Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa
File:                     6851468d-791f-3582-8090-bbf757f8e43b.roa (raw, json)
Hash identifier:          trrllaiXft9hP/d4/2qmmTOR+yliZpAyG7dBuYiktkk=
Subject key identifier:   91:D8:13:FA:36:7E:50:E8:81:C7:62:9F:38:CF:FE:7C:F9:15:7B:C8
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F4328584E7204CA6FBD388677CC099700
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     36236
IP address blocks:        64.68.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:ca:6f:bd:38:86:77:cc:09:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=23b11ad5-7659-44af-90e4-8df85c66df6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:2a:63:37:a6:db:ff:d0:e3:8b:7b:62:79:
                    12:fb:4e:7a:a2:ab:a0:37:ce:1a:d8:bd:6f:16:cb:
                    df:53:32:2a:6e:45:1d:95:2e:a9:3e:d8:0f:70:be:
                    23:ed:d4:e1:99:c3:c7:21:0f:ea:eb:76:7f:8e:c7:
                    87:81:91:6c:60:3d:36:c0:58:c4:7f:05:3e:b8:db:
                    fe:1f:49:5a:a3:64:c0:30:25:e4:c5:f3:60:5c:e6:
                    32:fb:99:52:26:71:32:94:d3:4b:25:a3:9d:81:d3:
                    00:3c:30:82:f8:73:90:dd:d3:a3:ae:00:b1:f9:ef:
                    63:66:5b:ee:83:48:92:82:51:f7:e8:09:69:06:89:
                    11:38:a1:35:5c:4f:15:11:4a:b8:b9:ee:69:52:26:
                    3b:a8:55:1c:8d:c3:18:c8:d6:73:c9:f7:c3:4c:c2:
                    98:cc:a9:bc:7c:e9:b9:2a:37:51:16:22:c6:65:3a:
                    ce:c9:7c:e3:4c:cc:89:50:7f:09:ed:ef:f0:b4:93:
                    cd:14:69:64:ee:81:1c:53:bd:e6:b9:33:22:dd:be:
                    4a:6d:c9:9f:5c:75:1b:70:ec:be:0d:4d:9e:14:25:
                    ec:1f:58:1f:f3:68:24:73:86:63:cd:33:2d:6e:9a:
                    61:cb:60:ca:ad:10:e4:ec:4f:ae:a9:76:68:d8:b3:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:13:FA:36:7E:50:E8:81:C7:62:9F:38:CF:FE:7C:F9:15:7B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8e:cc:69:32:81:cf:ba:33:3e:52:e6:7d:3b:43:b7:d3:85:
         e0:0c:5e:b0:9e:4f:e9:34:43:5a:8e:8e:03:d8:4e:e9:7b:da:
         73:7f:58:f1:67:7b:b4:4f:02:ea:0d:08:bb:b8:5e:65:ba:aa:
         17:ba:b0:42:84:ec:48:0c:7a:14:41:e0:d8:45:34:5f:76:ce:
         5b:8c:80:26:df:b9:87:fe:82:ad:48:9c:85:13:2e:5b:a5:05:
         01:aa:46:3f:ed:18:75:2f:a4:0c:cc:54:89:02:33:e6:f1:52:
         ff:d5:bb:21:12:e4:ec:ca:26:a9:f1:cd:0b:1a:b9:05:15:ac:
         c1:1d:13:b7:8b:b2:e8:da:ca:c6:6a:d5:07:74:59:6d:90:f2:
         fa:6b:f9:26:37:1f:d5:37:9d:70:eb:f0:45:bd:78:5f:fe:5e:
         cf:64:64:4a:ef:9a:21:60:9e:75:b0:3a:f9:49:d7:3e:fa:8f:
         1e:88:80:6c:c7:4c:ae:52:a7:54:91:a0:d4:3b:8d:27:32:17:
         89:0d:81:0e:31:41:14:90:89:89:3a:b8:1f:c5:8b:d1:84:c6:
         5f:3f:fc:67:99:66:a1:3d:f0:fb:66:49:9e:36:c4:a8:2c:af:
         fd:0b:0d:36:f8:fe:af:cd:3a:52:0b:da:a0:09:69:e2:ed:6e:
         09:86:8b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:09:35 2026 by rpki-client