Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0a2ef3f1-12e8-37c3-ab35-a3986f267d85.roa
File:                     0a2ef3f1-12e8-37c3-ab35-a3986f267d85.roa (raw, json)
Hash identifier:          P7vBZyN1I5Zz6Xqd+mrPF/CXN75EhQnEhkLSMtoXq9w=
Subject key identifier:   76:A9:08:D1:66:C0:63:66:22:4E:25:B1:79:10:20:1B:A5:63:0C:FF
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584EA7889762555343AF4885EA00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0a2ef3f1-12e8-37c3-ab35-a3986f267d85.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13760
IP address blocks:        64.239.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:97:62:55:53:43:af:48:85:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d3141cae-aa4d-4e89-9d6d-9c86a2253cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:80:4e:fe:66:70:39:fd:56:81:0d:f5:52:
                    47:ea:1e:6c:29:9b:4e:6b:cc:f3:4a:a3:38:04:d0:
                    78:26:99:29:c9:72:3a:8e:a1:ab:70:66:02:c8:26:
                    39:5a:af:4f:84:56:81:5f:e6:ed:52:3e:2c:5b:8a:
                    71:c7:42:fd:88:7b:bf:6f:ac:f1:51:5a:64:ba:6c:
                    b8:63:6b:b7:1d:2a:b2:d0:53:38:f3:e7:ad:7e:2e:
                    c5:50:f6:1d:7e:d7:28:75:de:df:b5:2f:17:3a:9a:
                    ec:6b:16:33:c1:5d:66:5b:04:06:85:15:b5:5c:4e:
                    ba:3b:5c:4f:2d:d4:03:da:db:99:79:a1:65:d1:ec:
                    0f:04:35:cf:d1:48:d8:97:11:33:96:e7:9e:18:cc:
                    2c:d6:45:02:ad:24:52:a6:16:20:d4:5f:35:e8:d8:
                    3d:0b:75:60:59:71:65:43:51:b5:85:a7:93:ea:d0:
                    d8:22:90:0b:5d:b4:12:38:e8:8c:84:36:49:43:a2:
                    ab:b7:af:dd:c9:2d:b7:c5:8c:38:ff:a9:54:fc:ca:
                    29:40:c5:65:99:1e:7e:f9:d4:7c:55:1c:d8:eb:1e:
                    3d:89:95:77:65:f5:11:62:78:d8:c4:78:3c:6a:97:
                    f7:2b:2c:f6:65:b1:68:37:d7:7d:26:d4:11:97:85:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:08:D1:66:C0:63:66:22:4E:25:B1:79:10:20:1B:A5:63:0C:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/0a2ef3f1-12e8-37c3-ab35-a3986f267d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f9:2b:82:a8:28:97:98:2e:ab:69:fb:84:ad:d7:49:d0:69:
         1b:8f:d9:0b:87:ae:7e:31:c7:a9:d1:f5:da:1b:56:da:76:73:
         32:12:7d:c8:de:04:d9:b1:dc:d6:f7:c6:a3:96:e5:47:06:4c:
         e6:56:23:c1:77:5e:ba:f3:70:2b:e4:43:f2:98:52:48:a2:a8:
         36:fa:fb:02:e2:64:bb:48:3b:be:1b:0f:87:ab:d4:db:65:12:
         2b:e6:21:45:a7:27:29:a6:d8:89:53:57:88:2c:3d:88:7c:b9:
         46:b6:aa:09:4f:44:25:b2:f8:f9:99:13:10:37:bc:d3:a9:ba:
         a2:7b:1b:04:f1:4e:e4:f0:48:9e:4e:62:7a:fb:a9:1a:a7:af:
         86:ff:0f:07:0c:a6:7b:30:58:f6:09:dc:04:77:20:15:37:7f:
         3f:46:26:c6:ef:07:02:9e:32:bc:a4:0d:2e:a4:8f:c0:7b:cd:
         79:d2:97:e3:43:17:1f:18:90:6f:c2:5f:a0:14:b5:79:39:3e:
         1e:fd:ed:c4:bc:93:51:ec:e3:c0:91:ca:77:8a:50:21:22:93:
         9d:9b:7a:1e:ba:07:d5:cf:e0:de:ef:43:79:f2:33:6a:24:a2:
         93:a2:28:3c:c2:56:c4:92:b7:c5:f9:29:d9:98:a3:39:cb:f8:
         95:d5:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:54:23 2026 by rpki-client