Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/4fb7e074-338a-3ee4-b5a1-fb69715e992d.roa
File:                     4fb7e074-338a-3ee4-b5a1-fb69715e992d.roa (raw, json)
Hash identifier:          gC/9h5YtqLx6d1APlrjGd+TnZnBBnpTIM7eWLCN7Ogg=
Subject key identifier:   8C:E5:43:4F:E5:B6:1E:BD:D3:60:1F:3C:56:86:1D:27:56:3D:48:01
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F4328584E8C8A3C09E0D693CBE9B96500
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/4fb7e074-338a-3ee4-b5a1-fb69715e992d.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     401706
IP address blocks:        64.146.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3c:09:e0:d6:93:cb:e9:b9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=74760ca0-328f-4634-a1dc-7afeaa38f0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:f2:14:de:0c:e8:84:32:2b:90:50:75:1b:
                    d7:70:09:2f:80:aa:13:23:f3:4b:6f:49:96:46:86:
                    f8:b2:62:4d:84:eb:20:3f:ca:63:0f:8d:45:a5:c4:
                    66:30:cb:f4:64:ff:c8:b9:9a:98:d4:47:39:5e:b9:
                    a3:d3:d3:7d:f0:fc:88:bd:e6:af:a3:8e:31:09:60:
                    d1:33:1b:a9:99:51:57:5c:af:1c:36:93:db:11:7b:
                    47:84:fc:6d:37:da:3d:96:59:76:5a:d9:6d:3b:4b:
                    b1:e4:8f:fd:ee:52:74:b2:5f:7c:34:74:a6:65:75:
                    90:59:03:c7:24:0a:bc:8d:e9:66:63:85:29:6d:05:
                    47:f5:bf:a2:18:f4:6f:43:c7:4f:d6:f4:cf:1a:72:
                    6f:f1:a9:88:14:9f:da:82:ae:f2:bd:91:f8:65:b1:
                    62:33:3c:95:95:c9:45:dd:8f:a8:5a:ff:a6:d3:59:
                    79:10:4b:d3:b8:a2:6a:01:ff:8f:72:b5:fe:55:8e:
                    3b:4a:13:10:64:58:e0:ea:34:8d:2e:9e:e5:d9:3d:
                    fc:3d:4f:a1:39:b1:b7:64:d5:64:a3:0f:d4:a9:47:
                    c3:44:7c:66:55:4d:09:3e:14:96:99:b7:a3:51:c1:
                    e3:8b:ca:20:fa:8d:7a:2e:9f:10:c2:7f:6f:0d:10:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E5:43:4F:E5:B6:1E:BD:D3:60:1F:3C:56:86:1D:27:56:3D:48:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/4fb7e074-338a-3ee4-b5a1-fb69715e992d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.146.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:16:14:72:8b:7a:7f:2c:ce:b9:06:35:2a:42:a5:7b:0b:0b:
         ed:07:85:02:b7:a5:f9:ff:c0:0e:a6:43:0f:6b:05:20:67:11:
         00:19:8a:18:32:66:a8:2b:a3:55:6c:a7:ce:62:21:35:9a:42:
         14:20:c7:b7:8b:53:75:26:d6:77:81:62:18:b4:7f:5c:23:67:
         d7:be:6b:57:36:84:f4:4b:f2:bc:a8:72:bc:33:66:3d:b5:7a:
         62:d6:a0:75:92:4f:fa:ff:e2:a3:77:2c:5b:b4:04:d1:d5:16:
         1c:b1:eb:bc:ae:a4:ea:9c:51:bf:eb:e6:94:37:19:b7:44:cf:
         c2:94:c3:81:44:03:28:c6:33:2b:5e:9c:94:41:86:dd:d0:59:
         a5:f0:7c:ca:02:fe:c8:cf:6a:9d:f1:f5:23:0c:c7:17:49:8a:
         e6:8c:25:8d:0e:d1:8f:d8:a7:46:a9:1f:7b:1c:93:3c:6c:c6:
         9d:94:c4:49:e9:15:20:3a:0e:98:f5:2c:56:06:f3:6c:5e:4e:
         bf:83:6f:95:37:00:da:ca:6b:b6:aa:ba:fa:2e:5f:26:9b:c6:
         9b:f3:48:89:f5:de:a0:04:f7:4b:88:2b:db:ce:cb:cc:59:36:
         7c:36:d2:e2:d8:b6:3d:b2:d9:e7:a0:3f:8c:42:e5:18:16:67:
         d8:54:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:28:02 2026 by rpki-client