Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/7a8b5884-0782-336c-beaf-50c3844574e4.roa
File:                     7a8b5884-0782-336c-beaf-50c3844574e4.roa (raw, json)
Hash identifier:          Bml+JrQ5pPUuMpHwgB+AEIpIlqtUfP5FTWtVcglof4E=
Subject key identifier:   0C:10:FA:F9:F5:23:CD:79:06:69:19:83:DE:C7:59:BA:34:00:2A:0D
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D571FC02AB368BBAFF95F3300
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/7a8b5884-0782-336c-beaf-50c3844574e4.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     398391
IP address blocks:        64.226.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:c0:2a:b3:68:bb:af:f9:5f:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=d70afa21-c683-4cc8-9834-6c85095f833e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:a9:1f:54:c0:2c:72:81:b0:9f:41:8f:61:
                    15:46:13:2c:60:d5:cb:6b:0b:fc:3f:6d:1e:30:28:
                    a9:bb:52:94:7b:58:15:1e:fb:f3:e5:1f:a8:6f:86:
                    1f:29:2f:ac:d5:8d:31:1d:b9:be:4f:88:83:2a:d2:
                    c6:c8:39:38:2f:26:33:40:33:0b:8f:fc:c5:f1:7c:
                    b5:40:39:89:72:e7:df:c2:31:8a:f8:2c:8f:8d:f8:
                    8d:9b:5e:f3:74:17:16:db:80:13:7e:f2:ce:db:a0:
                    1c:69:bd:9c:37:8e:7f:25:72:bf:85:c8:99:f9:9c:
                    87:37:84:c2:a8:44:b2:af:ae:32:76:7e:e5:c9:42:
                    6b:3c:03:00:56:7d:08:94:7c:59:1f:49:28:46:c0:
                    64:94:ad:98:79:09:ae:4c:6c:aa:c8:eb:3d:4e:89:
                    b6:54:22:57:48:37:8d:1e:33:12:78:c0:78:cf:a9:
                    2d:b5:7a:20:e1:a8:a1:d2:1d:ef:f0:46:53:3f:dc:
                    a4:5d:df:7c:78:b4:b8:9e:8a:0b:53:06:45:59:d3:
                    30:d6:72:ed:d2:c1:47:84:37:13:26:4e:d2:8f:06:
                    aa:db:49:62:e5:1f:d7:10:21:60:ec:c4:03:b9:08:
                    70:a1:94:d9:39:fa:6c:54:2a:88:09:9f:b9:13:dc:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:10:FA:F9:F5:23:CD:79:06:69:19:83:DE:C7:59:BA:34:00:2A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/7a8b5884-0782-336c-beaf-50c3844574e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:f6:e2:a3:93:d1:f4:4a:46:7a:e3:86:3d:16:99:64:e2:
         e0:e3:bb:c5:44:c3:a7:12:0e:ec:5a:79:00:1a:7a:bc:cb:46:
         c9:d1:04:d3:bf:33:e1:cc:ce:94:73:d3:c5:7a:b7:5b:f6:94:
         24:9c:ee:a3:11:1e:8f:17:c5:5e:19:32:62:d5:f8:3f:a6:9d:
         8b:6f:d1:3a:71:1b:36:b2:ac:6b:25:6b:23:13:2d:60:5f:13:
         38:c4:16:2a:ef:34:0e:c4:75:5f:e6:93:96:f1:88:b6:d8:de:
         b5:4c:f2:5b:8c:f9:8f:0d:ef:48:7a:68:61:c8:f9:31:0d:a9:
         e5:b4:c8:10:d7:40:e0:20:80:33:4e:95:13:31:c7:4f:e5:e3:
         f8:c6:85:38:18:ab:17:8c:7f:4c:81:23:88:98:99:e0:a5:f0:
         73:fe:f1:fa:62:ad:0a:aa:07:fb:88:46:83:f9:41:9e:d7:8f:
         22:65:c1:01:17:65:52:d3:17:08:a5:40:ea:07:36:02:58:87:
         f5:ff:95:be:dc:c5:fb:ea:d9:8f:ae:62:91:72:28:7d:cd:09:
         ef:73:9a:6d:b3:c7:33:1c:e1:60:9a:3a:af:73:2a:da:54:da:
         d2:c1:fc:a8:d8:71:79:74:ef:82:7d:df:24:aa:1e:7b:ce:14:
         18:92:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:11:40 2026 by rpki-client