Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2c4a04cc-2950-3709-9828-750137debf35.roa
File:                     2c4a04cc-2950-3709-9828-750137debf35.roa (raw, json)
Hash identifier:          RAHwFp/WDaSNnKBlMi8gf07CkmmKz+Vzn3CBdVgxexw=
Subject key identifier:   65:F6:A5:87:A2:60:3F:3F:35:84:FC:5D:C5:B0:B8:45:ED:D8:78:80
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584DC56596078A0764461C2D2C00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2c4a04cc-2950-3709-9828-750137debf35.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     5769
IP address blocks:        24.225.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:96:07:8a:07:64:46:1c:2d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=1c57f442-4f91-4a45-9c96-5f04cdec3cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:5a:30:25:76:8e:85:23:81:32:8b:98:05:
                    49:a3:dd:33:7e:d2:31:08:31:6d:06:8d:84:e7:a5:
                    cd:07:56:74:c8:59:9d:0f:a2:37:71:fa:1d:84:0e:
                    be:96:ae:eb:0a:1c:8f:e9:9b:47:33:3e:3b:97:67:
                    d1:f4:19:09:b0:a3:c9:80:3d:90:c8:8c:cd:9f:3d:
                    fd:ed:67:16:1f:aa:6b:35:07:97:25:9f:a9:6d:d9:
                    fe:32:09:a5:72:f2:51:f0:72:8b:a4:72:ef:74:1e:
                    45:6b:40:1c:80:e4:4f:c1:19:6d:ca:0f:c3:ab:79:
                    8f:be:38:06:7b:26:87:6a:62:ef:e5:fb:81:f2:42:
                    75:a5:9a:a3:3f:73:fc:5a:c5:85:e9:55:62:8d:cb:
                    0f:d8:7a:f0:95:e7:16:e4:e2:59:3e:ea:2c:6a:04:
                    a8:cf:59:ba:e6:32:14:a3:99:85:8c:cd:31:82:0f:
                    95:82:4c:a6:71:da:16:fa:d4:33:a1:73:fa:7b:8b:
                    b7:d3:e7:ad:0d:22:0f:ef:f8:fe:88:d6:1f:02:7d:
                    2c:83:8f:17:e4:62:d8:76:b0:ce:89:75:ba:69:8a:
                    6f:c9:90:98:48:7e:27:ff:11:f7:85:28:66:2b:c0:
                    4d:f7:f4:fe:ed:76:e3:7f:ef:75:0a:6a:a1:5f:2c:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F6:A5:87:A2:60:3F:3F:35:84:FC:5D:C5:B0:B8:45:ED:D8:78:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2c4a04cc-2950-3709-9828-750137debf35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:57:90:b7:ba:d6:83:66:7a:3b:31:1f:a8:7d:4f:8c:25:15:
         ae:ae:8a:47:51:cb:cc:84:cc:70:94:a8:b1:1e:9c:5f:e7:d4:
         64:a2:6f:c0:d4:4d:95:c5:30:c3:02:73:a3:ef:42:43:ce:9d:
         98:1f:a0:a1:b0:78:20:b1:bb:59:03:0e:3f:12:ed:42:c1:3c:
         d1:79:65:47:af:a0:05:5c:8a:2f:d5:c5:24:7e:97:b5:5c:78:
         36:cc:59:71:40:f7:ba:5e:39:97:04:73:4c:c5:9d:0d:e3:09:
         92:91:59:bc:37:f0:4a:24:c8:1a:ad:39:cd:30:ff:99:54:69:
         f3:e7:5b:21:52:77:72:ce:80:46:b3:4a:76:5f:c7:2c:56:9e:
         7a:5e:fa:66:1b:b4:86:a7:b9:30:15:84:b4:8b:f0:46:6e:db:
         bc:e6:e4:fd:16:6b:a7:2c:c8:6b:50:f7:65:1f:f8:85:02:fb:
         e8:1f:ba:1c:45:4c:15:74:25:9e:43:df:df:7d:9d:b4:20:5f:
         7e:bc:2b:48:ac:33:a8:b7:14:e2:76:de:9b:d3:1f:da:75:7f:
         02:69:74:38:31:c0:74:21:56:54:12:de:1d:1d:ac:7b:5b:d6:
         66:7a:70:c3:92:da:4e:0a:58:6c:d0:3e:22:40:08:60:6b:2d:
         12:cb:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:49 2026 by rpki-client