Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa
File:                     02940a4b-8f05-3cde-9acb-b94b17f34781.roa (raw, json)
Hash identifier:          CRZaVH5kCqrG6CZ1uaYeA/MkmCfm426A3JNeS8dcE28=
Subject key identifier:   58:94:36:FE:C6:41:1E:AF:AC:ED:FB:4F:82:6E:D6:0F:8A:76:02:A3
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584E97B5086BBC104FC2D5E13480
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     7922
IP address blocks:        64.84.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:08:6b:bc:10:4f:c2:d5:e1:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=dd9db047-f4f9-4e7b-a7b1-da9dbb9c7712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:d4:2f:65:59:5f:47:08:eb:e8:63:e8:14:
                    2e:5b:93:2d:a4:d7:35:c5:ac:ce:cb:3b:2f:38:cb:
                    11:d7:ef:fc:b9:48:a9:43:d9:6a:2f:29:de:dd:7c:
                    0f:49:1b:5c:be:12:f9:fc:61:62:c4:9e:98:ba:e5:
                    f7:19:9b:f1:07:e1:0b:ff:6f:68:3f:87:0b:3b:b7:
                    d9:70:3b:3c:f2:db:1a:82:16:6a:69:3e:e4:c4:09:
                    51:ba:f8:20:48:d2:53:0e:34:05:5d:3e:de:af:71:
                    4e:3d:70:65:23:77:78:59:f7:cc:88:bd:be:b3:e5:
                    01:14:b1:05:43:69:f8:fb:9b:51:f0:7f:23:ec:03:
                    93:d6:9c:ab:67:e9:3f:ea:59:75:89:eb:8c:d3:61:
                    de:1c:09:e6:4c:86:5e:07:be:7e:72:9a:21:a4:48:
                    e4:55:33:74:5c:bf:45:01:84:62:34:73:1f:6c:39:
                    d4:31:30:47:b9:e2:0c:09:29:53:9a:d7:82:38:22:
                    48:98:b9:ca:5b:85:8c:a6:d2:0f:52:f6:1d:d6:a3:
                    6c:48:50:19:2e:51:e6:c7:f5:43:a1:7b:f5:9a:93:
                    0f:a9:23:0b:65:9c:01:2f:6f:36:fa:a3:01:a5:7e:
                    73:dd:1e:8a:10:37:52:a7:b2:73:79:d9:d0:92:70:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:94:36:FE:C6:41:1E:AF:AC:ED:FB:4F:82:6E:D6:0F:8A:76:02:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/02940a4b-8f05-3cde-9acb-b94b17f34781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:87:f5:b6:2b:57:20:73:5f:43:3c:08:32:57:a8:99:d6:63:
         4d:98:3c:40:cd:03:b0:0c:0f:ab:20:e2:e3:10:ae:a4:35:24:
         f3:c8:63:8e:51:a5:90:c4:08:b7:ab:83:9c:2d:af:52:2b:e1:
         93:a2:3f:e6:fe:18:d3:05:f3:b8:e8:a4:de:6a:cd:f4:1c:87:
         bd:21:26:a0:df:2a:99:4e:5b:db:18:1c:58:94:f8:ef:a4:bc:
         33:40:83:52:e8:c2:fa:74:04:06:5b:b2:b0:56:9c:d9:a3:31:
         8c:9d:81:a7:7a:f9:16:a4:37:4b:ff:ef:55:26:34:9c:55:f4:
         a9:86:56:70:18:a7:63:7e:61:16:3a:54:4a:a4:9d:f4:a8:f5:
         0e:a8:12:9e:3d:60:a0:26:67:84:8a:29:c4:5d:c1:92:ab:45:
         cd:e0:c4:f2:ae:5c:5d:ba:d6:99:42:23:23:39:9d:10:90:ef:
         b0:b6:d4:7b:9f:fe:5d:eb:5b:48:71:52:9b:7d:a9:7d:c0:ec:
         5b:03:b6:b4:61:c1:a5:72:71:65:97:8c:df:10:19:51:60:44:
         1b:3f:af:8a:0d:83:23:54:a0:e0:e3:71:a1:da:b4:f6:c8:e6:
         cb:78:68:7c:88:56:7d:2f:73:eb:9d:cd:7a:ac:e1:6c:d0:1b:
         bc:ce:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:35 2026 by rpki-client