Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
File:                     7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa (raw, json)
Hash identifier:          lmLov4QSwVqgGU1fGQYvcuPHy8j4Y24lKvi584VHjfs=
Subject key identifier:   D2:FA:39:9B:30:C7:D3:DE:CD:8B:24:13:57:E8:03:80:0C:9C:BD:EB
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584EA79013D1C85FDB501F65AB80
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        168.91.64.0/24 maxlen: 24
                          168.91.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:13:d1:c8:5f:db:50:1f:65:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=889b90d5-6d09-4bd4-8df3-6d5492e83991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:c7:28:f9:ce:6e:de:ff:86:e5:49:99:6e:
                    5b:0b:7d:2d:5b:23:e6:c6:ec:aa:60:40:af:14:ed:
                    16:83:a1:15:1f:e4:36:e7:aa:7c:42:e6:6a:e4:ac:
                    8e:1d:69:25:72:07:a9:0f:17:b4:c1:bd:7d:c6:28:
                    6b:85:36:cf:a8:c4:6e:3e:ad:b3:6f:e0:ae:d4:a6:
                    b5:7f:fb:99:3e:a7:a6:ae:f6:c9:b5:7f:a8:63:02:
                    c8:85:bf:d6:2a:53:d8:ae:7e:84:b4:ea:16:f0:f3:
                    23:fc:9b:60:b2:73:37:ab:2b:de:78:d8:fd:3f:c6:
                    41:95:e4:45:47:92:01:91:3a:45:c3:fc:21:21:29:
                    05:f9:65:cc:e7:f4:87:4c:b4:ab:4f:ab:83:97:9d:
                    44:f2:06:55:84:01:70:64:3b:f8:4c:6d:97:c2:e5:
                    21:a9:f7:b2:af:e8:0b:8d:f2:1f:bb:42:4e:7a:c7:
                    82:ee:73:6d:06:2f:6b:e2:89:6d:0c:23:c4:00:dd:
                    44:53:62:ad:f9:ea:b0:d1:66:29:3b:48:7f:2b:d9:
                    f5:9f:ce:5a:35:ec:93:8f:af:ba:5a:2b:82:7a:b8:
                    3d:10:93:e8:e2:07:54:b7:7a:78:7c:43:64:e1:45:
                    78:91:ef:cc:42:9c:3d:67:02:a1:c6:2b:6b:84:16:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:39:9B:30:C7:D3:DE:CD:8B:24:13:57:E8:03:80:0C:9C:BD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/7a6b1a7b-9bd7-3c5a-8217-55a840c360fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:db:fa:3f:59:3f:57:ec:ff:19:a1:4e:a4:9f:72:32:40:e6:
         0f:d4:db:93:f9:0f:a8:22:2d:9d:f6:7f:c4:92:86:06:6c:49:
         89:4e:c8:02:73:e2:c2:60:f5:c0:98:31:a4:40:34:1b:73:25:
         5f:76:74:08:b9:e8:fa:71:6c:b6:e4:18:2a:ee:00:72:1d:81:
         2d:f2:50:c2:77:a4:cc:c4:8c:f6:b7:03:77:8e:28:98:77:cf:
         bc:12:7d:54:36:35:f5:61:ea:ee:f8:2b:34:94:f1:17:8b:c5:
         69:e7:6f:0c:b8:67:10:c1:4c:c5:7c:58:93:9b:52:c2:97:b4:
         b2:94:52:3e:40:bf:fd:1a:7c:cf:a7:51:9a:42:d6:8e:31:d4:
         d5:da:b0:91:8a:9e:00:83:fd:01:a6:c3:75:56:fe:84:b7:b2:
         1c:41:72:7d:8b:40:2d:0b:28:5b:22:84:87:ff:df:34:0e:8d:
         2b:83:4b:40:5c:84:75:78:2f:1b:c7:3d:fb:f8:5e:6b:8a:c7:
         3d:90:b2:5e:ac:62:90:06:e2:54:a3:32:89:89:8b:f3:4a:61:
         c5:33:4b:b7:bc:11:87:fa:04:53:54:40:d4:cc:2f:08:b0:2b:
         c2:d5:e3:5e:db:88:fd:a4:11:bc:f4:4e:1d:f1:0e:79:a4:47:
         f5:51:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:09:03 2026 by rpki-client