Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa
File:                     c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa (raw, json)
Hash identifier:          aR/L40qCGz5vk1RxiOkEsOSMLyA7D8EHuA6hUZZRfz4=
Subject key identifier:   D5:E5:1B:FF:CD:33:6B:63:FB:70:20:B6:5F:42:8D:14:C3:AA:2F:59
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E202D6A5D493755B26BB080
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa
Signing time:             Fri 24 Apr 2026 23:24:08 +0000
ROA not before:           Fri 24 Apr 2026 23:24:08 +0000
ROA not after:            Thu 23 Jul 2026 23:24:08 +0000
asID:                     397630
IP address blocks:        64.16.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:20:2d:6a:5d:49:37:55:b2:6b:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:24:08 2026 GMT
            Not After : Jul 23 23:24:08 2026 GMT
        Subject: CN=56f7ead9-39ad-40f6-90fc-cddc0c78db04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:94:00:cb:b1:ce:d3:f1:21:f4:8d:12:b8:
                    11:28:e8:c9:14:1c:1c:33:db:fa:fd:5b:8a:78:be:
                    d0:6d:6f:fc:1b:9e:5d:d6:58:94:f8:7e:94:c0:f0:
                    85:78:07:79:83:46:f7:b3:b4:eb:08:23:02:57:d3:
                    87:6a:6c:1a:56:84:f5:60:a3:5f:a7:db:6b:f7:d4:
                    4e:92:f5:46:fc:35:ee:2d:2d:f1:57:75:89:ba:1a:
                    ec:e2:2d:cd:f2:36:7e:d3:39:04:a3:94:c4:fd:1f:
                    e3:7c:90:dd:06:f8:bf:b2:51:20:3f:dd:6f:c1:fd:
                    7f:36:a2:e0:66:be:c3:d5:f1:fd:a1:18:5b:e0:0c:
                    13:67:27:5a:8c:69:6e:5f:f8:8e:c8:32:2c:6f:a2:
                    bd:3e:4a:b7:81:10:a5:de:0a:45:09:c4:65:65:09:
                    7c:f0:6d:03:8b:27:33:c7:5e:67:97:f0:fb:87:2a:
                    46:4a:d5:56:40:b0:e5:cb:2d:43:17:7b:d2:03:8d:
                    4c:04:58:91:89:ee:cd:91:8f:d0:17:86:b0:85:ac:
                    0b:c9:ba:bd:7a:f3:ad:51:e7:d2:d0:23:73:cd:aa:
                    7d:2c:7a:0b:aa:79:69:09:68:25:30:9a:f7:98:9a:
                    36:73:ca:17:82:f6:97:0f:48:b8:ba:76:71:e4:77:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E5:1B:FF:CD:33:6B:63:FB:70:20:B6:5F:42:8D:14:C3:AA:2F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/c5ad9c9e-fb52-3770-b68b-62b59ee9c035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:9e:0c:a7:4a:52:65:c0:19:f8:d6:43:cb:ef:c9:de:02:
         90:c8:20:1d:49:ca:fc:96:7d:3d:af:1c:5d:d8:87:56:2d:94:
         05:26:cb:6d:15:51:d6:01:ef:48:38:7c:33:b4:68:bc:6d:f1:
         96:89:9e:d8:12:2a:96:10:fe:10:a2:d5:ab:3b:f7:bf:19:0a:
         e9:f4:a2:45:e1:4f:8b:97:e5:04:ff:40:30:fa:83:36:12:a0:
         48:d0:d0:9e:71:3d:ab:1d:fd:07:a3:5b:4d:84:ea:55:1e:6a:
         24:af:ef:8e:eb:84:39:9d:4c:bc:3c:00:ed:83:87:bb:5d:c7:
         6f:a8:90:be:ee:88:5f:83:5b:ba:53:d7:79:cf:de:88:10:26:
         0f:9b:65:79:2e:17:29:6d:17:d3:ca:e7:9b:71:b7:8b:eb:08:
         dc:ec:b8:01:bc:9e:b4:3d:b6:f7:5d:3a:cc:e2:71:9a:57:22:
         0b:ba:17:b9:2e:1b:b8:f8:06:b6:d9:9b:ec:80:cb:66:a0:4c:
         54:1b:1b:f7:c0:0c:17:e9:eb:be:ce:4d:48:c1:82:dc:fc:d6:
         9f:b8:e2:bc:d6:df:82:66:6a:cc:1c:fa:64:61:b4:6e:86:6e:
         16:ff:08:62:ef:ef:cc:f2:cf:25:ab:ab:d8:a0:6d:8f:16:42:
         94:d3:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:53:45 2026 by rpki-client