Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa
File:                     d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa (raw, json)
Hash identifier:          73Cxrl91jjU7KV/3QGyxrUev3MajgIe7YRaRR2iiexs=
Subject key identifier:   BE:F1:79:DB:81:57:B9:9D:F1:BB:1A:68:A0:B0:8C:70:94:91:22:05
Certificate issuer:       /CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139
Certificate serial:       010D0C9F4328584EA79504ED327CA99EC56CE700
Authority key identifier: E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2535
IP address blocks:        164.63.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:04:ed:32:7c:a9:9e:c5:6c:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5c0df167-2cad-4195-b722-127ed496ada5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:86:84:f5:1e:77:f4:76:1b:76:ff:eb:05:
                    de:d1:3c:75:6c:43:b8:dd:09:9d:b4:55:5c:10:9f:
                    aa:a9:ed:f8:db:99:b4:e8:88:54:ac:f3:f1:d0:90:
                    da:c8:6c:34:5b:a9:d9:41:dc:d5:39:6c:88:d4:df:
                    29:87:b3:a4:40:d1:8c:3b:9c:93:35:65:54:63:39:
                    3f:8c:fa:62:19:98:46:97:5d:3b:59:72:33:16:d5:
                    6d:fd:84:10:ac:4a:67:a0:4a:9b:66:e8:3a:e8:26:
                    85:d6:8f:0b:8c:8f:43:9f:34:01:65:05:1a:42:10:
                    66:70:21:c5:28:9e:6e:a7:34:e8:ff:ff:2e:e3:e9:
                    48:65:4c:ee:89:85:6c:aa:73:ba:b4:00:8f:49:a5:
                    43:79:96:51:31:8a:db:d5:6c:64:aa:3d:8b:a7:4a:
                    3e:e9:ac:b8:44:ce:1b:4f:b8:4d:4f:df:d9:1c:a1:
                    eb:8d:8f:7b:04:f3:82:c8:29:30:d1:f9:c0:6a:2b:
                    3a:c3:a8:3d:eb:d3:2c:2d:5b:97:1d:7e:b5:a2:5e:
                    bf:e2:4d:2d:ae:01:95:fb:6a:b9:33:fe:9b:4f:d5:
                    21:54:bc:6e:65:1d:4c:e8:c8:5c:03:71:a4:20:4c:
                    e1:eb:0b:e7:1d:28:96:a7:b8:38:59:a3:c8:f3:84:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:79:DB:81:57:B9:9D:F1:BB:1A:68:A0:B0:8C:70:94:91:22:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/d7aec6f7-46ff-3b64-9ffa-e2953521321f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl

            X509v3 Authority Key Identifier:
                keyid:E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.63.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:34:80:4e:16:f4:76:79:d8:81:d3:63:8b:23:fb:af:60:
         42:ae:02:01:77:6e:99:2c:32:72:91:fb:65:11:3c:b3:b5:fb:
         17:87:d7:f3:ed:b8:74:20:20:b8:c8:88:2d:cf:d4:98:57:58:
         d8:99:d3:79:d2:4e:77:6d:4a:b5:63:51:51:77:40:c3:6c:5c:
         13:5d:fb:35:08:f1:1a:45:8d:bd:c9:c5:54:43:4e:a4:68:12:
         ac:5f:d9:1f:cd:98:4a:d9:6b:38:88:9e:7d:ae:82:88:21:da:
         28:88:1f:f4:33:76:f8:8c:14:36:4f:89:f5:e7:f6:39:5c:00:
         16:fb:a0:9b:39:36:0b:33:c9:2e:a5:77:9b:dd:56:04:f7:56:
         a3:8b:f1:69:63:c4:e8:a2:09:4c:f3:36:70:d1:57:24:fd:c6:
         75:71:db:c9:26:43:4f:cc:4f:d5:07:e6:f2:ab:3d:93:de:3d:
         61:fd:b7:22:ea:0b:d8:1e:91:9a:c3:f9:4f:3a:eb:31:87:ad:
         54:c4:62:14:27:ef:22:08:fa:fe:8a:0b:ec:b9:cf:8e:f4:f0:
         42:9d:45:74:eb:2a:fd:b3:7f:8a:bb:ff:3b:54:e5:98:86:f1:
         2a:69:f2:93:a3:d5:fd:15:e1:15:7a:f5:8b:5c:76:69:70:ed:
         c5:dc:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:12 2026 by rpki-client