Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
File:                     e0231ca2-d28c-3c3c-b66d-9f915e726494.roa (raw, json)
Hash identifier:          lxex8o6rmR0MpPSR89GZtDYdUBslezy837jr95tXEbQ=
Subject key identifier:   8A:0F:43:1C:EC:D0:C1:DB:E4:1C:B8:5C:B6:40:AB:BA:4B:08:94:96
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F79FAC616803FFE0347E40
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        64.16.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:9f:ac:61:68:03:ff:e0:34:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=28e5f09e-d926-40e4-aa35-76a06363ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:5b:45:35:47:45:58:45:e3:58:04:ea:93:
                    0f:cb:c4:f3:f7:59:ca:d6:c5:d1:6c:65:4b:ed:06:
                    06:d4:f2:d2:0f:a2:5d:e9:f4:a2:01:b3:86:fd:a5:
                    cc:7d:9a:e4:a9:9c:d5:fe:93:5f:70:d3:20:2a:31:
                    51:c7:d3:51:d8:44:25:8e:74:04:1b:47:92:d8:53:
                    9a:46:f3:78:a1:04:ee:c3:50:2e:40:57:8e:0e:32:
                    b6:2e:2c:80:a5:52:e2:8e:ff:3a:3c:76:9c:1d:c6:
                    3e:4d:2c:03:e1:74:48:28:fa:b9:ec:5d:c5:a3:75:
                    1b:d9:6e:5a:94:2f:2b:99:0f:53:9e:83:d0:73:2b:
                    f1:01:bd:03:fa:2d:8f:b4:78:b7:cc:41:46:13:23:
                    09:24:6c:a8:fa:5d:95:eb:09:79:83:18:da:da:ea:
                    d0:b2:b4:c3:38:46:24:72:ac:74:f4:f3:a4:c1:57:
                    69:5c:8b:e7:7d:78:63:52:57:35:59:ee:80:c5:01:
                    36:ca:35:93:2f:d1:a1:95:ee:18:3d:ce:64:42:e6:
                    be:c8:08:e1:bc:20:1f:97:02:86:91:f6:8d:a4:e2:
                    8e:bc:4c:3e:f6:ed:27:fb:97:fc:3f:44:f0:10:2d:
                    8a:0c:34:34:e7:72:f5:41:22:e4:b8:06:d4:bb:9d:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0F:43:1C:EC:D0:C1:DB:E4:1C:B8:5C:B6:40:AB:BA:4B:08:94:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:da:f9:5a:90:6f:bc:4a:ed:81:12:b0:c9:cb:b7:d0:61:
         a7:f5:6d:05:24:a4:9e:b2:dc:2e:e4:14:59:64:e0:3a:3e:c3:
         21:6d:d0:50:20:f9:a9:01:50:25:73:48:fe:bc:4a:47:95:fd:
         d3:ed:06:b0:02:f6:87:7b:fa:58:c4:84:3d:1a:30:ff:66:78:
         87:9b:23:0e:1a:2e:f7:41:e6:2d:c1:cf:d4:a4:ab:c9:84:b1:
         f6:cf:b8:f2:b0:37:ac:a2:95:18:20:11:ee:07:48:f8:51:8e:
         50:94:3f:fb:a7:24:ba:51:ae:58:87:53:c7:57:1a:40:78:f3:
         f7:a0:65:00:67:b5:2b:3b:da:18:48:0b:b9:0e:87:00:04:64:
         21:12:f0:c4:60:f1:88:03:33:3a:60:8f:99:8e:72:b6:5e:b5:
         cc:ad:38:03:7d:c5:e9:f2:4a:c6:0f:a4:7d:88:3e:d0:cc:0f:
         87:cf:f8:be:98:81:e8:e6:9c:fa:25:79:cd:4e:7c:69:69:20:
         a4:81:a1:f4:f9:7c:07:3a:8a:39:a0:6c:d7:22:d0:fb:81:22:
         e2:49:65:07:9a:b7:fb:7f:81:f8:14:72:39:cb:b6:b2:7f:c2:
         f4:be:17:c3:19:ec:84:6f:65:12:34:3c:af:2b:d2:c6:e7:d1:
         2e:d8:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:52:44 2026 by rpki-client