Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/228ed946-2011-37a8-b155-9f342f097247.roa
File:                     228ed946-2011-37a8-b155-9f342f097247.roa (raw, json)
Hash identifier:          Pa4Fv9tDljfxC8uyxvX9RleTUSBpRDVkQdXi5MAysBg=
Subject key identifier:   4D:B9:84:D6:5C:CA:0D:92:49:EB:BD:11:F5:47:1D:FB:71:97:B7:A0
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F4328584E90E4BBC4BE8FADF8067A0500
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/228ed946-2011-37a8-b155-9f342f097247.roa
Signing time:             Mon 20 Jul 2026 22:25:47 +0000
ROA not before:           Mon 20 Jul 2026 22:25:47 +0000
ROA not after:            Sun 18 Oct 2026 22:25:47 +0000
asID:                     834
IP address blocks:        64.113.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:e4:bb:c4:be:8f:ad:f8:06:7a:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Jul 20 22:25:47 2026 GMT
            Not After : Oct 18 22:25:47 2026 GMT
        Subject: CN=577fdf1e-1cf1-4f01-8685-4a5990479402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:bf:34:b1:7f:63:ac:97:d0:68:6f:16:13:
                    e1:7f:2e:87:d6:20:90:5a:89:ac:4c:10:14:92:05:
                    28:89:a9:e7:7e:c2:c7:9c:bd:3b:4f:f1:70:41:5f:
                    51:7c:22:69:48:5c:67:54:42:31:37:ae:e4:b7:5e:
                    57:ec:40:b3:7f:6d:39:bd:68:c6:4a:f5:d0:1e:68:
                    60:65:6c:7d:35:e6:b8:de:5e:95:2a:46:4d:a8:66:
                    5e:79:72:41:d6:e3:05:27:0d:80:9f:a2:ab:e7:91:
                    25:c0:c4:cf:54:6b:27:3d:3f:d9:eb:03:8a:8a:8f:
                    ca:41:cd:af:1c:91:5f:ec:0e:bd:37:ee:a2:51:e2:
                    9c:85:6c:9e:81:76:6b:72:60:18:d1:dd:d0:43:50:
                    04:5b:bc:53:31:cb:ff:b5:88:45:12:8a:2f:8a:38:
                    e4:db:ca:dd:67:4a:bd:78:8a:f8:c9:65:f6:6e:9c:
                    b5:26:fe:35:69:e8:d4:02:4d:7c:ce:41:de:94:a9:
                    e2:c1:67:21:f4:9b:6f:44:c6:8b:33:df:64:b4:7a:
                    ea:5d:88:cd:67:3e:d5:1f:28:f8:b1:8a:41:12:a8:
                    6c:53:10:14:5f:20:d1:77:57:3c:6b:8b:31:37:b2:
                    c3:af:a2:63:3b:aa:56:d7:34:05:19:df:a8:58:48:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:84:D6:5C:CA:0D:92:49:EB:BD:11:F5:47:1D:FB:71:97:B7:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/228ed946-2011-37a8-b155-9f342f097247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:d2:55:be:0a:30:0b:17:6e:52:09:7d:04:da:c4:5f:c3:
         60:34:89:3d:b3:7b:5b:52:70:bb:b6:d2:10:85:a1:d2:03:fb:
         d4:83:71:a6:53:db:e6:b5:36:5f:0a:6d:73:af:e5:e4:28:54:
         dc:d8:79:60:05:eb:e8:17:aa:fb:d1:2e:5f:b1:6e:b8:a3:04:
         7d:2a:e8:f3:dc:eb:50:56:28:aa:59:8a:ae:90:84:bb:48:ad:
         82:86:a4:82:10:bd:9c:97:2b:78:d3:e8:af:6e:eb:40:a0:be:
         9f:1b:55:43:e0:e7:2e:a5:db:ae:4f:fb:e7:ea:07:5b:b0:f6:
         60:e5:50:c8:61:25:58:41:d0:af:0d:aa:9a:a0:4f:e8:70:92:
         ee:6b:0d:d6:2d:44:d1:b7:35:ef:2c:dc:ae:1a:31:94:95:e4:
         f5:46:d1:ff:c3:be:3a:ee:90:a1:0d:6c:b4:0a:bc:35:a7:41:
         02:e4:f4:94:91:3f:cc:0e:0f:58:7f:5c:9a:c9:15:cc:74:87:
         92:31:18:19:03:5d:fd:09:1b:6f:60:29:60:a9:4e:80:45:af:
         95:0e:6f:03:57:d5:21:ac:73:09:5e:3a:98:4c:0c:5a:2c:26:
         c9:30:0a:0e:b0:be:89:13:7e:a9:59:31:e9:a0:28:70:54:84:
         45:b8:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:12 2026 by rpki-client