Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa
File:                     86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa (raw, json)
Hash identifier:          4ELm1L9nt/d6/E/ReAjE5Jx44XicDZLao2vVYDaBfGQ=
Subject key identifier:   87:F4:EF:A2:26:7B:FD:0B:B3:E2:13:26:C3:28:6F:2B:A1:FD:29:EC
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1F7FE7AE374C3AD1E1AB00
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa
Signing time:             Fri 24 Apr 2026 23:22:46 +0000
ROA not before:           Fri 24 Apr 2026 23:22:46 +0000
ROA not after:            Thu 23 Jul 2026 23:22:46 +0000
asID:                     20001
IP address blocks:        64.16.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:7f:e7:ae:37:4c:3a:d1:e1:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:22:46 2026 GMT
            Not After : Jul 23 23:22:46 2026 GMT
        Subject: CN=5e3ddf4e-2f29-4657-b5f1-4335ca3dba9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:2b:bc:97:93:bf:0b:1f:bd:64:d9:96:68:
                    1d:ad:2d:7b:91:65:60:c4:d7:51:ab:71:71:00:62:
                    7d:3a:d4:29:81:58:33:a1:ef:fe:af:8d:4b:d1:5e:
                    2c:b4:39:20:84:02:9e:80:ee:70:71:09:a6:6f:ea:
                    1f:37:5a:b5:50:bd:52:5c:47:e8:fe:9b:74:ab:f1:
                    32:15:4b:5e:93:9b:39:c9:ca:48:3c:26:3e:bf:3c:
                    22:8d:e8:f2:a9:f3:51:28:41:68:3e:75:15:37:b4:
                    ad:c6:e2:1a:ab:1c:2d:52:a2:fe:a0:0c:88:8e:68:
                    d0:38:d8:af:c6:a4:d6:d5:58:19:e9:e5:45:6b:e6:
                    62:87:3f:df:47:91:32:10:ba:5e:f0:5b:fa:48:af:
                    7c:6b:46:95:dc:31:4e:32:2d:62:0f:cc:d8:dc:da:
                    20:c0:45:e9:c0:68:3b:21:87:11:3b:27:41:76:2e:
                    00:5b:61:a5:f8:cc:c4:91:51:4e:27:26:5f:72:b5:
                    d9:56:22:71:ab:e4:21:c2:35:5c:1d:58:99:3e:2e:
                    d5:57:e2:65:9f:f0:b6:96:17:4f:55:c9:41:06:da:
                    69:11:d1:e9:f4:8f:d9:c0:6e:c9:d4:2c:ab:0d:50:
                    d9:e0:5c:42:16:7c:06:8d:b7:3e:98:5d:58:5e:2e:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:EF:A2:26:7B:FD:0B:B3:E2:13:26:C3:28:6F:2B:A1:FD:29:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/86d95cce-93a5-3a57-930a-a9aaecdac9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ea:f9:c9:d1:dd:34:7c:e5:61:19:6b:dc:4f:a6:01:ae:80:
         97:cb:ea:22:91:1a:34:9d:bf:b9:6b:33:f9:af:ca:5f:38:c3:
         4a:56:cf:89:cb:83:92:b3:7f:00:9d:9f:3d:9b:c1:50:49:7d:
         b4:f3:79:75:e3:72:ab:86:80:37:72:ca:c6:a5:ad:ee:f6:74:
         78:41:6b:96:39:dd:69:e1:bd:77:73:a8:6b:e5:77:7c:0b:92:
         34:b0:65:d6:aa:28:1d:ac:2d:d7:09:14:ff:8a:e4:a3:2f:8f:
         77:74:28:43:b5:5c:68:47:cf:f6:7b:4a:e9:e3:6c:09:8d:95:
         39:6f:05:06:19:2d:0d:51:18:04:1f:18:a5:d9:41:df:57:77:
         03:7f:31:ee:92:fc:fe:9d:73:bf:4b:58:35:eb:55:bb:d8:88:
         b4:3b:1b:be:bc:10:b5:a3:be:2f:52:be:89:ae:d9:49:7e:a8:
         0f:4e:7a:d9:a7:46:3f:d4:c2:b6:76:fc:21:6c:2e:d5:5d:eb:
         6f:33:40:9e:d5:2c:d0:69:ea:97:95:e3:69:10:fd:23:f6:34:
         d5:16:ac:12:bb:e5:79:91:b0:44:a0:35:25:98:4a:1a:82:d0:
         2a:f5:37:99:8e:36:83:39:6b:fd:29:7f:09:23:f4:8c:c2:62:
         1f:90:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:52 2026 by rpki-client