Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d747489-5c7f-3393-a9b0-31f81c2c5f7a.roa
File:                     9d747489-5c7f-3393-a9b0-31f81c2c5f7a.roa (raw, json)
Hash identifier:          aaLR7Sd8C5p3JYeR1PYHc0/onTi66icHOCTCaKU4KaQ=
Subject key identifier:   14:1A:2A:C3:DA:A2:4D:2A:15:50:10:B3:19:EF:D0:3B:73:84:40:B0
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5E79FE0E4C4E0AEA0DC6DEC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d747489-5c7f-3393-a9b0-31f81c2c5f7a.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        64.237.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:fe:0e:4c:4e:0a:ea:0d:c6:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=f505fa80-d71b-4593-aabd-e7ddc6fc6031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:31:59:11:18:99:2a:4d:b6:54:32:e5:ce:
                    d0:71:89:93:54:f3:1b:42:57:31:83:6e:8b:cd:34:
                    4b:f1:c2:a1:41:a0:cc:ad:16:a0:03:8b:fd:eb:07:
                    cc:27:1f:45:81:d5:76:e7:ee:f2:7d:5b:31:a6:c9:
                    df:37:0a:f1:12:79:bb:fb:87:01:ee:a1:e4:52:27:
                    0e:99:5c:ed:f6:fe:ff:8f:67:79:40:3c:c9:74:da:
                    2f:ea:f3:c5:6f:26:2a:69:34:bc:79:58:c3:43:0f:
                    3f:67:cd:d1:dc:84:2a:0d:6a:9b:33:9c:b4:98:d5:
                    6f:46:96:77:8b:02:1a:04:5a:a9:18:39:d1:66:3b:
                    dc:3b:c0:18:2e:4a:9b:95:cd:50:8f:c3:91:3f:06:
                    87:ee:eb:58:b4:cf:87:ef:c6:54:f5:86:c2:02:1b:
                    4a:54:91:08:8c:cb:27:59:66:90:f9:4c:3c:c4:47:
                    5e:78:db:2b:23:ab:3e:55:37:36:5c:ba:39:f4:ad:
                    b1:f4:75:b4:3e:d4:54:e2:29:13:96:40:79:c0:22:
                    8c:81:7d:d0:05:f1:ed:e4:4d:3d:ce:60:f2:b2:79:
                    e5:6f:20:42:c4:fb:e5:63:4a:a2:3d:da:c0:ed:8c:
                    2d:06:97:5a:a9:27:09:ba:79:b6:27:27:8d:e3:f9:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1A:2A:C3:DA:A2:4D:2A:15:50:10:B3:19:EF:D0:3B:73:84:40:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9d747489-5c7f-3393-a9b0-31f81c2c5f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d8:de:dc:13:28:e8:c0:f1:a0:61:01:72:ef:b4:6b:b9:48:
         b7:d5:8c:9f:80:ce:76:3a:1f:80:53:b7:f3:9c:2f:5a:f5:4d:
         d3:e3:28:d6:50:6e:91:2f:77:65:51:ac:fe:a5:2c:11:88:06:
         b3:46:90:9c:20:a8:fd:19:62:66:2b:71:68:a3:55:49:76:88:
         f5:aa:98:e0:ff:c4:5a:89:7b:d5:4b:4f:ab:eb:89:a6:ff:08:
         2b:99:32:c4:df:bc:39:40:63:84:41:86:c4:22:c8:19:bb:ce:
         7a:f7:d0:f2:87:7e:b5:23:09:9f:1f:fd:a8:df:0f:5d:95:28:
         77:16:19:04:bc:72:c5:24:76:07:39:71:d3:39:fe:05:95:64:
         54:29:6f:13:7e:2d:b6:9a:ec:c9:5d:6e:0b:5e:46:1c:03:c9:
         64:cf:c2:64:c1:e8:1e:47:1b:ff:d5:11:b4:1c:d4:14:76:cc:
         6f:41:0b:c8:e0:53:c8:1f:c0:6a:7e:01:69:d4:01:76:99:cc:
         d1:75:ef:16:3f:bb:a2:a4:ac:e4:b2:a7:3d:11:14:b8:01:8a:
         71:d3:cb:7a:8f:7e:7b:48:0e:d4:70:7e:2b:14:8c:7a:f0:df:
         62:36:a1:e7:53:56:04:d1:b8:a7:e8:2b:29:57:61:e8:00:d9:
         e7:69:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:55 2026 by rpki-client