Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8b936b82-a03d-3124-8651-3dc415bf66d4.roa
File:                     8b936b82-a03d-3124-8651-3dc415bf66d4.roa (raw, json)
Hash identifier:          wFRRTuBZtTxfXsbPPDlBAVQQLeTcbhq3R2sxKkgacOw=
Subject key identifier:   DA:4F:90:CD:04:70:CA:98:53:C7:BE:8C:27:F2:D6:C8:30:2F:20:C9
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584E6F3A42F3E2E6B169ACEA9200
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8b936b82-a03d-3124-8651-3dc415bf66d4.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     834
IP address blocks:        64.40.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:42:f3:e2:e6:b1:69:ac:ea:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=035bdac7-11cc-43b9-a27e-95ece6f98e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:48:04:b3:30:2f:da:0e:4f:5b:96:ac:c1:
                    03:9c:4f:da:84:e2:74:bd:af:e0:a8:fa:4a:ad:20:
                    d5:7c:02:c6:f7:70:6b:8f:11:87:be:bf:ff:82:d7:
                    d9:1b:07:3a:5c:c3:f7:9b:3c:06:f8:94:ea:9a:ed:
                    ce:a2:32:a8:95:ce:bd:b7:10:c8:e6:ed:73:b6:f5:
                    e8:0d:38:71:00:56:e0:21:be:0e:96:eb:00:ed:c1:
                    46:71:55:05:b0:ba:a0:4b:e2:92:1a:5c:39:c9:f2:
                    1f:6b:f8:ba:5f:4e:2c:28:da:c4:be:b5:79:c0:5f:
                    cc:df:b4:21:2c:4e:b7:d6:d4:f9:63:65:32:7f:44:
                    f2:0d:0c:9b:1c:96:98:66:5e:4c:de:f5:84:b5:99:
                    0b:b4:d5:28:cd:18:0f:4b:83:45:6f:8a:a7:3e:43:
                    54:9f:9b:ad:2a:3c:48:df:4e:24:e4:4b:58:00:85:
                    27:51:7c:ea:96:35:02:7b:97:c6:91:e7:ae:cb:73:
                    6f:6b:50:51:56:fd:95:c5:22:2e:38:f4:4e:6c:f9:
                    fd:43:d7:87:43:30:02:d9:dc:55:9f:0b:65:a4:d8:
                    c3:83:fb:3f:97:d2:29:d2:65:43:c0:2c:d0:ee:fe:
                    5a:9f:57:8b:f3:f6:aa:c8:08:b7:ae:c3:a8:6f:d4:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4F:90:CD:04:70:CA:98:53:C7:BE:8C:27:F2:D6:C8:30:2F:20:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8b936b82-a03d-3124-8651-3dc415bf66d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:07:68:02:10:c3:d2:20:99:32:33:bb:10:85:b9:fb:24:25:
         ee:67:8c:b3:85:dd:12:ae:24:f7:fb:f0:da:2e:4f:13:09:46:
         57:3a:a5:ae:83:05:86:8e:7f:96:7e:84:e6:62:65:de:b6:47:
         41:44:f2:8e:51:dd:e9:ff:7f:d4:8f:81:e3:8b:ba:b2:f6:64:
         e4:45:78:d4:7c:5d:06:74:f7:9c:c3:91:b6:69:12:5b:33:e1:
         f7:fc:d0:a1:ac:b8:10:e0:e7:a4:9b:19:87:30:5b:65:14:e5:
         54:00:96:4f:0c:9b:4e:26:a6:70:5d:e4:8c:9b:16:66:c0:23:
         a4:53:4a:03:26:b8:d0:be:88:7a:15:56:f5:89:d9:57:e4:cd:
         46:65:df:ab:0d:0f:c1:24:d6:9a:a6:1a:f4:4d:37:5f:ea:44:
         af:22:20:ac:49:07:76:8f:02:f9:ad:b2:27:44:b0:1a:1e:dc:
         8b:18:f1:92:70:8a:8c:c8:e7:40:b5:b3:66:f2:c3:5a:b6:4b:
         cb:af:ed:11:7a:7f:b3:cc:92:cc:fb:9f:9e:bd:e9:d8:d0:77:
         1c:4b:4b:4c:c1:fe:c8:11:0a:45:94:a2:f7:3d:ef:a8:09:16:
         bb:2f:92:8e:28:96:f1:64:f6:ad:1f:2f:c5:19:71:87:1e:4a:
         4c:9f:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:37 2026 by rpki-client