67:bd:1c:6f:93:72:54:de:2f:a0:9c:bf:46:5d:5e:5a:42:ef:
         27:a5:3e:fb:74:40:7c:e0:61:a9:45:d7:7c:ab:b7:a5:be:0e:
         cc:65:b9:21:15:87:57:36:c8:47:73:87:35:79:63:81:35:ef:
         a8:18:09:25:d9:bf:19:db:ad:e5:69:86:34:bf:a0:d2:32:ce:
         9e:9b:f0:43:48:32:25:3f:fb:f2:6b:56:80:ee:f9:d6:81:66:
         ed:3a:68:1f:95:a3:43:b9:9b:99:9c:58:03:46:f4:be:26:c3:
         82:9b:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:42 2026 by rpki-client