Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7b258989-8edf-3875-b868-37739f03b365.roa
File:                     7b258989-8edf-3875-b868-37739f03b365.roa (raw, json)
Hash identifier:          7KKWpR2X1AM6iJGPuLkhB78h1CpfSIWjasmMMfcFI7A=
Subject key identifier:   B6:4E:1C:C5:C2:C1:15:AA:DB:3F:47:07:5D:18:52:05:4F:E8:71:08
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1E6C9F9E14F5F5A4807A80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7b258989-8edf-3875-b868-37739f03b365.roa
Signing time:             Fri 24 Apr 2026 23:20:36 +0000
ROA not before:           Fri 24 Apr 2026 23:20:36 +0000
ROA not after:            Thu 23 Jul 2026 23:20:36 +0000
asID:                     7029
IP address blocks:        64.16.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1e:6c:9f:9e:14:f5:f5:a4:80:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:20:36 2026 GMT
            Not After : Jul 23 23:20:36 2026 GMT
        Subject: CN=ac95fa08-0041-49ee-8227-975ceef3da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:03:27:06:cc:af:73:fb:67:28:06:f7:df:
                    34:9b:29:f5:98:b8:83:d2:b0:97:e0:e8:b0:f9:8c:
                    81:a3:83:c4:03:04:53:d3:ce:29:f4:97:63:87:e8:
                    75:f1:a2:dd:2e:a5:7e:b2:d7:bb:9a:62:5f:9e:ea:
                    75:ab:c7:fb:a8:88:ac:d6:42:01:46:90:5b:5b:4a:
                    a8:44:05:ae:f1:02:a9:f3:f4:76:d6:89:74:11:e8:
                    58:0a:28:93:11:e2:25:6a:17:6a:0b:29:14:2d:85:
                    69:1d:63:5b:39:35:6d:b4:59:c0:86:7b:3e:44:da:
                    0e:f3:5d:97:08:ec:5b:8d:3b:8a:53:ba:a9:57:9f:
                    3c:1c:1a:a2:f8:9b:23:1f:4b:c9:63:78:75:80:5a:
                    85:0f:12:65:03:91:61:f3:8d:0f:e6:c1:8d:81:8e:
                    50:ab:63:9d:b4:7e:dd:ce:3e:e4:06:b8:67:57:c7:
                    76:83:06:ca:f8:5a:d6:e4:06:f2:80:a4:de:f7:45:
                    23:bb:48:87:61:50:b3:5e:83:e8:82:ad:1b:6e:4a:
                    54:f6:69:08:c2:3b:4b:bb:73:c5:9c:63:17:07:13:
                    90:0a:3d:b8:96:9e:48:ca:4b:54:fe:b6:e1:55:bd:
                    d8:10:91:f8:aa:37:a3:80:93:cc:b4:33:bd:4d:b5:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4E:1C:C5:C2:C1:15:AA:DB:3F:47:07:5D:18:52:05:4F:E8:71:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/7b258989-8edf-3875-b868-37739f03b365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:7e:15:00:27:61:81:dd:52:c1:62:73:31:8e:5e:28:14:c5:
         0b:50:a3:8b:26:02:9c:cb:3c:1b:6a:b3:23:b6:61:26:fb:e6:
         16:c4:65:37:fd:c9:ed:4e:4e:4a:bd:21:cc:e8:44:ac:3f:8b:
         db:9e:d6:a4:67:bc:0a:f2:ee:bd:fb:a5:a9:7c:ef:1b:7f:07:
         ed:50:51:c8:09:c2:d1:40:f0:a3:71:ce:1e:c1:a4:55:62:b7:
         8d:97:af:d9:cc:bf:5f:7f:3f:12:5a:fb:31:83:7b:9d:7b:e7:
         d1:bd:2c:53:48:ae:55:f3:07:95:9b:7d:8f:28:dd:5d:49:cd:
         95:cb:21:82:f9:1b:9a:df:ec:dd:1f:c0:14:dd:dc:8f:bc:e4:
         74:6b:94:67:43:40:d9:6f:c9:c3:fe:a0:ca:cf:9f:a4:de:ba:
         d1:12:d4:df:73:46:c3:9e:cc:b4:ce:64:bd:4d:48:b0:cd:fd:
         3e:b0:33:36:27:e4:b5:7f:3c:cd:b6:97:90:6f:2f:2b:fa:bf:
         9b:65:de:12:5e:56:33:fd:13:bd:3c:d8:fe:12:84:e7:2c:d0:
         02:a1:f1:20:97:91:2e:bd:68:fb:12:07:3f:0d:3c:8b:20:e8:
         8b:a8:c5:46:50:3c:2b:23:f1:f6:34:e4:b4:02:50:85:e8:b3:
         c4:e4:81:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eHmyfnhT19aSAeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmODJkMzYtNjMzYS00NGUwLTliMzEtYTUyM2UxNjA5
NzIwMB4XDTI2MDQyNDIzMjAzNloXDTI2MDcyMzIzMjAzNlowLzEtMCsGA1UEAxMk
YWM5NWZhMDgtMDA0MS00OWVlLTgyMjctOTc1Y2VlZjNkYTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqkDJwbMr3P7ZygG9980myn1mLiD0rCX4Oiw
+YyBo4PEAwRT084p9Jdjh+h18aLdLqV+ste7mmJfnup1q8f7qIis1kIBRpBbW0qo
RAWu8QKp8/R21ol0EehYCiiTEeIlahdqCykULYVpHWNbOTVttFnAhns+RNoO812X
COxbjTuKU7qpV588HBqi+JsjH0vJY3h1gFqFDxJlA5Fh840P5sGNgY5Qq2OdtH7d
zj7kBrhnV8d2gwbK+FrW5AbygKTe90Uju0iHYVCzXoPogq0bbkpU9mkIwjtLu3PF
nGMXBxOQCj24lp5IyktU/rbhVb3YEJH4qjejgJPMtDO9TbXxsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZOHMXCwRWq2z9HB10YUgVP6HEIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNGY4
MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIzZTE2MDk3MjAvN2IyNTg5ODktOGVkZi0z
ODc1LWI4NjgtMzc3MzlmMDNiMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjRmODJkMzYtNjMzYS00NGUwLTli
MzEtYTUyM2UxNjA5NzIwLzI0ZjgyZDM2LTYzM2EtNDRlMC05YjMxLWE1MjNlMTYw
OTcyMC5jcmwwHwYDVR0jBBgwFoAUqR3Pbmnjs98xJRLLzcmFO/bdz28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8yNGY4MmQzNi02MzNhLTQ0ZTAtOWIzMS1hNTIz
ZTE2MDk3MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALp+FQAnYYHdUsFiczGOXigUxQtQo4smApzLPBtqsyO2YSb75hbEZTf9
ye1OTkq9IczoRKw/i9ue1qRnvAry7r37pal87xt/B+1QUcgJwtFA8KNxzh7BpFVi
t42Xr9nMv19/PxJa+zGDe51759G9LFNIrlXzB5WbfY8o3V1JzZXLIYL5G5rf7N0f
wBTd3I+85HRrlGdDQNlvycP+oMrPn6TeutES1N9zRsOezLTOZL1NSLDN/T6wMzYn
5LV/PM22l5BvLyv6v5tl3hJeVjP9E7082P4ShOcs0AKh8SCXkS69aPsSBz8NPIsg
6IuoxUZQPCsj8fY05LQCUIXos8TkgZ8=
-----END CERTIFICATE-----
Generated at Wed May 13 14:50:02 2026 by rpki-client