Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/48062383-12d0-3b10-ac0f-d117231d28c6.roa
File:                     48062383-12d0-3b10-ac0f-d117231d28c6.roa (raw, json)
Hash identifier:          ++Q80UkhF6m03PeDXrc1QR2i863v5P+9RqI3zNHdTsI=
Subject key identifier:   5D:28:6B:2E:CB:2D:0A:0B:70:84:94:45:35:64:91:FA:9D:7A:72:B8
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1F23EFB518880B726D4F80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/48062383-12d0-3b10-ac0f-d117231d28c6.roa
Signing time:             Fri 24 Apr 2026 23:22:02 +0000
ROA not before:           Fri 24 Apr 2026 23:22:02 +0000
ROA not after:            Thu 23 Jul 2026 23:22:02 +0000
asID:                     20001
IP address blocks:        64.16.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:23:ef:b5:18:88:0b:72:6d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:22:02 2026 GMT
            Not After : Jul 23 23:22:02 2026 GMT
        Subject: CN=08bc52af-a8ce-45dc-9ba4-af8b26341c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:41:cc:47:33:3e:ba:29:de:3f:ff:74:8f:
                    da:4a:15:6f:e7:25:d6:7f:8e:eb:64:a5:00:c2:08:
                    79:8d:cc:8e:0e:fd:e0:95:44:63:1b:74:d3:4e:b1:
                    99:34:b2:59:33:ed:40:e8:ae:a7:4b:ba:8c:5b:d1:
                    3d:45:a8:bd:91:19:ca:c6:b6:aa:50:7b:5a:3e:33:
                    b9:29:9f:68:aa:73:eb:c1:6f:14:b8:ee:cd:4f:32:
                    34:a2:98:b5:33:7a:71:9c:52:91:19:9d:4b:83:6f:
                    83:cf:b4:93:8d:9c:22:51:ff:77:15:9e:75:06:03:
                    3a:1f:c6:60:40:0b:d0:45:52:56:81:6f:f9:be:07:
                    35:48:b9:7d:fb:5e:4f:15:72:18:ef:8c:f3:48:f3:
                    ab:0e:be:07:86:7c:7b:60:47:09:c4:60:47:99:71:
                    86:ab:f6:15:76:e0:05:74:3f:f5:35:8c:bd:0e:59:
                    d9:68:7b:7f:f0:df:96:f8:4f:21:86:d3:e3:b8:c2:
                    b7:30:2b:9f:5b:ee:e2:f1:dc:fc:91:13:0e:60:15:
                    70:27:3d:92:c2:78:0e:1b:6b:d7:51:6d:0e:3b:e6:
                    48:26:a2:31:47:81:38:bb:d8:b6:b1:79:d1:df:63:
                    b8:80:6d:3c:3e:8d:b9:3c:a5:9e:96:c0:36:0c:4d:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:28:6B:2E:CB:2D:0A:0B:70:84:94:45:35:64:91:FA:9D:7A:72:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/48062383-12d0-3b10-ac0f-d117231d28c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c2:be:9a:1b:78:4c:eb:78:aa:0a:a7:86:6e:7c:ef:bb:f2:
         c5:ec:45:8a:b1:6f:32:e8:53:b2:70:80:04:f4:cb:75:12:b8:
         ed:4f:e7:83:2a:7b:54:4a:2b:d0:38:cd:e5:31:1b:e9:b9:d8:
         7a:fd:e4:69:dc:d4:db:bc:7a:e7:bc:a8:4b:03:9e:38:17:45:
         0d:3e:4c:1c:bb:3b:69:49:de:3a:3d:0c:fe:b9:ab:38:14:a3:
         d8:ae:9d:92:07:8b:38:8b:03:a8:b8:6c:63:21:80:47:96:fa:
         3c:b7:9a:a7:49:d8:00:0c:98:78:83:4e:1c:a1:9f:6f:1a:e6:
         83:40:a3:33:54:7c:68:17:8f:ff:4e:7d:bc:c6:aa:f3:f5:aa:
         2c:dc:6b:66:28:94:70:17:7d:7d:c1:d9:6f:b5:b4:44:8c:c9:
         88:c1:e6:dc:31:fd:6c:c9:8a:55:b3:73:05:81:93:ca:cc:cb:
         21:51:f8:18:31:9d:2b:06:2a:1f:41:6a:6e:bf:6a:ce:50:af:
         22:35:74:22:d7:51:47:7b:3e:81:00:79:cc:0c:ac:f8:3a:2d:
         66:48:52:81:80:bb:38:18:48:bb:fb:89:92:67:4b:2d:12:bb:
         f9:9f:ae:0e:32:04:1b:97:de:e4:bd:52:05:fb:52:fb:42:73:
         85:0a:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:04 2026 by rpki-client