Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa
File:                     507729c2-e423-364b-9ad4-8254769227ae.roa (raw, json)
Hash identifier:          jAFx+4MhWpnXQ0GQRHt14gyYLT6Hwi5mOBiIb3W+wwo=
Subject key identifier:   52:A2:5F:3E:5A:E8:FF:2C:22:31:F1:E1:CF:E8:C3:CA:7A:C5:0B:B2
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584E97B503FC0C9B0373E619EF80
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     54004
IP address blocks:        64.84.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:03:fc:0c:9b:03:73:e6:19:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=61697acd-58c4-4546-95ce-36bf578c798c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:19:88:be:35:be:fb:b3:79:64:3a:a2:ae:
                    02:89:b6:0d:14:07:ff:4e:cc:7b:2e:5a:08:85:7a:
                    95:85:ef:4c:e6:ab:09:8d:81:88:7d:e9:a5:e2:0d:
                    51:9d:46:94:bd:a5:ac:84:89:72:2a:42:c5:c1:c9:
                    d3:e8:e0:b7:90:a8:be:bb:ce:bb:36:0d:a1:e1:60:
                    32:62:07:36:cf:a0:61:fe:48:e4:e5:87:ed:e5:de:
                    54:d4:b6:52:0c:a7:18:19:0c:24:3e:34:f9:48:4d:
                    09:55:b6:03:71:21:8c:cf:3c:dd:80:06:79:25:e3:
                    62:20:35:62:01:01:79:68:5d:70:34:60:ac:36:a3:
                    82:cb:da:68:d3:cc:99:4c:bb:1f:7a:d2:64:cc:57:
                    6e:39:12:a0:92:ee:bf:26:12:d3:89:55:0a:0a:d1:
                    80:df:f5:71:5a:5c:85:3e:36:34:25:48:65:26:ae:
                    28:f0:d4:e6:0e:ce:00:3d:ad:04:46:d3:4a:91:31:
                    c4:36:b4:af:1e:3d:24:da:21:34:9b:46:78:7e:07:
                    52:b5:b8:20:fc:04:a0:91:81:14:8c:1d:ac:fb:96:
                    eb:f2:27:49:6a:89:1e:ec:a7:01:28:98:ea:fa:a5:
                    b7:0f:75:02:f7:5e:83:1c:71:40:60:b8:87:72:3d:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:5F:3E:5A:E8:FF:2C:22:31:F1:E1:CF:E8:C3:CA:7A:C5:0B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:50:fb:1a:15:8c:3d:c1:50:d7:34:42:83:52:d2:17:e3:
         5c:cf:d8:34:e3:1b:07:ce:2f:11:5c:f3:91:70:06:a0:8a:79:
         49:48:bb:18:ef:f5:c7:1b:e2:75:54:94:b9:16:50:69:23:fa:
         25:95:b0:8e:bc:90:78:ae:1e:85:cc:c8:20:4c:d4:ed:c8:41:
         51:e5:00:28:b7:17:0d:fb:18:b5:62:f3:5d:3b:4f:32:55:37:
         fe:b3:98:ff:b4:89:90:f8:81:20:b6:f4:29:4c:c0:9d:c3:70:
         36:47:07:e5:e9:97:a9:d3:4e:73:b9:fc:95:b9:35:6b:80:fe:
         b6:23:30:f4:f4:cd:76:36:0e:7c:ff:ec:d8:a5:6f:16:d7:65:
         62:bc:50:f5:85:ff:dd:01:0b:8e:57:08:a2:de:3c:48:4a:29:
         21:83:b5:7e:e8:70:03:42:61:fc:8d:ab:6a:f4:7f:8a:bc:85:
         c4:2f:ec:d5:f2:ff:1d:03:1d:c8:81:26:b9:ca:5c:da:5e:29:
         17:a6:1d:28:cc:fc:53:b1:c7:67:29:20:40:79:98:84:2a:e6:
         d6:59:b7:0e:f5:ea:d0:47:9e:b5:a8:26:39:62:c3:4f:6c:f0:
         79:f7:4b:c7:ce:74:1c:50:93:8d:cf:b4:98:28:87:ba:9c:2d:
         ac:7b:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:22:20 2026 by rpki-client