Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
File:                     e0231ca2-d28c-3c3c-b66d-9f915e726494.roa (raw, json)
Hash identifier:          aU4MCRpsSiNEeA8HvHfEhHeA7/GgRgjR9wsJw7/BBYE=
Subject key identifier:   49:DF:36:36:39:8F:AA:52:1F:BA:2D:B3:DC:1C:BA:4C:D5:72:7F:E7
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1E7A246472997082923270
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa
Signing time:             Fri 24 Apr 2026 23:20:42 +0000
ROA not before:           Fri 24 Apr 2026 23:20:42 +0000
ROA not after:            Thu 23 Jul 2026 23:20:42 +0000
asID:                     7029
IP address blocks:        64.16.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1e:7a:24:64:72:99:70:82:92:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:20:42 2026 GMT
            Not After : Jul 23 23:20:42 2026 GMT
        Subject: CN=83cf5224-ae2d-4a4b-8474-254a20a79201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:52:3e:2c:29:20:79:3e:75:9a:1e:65:0c:
                    4d:1a:7c:cb:1e:00:4c:f6:9c:7c:38:5a:03:f5:f8:
                    95:6b:7c:74:15:8d:97:e7:80:f2:c0:d6:c2:f9:d4:
                    27:e0:ba:ad:e2:2a:1f:01:54:36:4a:93:c9:10:40:
                    ba:10:78:e1:c5:2e:86:44:48:49:d4:d7:b4:c3:8a:
                    b3:da:26:fb:8f:2e:4a:f9:21:4b:f9:3e:e8:db:58:
                    b3:c5:78:d8:4d:ff:54:61:f3:9c:87:06:1c:6c:e4:
                    de:17:ff:36:ff:dd:9c:ca:47:3d:91:ac:da:59:87:
                    79:cd:27:78:ad:fe:39:04:56:53:36:41:09:06:ca:
                    5f:9d:e3:64:0c:e2:9f:72:da:5d:14:c2:56:66:9e:
                    f3:ab:12:db:96:91:b2:bc:be:3b:6a:01:a1:f1:6e:
                    bd:19:62:05:bf:9f:48:c8:41:d6:24:a3:5d:4a:cb:
                    5e:f1:2a:dc:a9:d4:1b:1a:d7:1d:81:f8:c3:95:51:
                    8c:20:8d:ef:ac:ef:5d:76:44:4f:e9:d7:f2:03:21:
                    c5:52:ad:3c:79:5e:9e:19:1c:4e:89:dd:59:50:d8:
                    35:fd:76:2c:ec:a6:c0:b3:97:c8:79:a3:51:47:24:
                    85:12:a8:89:3b:d9:41:e6:8d:7b:26:55:2d:a5:d0:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DF:36:36:39:8F:AA:52:1F:BA:2D:B3:DC:1C:BA:4C:D5:72:7F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/e0231ca2-d28c-3c3c-b66d-9f915e726494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:4b:87:b0:af:5d:1c:37:2b:f0:64:d4:ac:6d:c5:70:30:
         f6:81:1a:71:42:87:1f:98:78:d0:74:5d:4e:93:13:a7:a7:81:
         53:3e:02:1e:24:3a:d0:17:66:ce:27:46:a8:1a:31:dc:4b:1d:
         62:0d:c6:56:88:fb:af:32:df:20:17:61:78:c2:c7:31:6f:50:
         68:b3:46:7b:94:02:6b:ae:00:4c:09:ac:2b:c5:cb:53:82:08:
         dd:80:9b:2f:53:63:cd:58:55:58:0d:6b:37:0b:64:54:07:ea:
         98:89:4f:a1:ce:0d:e3:05:15:ec:db:83:1f:26:6f:07:9e:b2:
         2f:85:f5:be:76:5c:2d:6c:99:e1:c9:2a:e9:93:ef:2a:8d:cc:
         fb:4c:f0:0b:12:65:b7:8e:63:4b:84:d2:12:21:63:be:23:38:
         16:37:3a:26:f3:c4:fe:ce:91:d4:7e:7a:7c:cb:1c:24:18:4d:
         1d:3d:b6:84:b7:f7:2b:4f:85:d5:a5:6d:10:e4:72:0b:f7:2a:
         1c:f4:4f:3a:33:be:ae:e0:a4:97:0c:6d:85:86:a3:e5:7a:3f:
         5e:2a:5d:fd:9a:6e:85:47:d6:1e:a5:68:8e:95:fa:69:f0:15:
         cc:ea:a2:d0:12:8d:de:55:80:47:eb:e0:0e:e2:12:3c:a0:9d:
         2c:26:c3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:32 2026 by rpki-client