Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/85d7f7c3-954b-3d87-b2b2-c53ae71d244a.roa
File:                     85d7f7c3-954b-3d87-b2b2-c53ae71d244a.roa (raw, json)
Hash identifier:          7voQo/Z7rknpKOW8gqzP6FA6ZQa6xd1Mg44mxNhsy7Q=
Subject key identifier:   E2:1D:D3:41:3B:EF:F7:42:EB:20:A9:5C:25:B5:84:66:C0:B7:30:2E
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1F67AD85D26A1C3AF0F380
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/85d7f7c3-954b-3d87-b2b2-c53ae71d244a.roa
Signing time:             Fri 24 Apr 2026 23:22:34 +0000
ROA not before:           Fri 24 Apr 2026 23:22:34 +0000
ROA not after:            Thu 23 Jul 2026 23:22:34 +0000
asID:                     20001
IP address blocks:        64.16.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:67:ad:85:d2:6a:1c:3a:f0:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:22:34 2026 GMT
            Not After : Jul 23 23:22:34 2026 GMT
        Subject: CN=553b3aa8-c705-4af7-ba07-fb9cb20bd9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:04:37:9f:dc:f8:32:b1:ff:68:22:ed:51:
                    ad:bf:23:a5:86:02:1b:9c:50:70:8d:b0:42:87:05:
                    cd:91:4e:b4:84:8c:8c:fa:a2:04:f4:a8:2d:6c:45:
                    c4:e9:bc:7a:4e:81:ac:9e:2e:0f:de:62:e5:c5:ff:
                    8c:72:17:7e:43:37:cd:ac:62:77:5b:86:d3:e1:e6:
                    f2:8b:79:3a:a1:d0:bb:f2:67:85:91:de:e4:f4:f1:
                    f7:55:5e:40:8b:1a:f3:b6:90:78:04:69:90:b7:2f:
                    72:5b:59:1e:27:d3:3e:39:3f:cb:05:2d:91:8c:79:
                    b0:4c:8c:dd:b5:9b:fa:7b:11:72:a0:b7:1c:af:ff:
                    57:c8:df:ab:6a:fa:1c:e5:65:ce:ea:d5:c3:9b:30:
                    9a:ce:96:14:23:eb:ab:17:f6:e3:dc:16:46:f8:d2:
                    cd:89:03:39:25:42:67:9b:93:d4:d6:fa:81:2a:7b:
                    70:66:d6:63:f9:70:2f:3c:6b:89:9e:29:7e:5a:e6:
                    87:0b:d1:7f:57:1d:2f:93:3a:d3:91:a1:6c:19:0f:
                    6d:c9:81:bd:97:c1:37:95:5f:e9:ab:0e:2c:97:55:
                    2f:7a:78:50:fc:60:f5:a8:ce:17:cc:d8:d9:a3:81:
                    f3:9a:18:35:77:57:da:3d:42:b4:a8:d9:f3:3a:6f:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1D:D3:41:3B:EF:F7:42:EB:20:A9:5C:25:B5:84:66:C0:B7:30:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/85d7f7c3-954b-3d87-b2b2-c53ae71d244a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a2:91:08:cb:79:63:3d:38:40:50:74:2e:b8:c5:03:da:f9:
         40:02:3e:dd:a3:2b:45:00:c5:47:16:5c:84:e9:be:88:1d:06:
         1a:e8:9e:dc:02:6e:c7:61:35:91:d9:d3:da:a6:48:ab:60:f6:
         a4:b6:65:de:19:23:16:79:ea:3d:d1:f0:c5:14:2e:e5:f6:53:
         0c:f0:1f:80:ad:c9:60:f1:9f:af:86:73:bf:9f:89:16:bc:86:
         b5:02:64:7d:a2:75:bf:64:f7:7c:a5:c4:9a:cb:0b:64:79:9b:
         f6:f4:4d:aa:ba:e6:89:f9:19:22:42:a6:99:3d:07:4e:5b:a3:
         c1:4b:48:b8:a1:a9:5b:ff:3a:87:5b:fa:ef:d2:45:44:b3:c3:
         2d:2f:d3:08:d9:a2:6e:44:a3:73:0a:1c:f6:60:d9:7b:ee:95:
         be:4d:b0:e7:ab:d7:08:cd:b7:7d:62:b0:e1:fd:f8:64:37:75:
         fb:8d:89:a9:7e:b8:c9:ab:c3:52:9a:7f:dc:5a:89:41:c6:2c:
         79:3b:5f:8f:02:dd:41:08:a8:40:5a:5a:27:98:bc:80:3e:d5:
         32:b5:a1:95:99:6a:4b:0d:64:f8:95:09:c9:ab:b7:a4:64:14:
         29:02:43:8c:2e:e2:09:13:06:09:cd:a5:6d:11:eb:e6:ae:ff:
         f6:77:5d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:12 2026 by rpki-client