Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/67f993c0-8d17-3db9-9ba6-8c89fc526b68.roa
File:                     67f993c0-8d17-3db9-9ba6-8c89fc526b68.roa (raw, json)
Hash identifier:          dfztPhKoCBxanKgaaNqLEUON/QvZsqvyr9U/a/HxAFY=
Subject key identifier:   58:73:8B:46:06:A4:7F:2F:AD:4E:27:FF:74:A8:7D:25:A5:BB:C1:1C
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584EA7933030F0A21A31B7DFBCC4
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/67f993c0-8d17-3db9-9ba6-8c89fc526b68.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32164
IP address blocks:        64.38.253.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:30:30:f0:a2:1a:31:b7:df:bc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=92700ce0-d4e2-4a92-9139-657bfed103f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:6e:3c:d1:49:b9:08:33:e5:9c:5c:5f:37:
                    46:e4:8b:74:f7:28:72:14:24:9c:8c:76:fc:b3:31:
                    27:8a:10:cf:b4:2c:4d:db:23:05:16:73:6e:35:79:
                    66:c3:f3:51:1b:57:27:48:d1:92:08:42:ed:54:6d:
                    22:83:a2:18:6e:6a:d2:89:43:72:b3:9f:9a:9d:85:
                    db:34:a5:c2:ea:b9:ee:0f:6c:15:26:29:61:b2:66:
                    1d:cb:f7:58:f6:ec:81:7a:1c:a0:70:ed:5c:07:b8:
                    60:f1:54:03:3e:07:73:62:4f:e3:3a:81:3c:62:b8:
                    8a:24:56:f4:e8:80:b0:21:32:cf:5c:78:6f:89:d2:
                    0c:12:d0:ac:8c:ec:eb:76:59:48:c5:02:0a:40:74:
                    f3:69:92:cc:82:7a:77:e1:e3:56:45:2a:2d:7f:9c:
                    ee:52:84:08:7f:2e:3b:50:3c:1c:46:b3:88:8e:fc:
                    21:d0:5e:db:8e:31:34:5f:9e:5b:9b:4b:db:e4:06:
                    ea:99:06:54:c1:d5:1b:9f:5b:48:30:04:d7:ca:4c:
                    df:81:9e:23:07:09:52:a8:d3:30:2f:f7:b8:47:ca:
                    ab:de:2c:ef:3c:37:60:67:e6:7a:3d:96:d4:5b:2b:
                    a1:ff:4e:6a:c8:d9:13:c7:ec:c8:20:9c:b4:69:85:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:8B:46:06:A4:7F:2F:AD:4E:27:FF:74:A8:7D:25:A5:BB:C1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/67f993c0-8d17-3db9-9ba6-8c89fc526b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:c5:e8:73:79:ba:39:cb:28:61:f0:7a:9b:da:88:2d:7a:
         a7:84:52:2d:7d:d5:29:2c:a0:4f:5c:10:44:c5:e9:36:23:7c:
         81:8e:d2:7f:ee:e8:88:d9:c1:96:80:e3:0f:21:77:81:c3:73:
         de:8c:b1:a3:45:bf:ab:1b:83:52:cd:2c:df:e2:d4:56:bf:6f:
         39:83:7a:ed:ce:ce:b5:c0:fd:56:53:2c:59:4e:92:c1:81:cf:
         04:1d:06:42:36:f3:ac:b5:1e:e2:9a:1b:17:48:a1:52:6b:eb:
         91:17:7f:24:76:94:00:85:37:73:e6:9c:23:40:53:75:2b:2a:
         14:8e:f0:33:5e:f4:44:ee:36:50:bf:3f:21:35:be:1a:ab:c8:
         dd:b6:19:6c:2d:f3:73:0f:37:f9:d3:03:ad:d4:b8:a7:17:2e:
         f2:98:fc:c7:da:89:86:0a:c6:70:1d:77:c6:6e:69:41:b3:61:
         f6:e7:4d:67:fa:c3:89:49:96:bd:82:4b:81:5d:c8:35:b2:31:
         3b:4b:f8:0e:86:c5:5d:eb:17:7b:10:02:30:8b:2e:84:d2:b9:
         21:2c:68:35:02:e5:f0:e8:d7:34:16:15:73:91:30:63:49:0c:
         a1:3e:87:48:04:b6:79:ce:02:6e:e7:00:14:2d:a1:99:55:cf:
         ca:b6:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:08 2026 by rpki-client