Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5998baa-42c9-3b3b-93de-9b26d4aba158.roa
File:                     b5998baa-42c9-3b3b-93de-9b26d4aba158.roa (raw, json)
Hash identifier:          kF3/8bC8MZJ6e8UarxzxYK4Spk+hgllt6mvs28Ezfp0=
Subject key identifier:   7F:57:FE:FD:C6:67:49:75:0B:C2:44:1D:D7:4F:B1:9E:D8:AD:A5:DA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E9D4A8FA228D901992BF3D240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5998baa-42c9-3b3b-93de-9b26d4aba158.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     397215
IP address blocks:        64.6.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:8f:a2:28:d9:01:99:2b:f3:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=aad04b9a-c57f-48a9-9245-f7a712e6d666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:32:f5:d7:b9:79:23:b4:1d:a7:2b:4a:44:
                    23:17:3a:1c:ab:62:d0:69:37:6f:b2:4f:1f:14:d5:
                    e5:1d:c7:fb:a2:56:da:a9:a9:cd:70:72:0a:31:5c:
                    42:4d:73:89:58:46:6d:6e:34:b6:a5:17:2c:5d:00:
                    26:76:bf:dc:4d:65:95:9a:a3:d1:db:40:27:e2:4c:
                    ee:71:23:ae:3f:63:65:80:82:63:33:d0:37:72:a3:
                    62:32:85:83:55:70:83:66:f6:28:5f:fd:48:3f:ac:
                    61:8c:df:ba:51:a9:63:e2:3b:57:c3:66:6d:d6:6a:
                    e8:34:41:66:51:8a:20:ba:2b:32:45:94:41:3c:34:
                    af:70:88:ec:82:3b:f0:d9:75:2a:54:97:87:6f:db:
                    dd:fc:16:31:bf:fc:7e:01:72:e8:47:5c:03:58:56:
                    20:c1:fc:61:f5:9d:8b:61:74:54:50:3c:c5:13:4f:
                    e9:18:82:f0:0e:85:bf:bc:ae:86:60:57:ba:dc:2a:
                    e1:4d:ff:7a:81:54:74:36:12:52:8b:47:82:cd:f5:
                    a9:17:be:65:43:70:06:7b:a0:30:1d:2b:88:93:6a:
                    a8:d0:4d:37:be:09:7d:45:34:5f:e9:96:8d:a7:2e:
                    94:84:ca:02:0a:cc:2e:35:50:92:06:bd:b0:ce:5a:
                    77:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:57:FE:FD:C6:67:49:75:0B:C2:44:1D:D7:4F:B1:9E:D8:AD:A5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b5998baa-42c9-3b3b-93de-9b26d4aba158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:ee:19:68:f3:2a:04:1a:31:1a:5b:f4:77:dd:3f:8f:75:
         07:6c:89:10:e8:93:ad:14:f2:1d:ad:32:94:62:83:e6:f8:01:
         f8:99:50:a0:a7:10:fd:12:64:22:23:af:9b:26:c3:70:a4:37:
         5b:c2:f1:e7:7d:b3:cf:4b:53:10:c4:77:6b:6f:5c:da:b3:98:
         cc:a3:6b:0b:66:ee:4d:ef:bb:41:b2:e0:2b:1a:e5:38:b5:36:
         c2:ec:b0:57:90:0a:1b:9f:f6:47:b1:aa:1a:b9:c9:48:a1:7c:
         92:6d:fa:dd:a6:81:fe:a9:a8:de:8b:b4:55:bb:cf:53:46:d3:
         ac:45:52:27:56:12:e1:d5:43:1a:1b:96:e6:ba:73:55:06:8b:
         60:5f:b8:90:f1:23:3e:d8:60:55:92:69:1c:65:7a:24:2b:3a:
         61:29:38:7c:6d:18:01:3e:1d:30:e4:a8:f3:b9:06:78:71:90:
         9b:40:4f:45:58:e6:fc:11:24:29:67:61:3d:2e:fd:30:10:4d:
         92:91:c3:a9:aa:81:38:8e:39:d3:98:f6:8a:61:ad:6b:b0:00:
         e1:ad:49:9b:e6:ed:b8:b0:e3:c5:19:12:75:1e:b4:b4:74:e3:
         6a:22:ca:8f:f4:2b:55:3e:19:5e:76:61:88:20:64:99:ef:4b:
         ee:48:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:41 2026 by rpki-client