Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53ac9508-7103-3def-8e40-928a7bb591f9.roa
File:                     53ac9508-7103-3def-8e40-928a7bb591f9.roa (raw, json)
Hash identifier:          f0419+oFuWCddB+/uUG9YQxQKYXAnajAmF4XQIGTHnk=
Subject key identifier:   B8:79:42:76:B0:DC:1C:4B:3B:CA:1D:5F:95:20:53:33:40:D3:F7:49
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1E5138542B17E8344C8900
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53ac9508-7103-3def-8e40-928a7bb591f9.roa
Signing time:             Fri 24 Apr 2026 23:20:23 +0000
ROA not before:           Fri 24 Apr 2026 23:20:23 +0000
ROA not after:            Thu 23 Jul 2026 23:20:23 +0000
asID:                     7029
IP address blocks:        64.16.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1e:51:38:54:2b:17:e8:34:4c:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:20:23 2026 GMT
            Not After : Jul 23 23:20:23 2026 GMT
        Subject: CN=e363e50e-32bd-4b21-9776-64be77a69e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:14:ca:01:0c:bd:2e:51:a6:d3:f6:bc:b1:
                    44:ae:b2:31:02:6c:d5:51:39:df:a9:0d:34:67:50:
                    5a:9e:51:f0:a6:84:46:cf:76:56:73:cc:bc:85:b7:
                    8a:54:06:72:56:56:f8:92:18:0d:da:76:a6:cf:2d:
                    ce:25:78:62:3a:ab:72:39:1f:33:4e:6f:45:3b:b8:
                    fa:71:31:e3:74:c6:b8:6d:54:61:51:09:cc:4c:a5:
                    2c:4d:5a:f9:e3:9b:8d:35:a1:0c:8e:2a:0c:6a:05:
                    df:54:89:f3:28:d2:14:98:0b:17:9a:e8:e7:91:87:
                    dc:1a:e2:d7:f8:05:5c:9c:c8:4c:b2:cb:45:35:f3:
                    7f:4a:5c:4a:dc:2a:72:ae:51:b7:0e:6d:1e:cf:a5:
                    30:41:5f:d9:5b:16:c0:fe:de:80:1a:2d:a2:f6:7c:
                    54:ec:52:3e:3c:5b:93:51:30:3a:57:83:88:c1:ef:
                    20:55:82:06:7f:11:52:1c:bd:54:51:26:4f:36:f0:
                    71:02:37:bf:b7:3e:97:84:f2:87:15:08:38:fc:2d:
                    e9:71:08:d2:af:34:f0:b7:8e:91:d5:f3:3a:f0:b1:
                    84:4d:2c:e0:4b:00:16:75:1a:6a:1b:f6:12:55:6a:
                    ea:7d:54:1e:45:c7:4a:7d:e1:e4:a0:8a:4f:be:e9:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:42:76:B0:DC:1C:4B:3B:CA:1D:5F:95:20:53:33:40:D3:F7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/53ac9508-7103-3def-8e40-928a7bb591f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:fe:b5:af:12:b7:9b:9f:ab:7b:35:b4:13:15:5a:e0:14:
         fe:a2:e4:ae:ef:5d:8d:d7:55:f4:3a:29:f8:39:07:3b:5b:8a:
         bd:d5:e9:40:b5:9f:c8:cc:c0:04:d5:0d:8d:95:59:18:f4:da:
         77:1f:09:a7:57:cb:59:95:47:83:52:3a:39:4e:39:04:2e:9f:
         99:cf:85:b6:6a:a1:a2:2a:15:8f:8a:2a:5e:b8:31:c8:02:e7:
         88:27:e2:57:ab:5c:69:98:58:c8:99:3f:16:52:8d:53:76:89:
         c8:5b:d2:cf:3c:b6:b0:73:7f:ff:a7:a3:3b:47:ec:7d:ea:8b:
         36:ef:16:32:38:1b:02:49:31:be:4b:57:af:40:16:8d:54:b9:
         f5:11:f0:27:fa:72:6a:f9:98:17:f6:c7:df:62:4f:08:5d:fd:
         69:91:5f:73:cf:37:fc:f4:00:a5:57:64:f4:92:55:25:af:ca:
         b1:35:da:1a:ab:11:25:77:df:e4:a4:3f:2e:3c:0d:55:e2:48:
         e6:e2:37:e3:2f:ed:77:33:c1:76:61:71:54:b9:14:a6:de:8c:
         33:1d:95:22:f8:e2:28:e8:63:0f:80:b2:20:86:65:65:7b:53:
         0c:e2:3b:2e:7d:81:3f:a3:b6:0d:ea:6f:20:f3:7f:b1:e2:ed:
         de:4c:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:45:59 2026 by rpki-client