Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa
File:                     4af76320-999a-3cd7-a897-27c3287ae51b.roa (raw, json)
Hash identifier:          /dU7iGxOmBupybf1FUv1qAMgPosP74RctA3W3Y+jpgo=
Subject key identifier:   4A:21:82:7A:F7:25:FF:4D:32:E6:93:BD:E7:3D:D9:77:CC:44:37:47
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584DC83042B006BE5DBF4BCC1C80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     32181
IP address blocks:        64.224.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:42:b0:06:be:5d:bf:4b:cc:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=1bb74627-9a09-4265-90f3-d6822da678bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b7:66:89:da:60:af:55:4a:0d:56:f0:b0:06:
                    2a:7e:fe:68:be:97:4b:a0:7d:b4:40:6c:19:a6:27:
                    64:d3:03:00:11:4e:9d:97:70:39:9e:0d:19:77:1e:
                    13:cf:16:7c:76:7e:a8:21:06:70:f4:cb:be:3a:57:
                    5d:b3:81:75:3d:ef:fa:d8:86:03:0d:dc:1e:5d:8a:
                    be:48:46:81:0b:12:d0:63:d0:8c:e3:0f:fe:2f:eb:
                    0b:92:3b:78:bd:75:cb:81:aa:c6:10:4e:fa:f9:79:
                    cc:b0:02:f3:1c:97:b4:fc:01:f3:fd:a6:b2:c4:4e:
                    7d:a2:dc:75:73:86:0a:7c:01:27:d4:32:9f:52:1e:
                    aa:b6:a4:c8:0b:8f:c5:04:2f:79:93:60:98:ca:b9:
                    4f:cf:13:ea:88:81:b7:78:10:d3:1e:cb:aa:fd:4e:
                    31:0f:97:b3:ec:e0:45:23:5e:90:4f:87:9b:c8:a1:
                    51:5c:f3:b3:8a:eb:b9:f0:f1:85:09:08:2d:75:80:
                    d8:76:90:a1:bc:d5:21:7e:0f:25:d1:25:5e:02:59:
                    cc:47:52:5d:e3:5a:88:ab:40:73:99:db:29:52:53:
                    20:43:d6:4c:24:29:cd:3e:af:ca:ee:82:48:a4:5a:
                    d6:ee:e5:db:8c:98:40:4d:e5:e9:2d:7e:c1:01:3e:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:82:7A:F7:25:FF:4D:32:E6:93:BD:E7:3D:D9:77:CC:44:37:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e5:94:e6:38:33:86:13:05:39:6e:d0:08:e4:7d:b1:af:94:
         7a:a8:00:d8:16:ec:d2:2f:46:af:89:dd:db:4e:e2:13:91:d4:
         a0:21:dd:c8:40:d9:8c:3b:b1:76:53:43:7f:7d:40:ec:31:84:
         9e:6f:1d:30:cc:4f:07:1d:42:9d:57:3c:ba:81:cb:57:37:aa:
         5a:c5:b2:e6:08:07:e1:bc:72:c9:5a:2f:98:01:7c:e0:12:6e:
         e0:83:70:84:b8:d5:46:c1:89:c6:69:18:96:1d:a9:20:3b:bf:
         42:a0:57:41:85:4c:14:63:8b:db:e6:da:fe:78:7c:08:13:a5:
         6f:e3:5a:5b:93:83:79:81:44:ca:7f:6c:60:cc:96:28:75:e1:
         97:a3:76:15:f7:55:12:c6:e2:09:aa:85:38:24:3f:c6:10:93:
         1d:9d:55:33:a8:24:f9:64:a7:1c:33:34:fd:41:95:94:57:f7:
         1c:d9:1e:7a:b1:69:a7:35:8f:57:f6:84:a5:df:fe:b6:fd:4a:
         30:a6:11:07:f7:98:90:8e:f5:87:bc:10:b7:b0:fb:50:09:38:
         04:5f:7f:28:6d:d6:84:fe:9d:ae:6c:0c:d0:43:f4:90:dd:ea:
         91:0f:3c:61:52:7f:3a:67:14:cd:94:cf:06:c9:02:84:15:08:
         9c:aa:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:24:40 2026 by rpki-client