Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/11291530-ef71-3108-b571-e1389eeae0d7.roa
File:                     11291530-ef71-3108-b571-e1389eeae0d7.roa (raw, json)
Hash identifier:          aniq6lj7aYGNhKIJJtnfBEvwcMdFzwYyQO93KoE62yI=
Subject key identifier:   85:75:AE:5D:D5:9B:65:3B:52:EB:EF:2B:0B:94:58:AF:A6:CE:D9:FD
Certificate issuer:       /CN=f52ac19a-88a9-43fa-af2a-598053745c15
Certificate serial:       010D0C9F4328584E8DEFBD72E9976E49EBEB4C00
Authority key identifier: D3:E2:11:32:5D:DB:A0:E7:9B:69:96:23:C6:6E:90:72:74:B0:0F:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/11291530-ef71-3108-b571-e1389eeae0d7.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     402375
IP address blocks:        64.251.224.0/24 maxlen: 24
                          64.251.225.0/24 maxlen: 24
                          64.251.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:bd:72:e9:97:6e:49:eb:eb:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52ac19a-88a9-43fa-af2a-598053745c15
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=784a32e9-17a1-4df7-a62d-fe41c03af176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:f2:80:f7:ba:93:b5:e4:0b:f0:2e:13:09:
                    02:7c:2c:26:b6:6d:43:69:d5:05:04:1d:e8:d8:f7:
                    9e:88:c9:1d:75:36:4a:1e:7d:f6:93:11:86:02:02:
                    7b:d6:cc:ce:cc:ac:1e:ed:c6:dc:e7:f6:e0:87:a7:
                    8e:53:52:8f:95:af:43:4d:0a:80:87:9c:f0:b3:69:
                    3b:7d:30:16:09:cb:b5:a5:56:2a:b9:bf:23:fa:b4:
                    08:45:21:92:de:46:27:4d:62:fa:ea:00:4f:cb:a4:
                    45:c0:d0:47:3f:17:06:7e:5c:9e:cd:c8:c4:cd:3f:
                    50:ed:87:65:5c:22:06:07:2a:47:e7:9e:91:ba:e0:
                    3c:46:55:ad:a9:fc:25:b5:71:5d:65:f1:32:1a:eb:
                    e0:3e:d2:d0:24:36:77:8c:d8:91:ef:31:b1:c5:e0:
                    6d:ac:e3:f4:32:83:26:d5:2e:c2:23:e5:77:fb:c9:
                    4f:4c:ec:82:7e:cd:aa:09:eb:70:ac:52:d6:d4:cf:
                    4f:74:36:74:63:76:ea:be:dc:9b:70:31:65:37:34:
                    e9:a8:c7:f5:47:f5:bc:79:71:9d:47:fd:24:d4:b1:
                    35:2f:52:82:c0:a2:1e:ac:82:8d:3b:a2:4b:55:b8:
                    bb:c4:e3:12:1b:98:be:44:ee:44:54:d9:80:d0:80:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:AE:5D:D5:9B:65:3B:52:EB:EF:2B:0B:94:58:AF:A6:CE:D9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/11291530-ef71-3108-b571-e1389eeae0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15/f52ac19a-88a9-43fa-af2a-598053745c15.crl

            X509v3 Authority Key Identifier:
                keyid:D3:E2:11:32:5D:DB:A0:E7:9B:69:96:23:C6:6E:90:72:74:B0:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f52ac19a-88a9-43fa-af2a-598053745c15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.224.0-64.251.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:81:f7:04:02:cc:32:87:4d:8d:bd:98:ed:2a:fb:7f:46:6b:
         22:47:c9:47:f8:7f:31:d5:27:d9:84:d3:bf:ad:1d:30:cf:6e:
         0c:e5:e5:be:73:71:e7:e8:13:f8:5b:62:fd:41:0d:71:98:97:
         2e:6b:2b:f3:8f:52:8b:74:ed:a5:5b:13:aa:3a:59:6c:6c:28:
         07:49:c7:1a:9f:22:34:0e:37:81:88:08:e6:74:08:81:b5:41:
         36:e8:8e:a4:38:d0:45:18:61:11:3b:6e:5e:62:7f:63:73:5c:
         81:39:01:fb:81:c1:8b:f7:5e:a3:51:63:d1:a2:23:48:0d:26:
         74:fc:37:f6:68:34:a4:88:39:6c:86:50:cd:2d:0b:84:24:6d:
         51:47:a7:ff:f0:26:a5:1f:03:26:c6:7b:17:b9:43:9a:51:f4:
         db:76:5b:0e:1b:7c:ed:f6:a2:fb:10:a0:8b:7a:e4:13:f2:8d:
         a3:07:f2:0b:3d:6d:54:b4:fd:3b:a4:6f:a6:5b:2e:33:e8:d8:
         be:fa:fe:a1:c5:89:ed:89:52:22:e7:3b:ef:cf:d7:b0:5b:64:
         53:31:4a:49:67:94:41:53:6d:34:f2:bb:b9:c4:f6:51:8b:e6:
         dc:d7:be:29:43:e9:c2:d2:35:62:8c:b2:92:30:d8:39:5b:de:
         f1:85:ff:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:54 2026 by rpki-client