Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa
File:                     b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa (raw, json)
Hash identifier:          48dJT6W+zW6SkEGVXxcX/sxxein64wRDyYmiQrZIIx8=
Subject key identifier:   D9:FB:6D:87:78:56:10:36:EB:50:21:7C:3B:8C:AA:A3:ED:0A:FE:B9
Certificate issuer:       /CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Certificate serial:       010D0C9F4328584D9CEAB2AD8FE646670A6C9B00
Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa
Signing time:             Fri 24 Apr 2026 13:00:31 +0000
ROA not before:           Fri 24 Apr 2026 13:00:31 +0000
ROA not after:            Thu 23 Jul 2026 13:00:31 +0000
asID:                     62731
IP address blocks:        169.197.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9c:ea:b2:ad:8f:e6:46:67:0a:6c:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
        Validity
            Not Before: Apr 24 13:00:31 2026 GMT
            Not After : Jul 23 13:00:31 2026 GMT
        Subject: CN=c7225f76-9e57-4a65-b387-79286687f3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:13:1a:55:42:a3:8b:c7:fa:78:31:7a:1d:
                    22:8c:6c:43:83:13:50:40:50:19:9d:8b:19:7b:9a:
                    6c:d1:fd:b7:33:27:a5:b2:a2:38:1a:e2:70:5e:b7:
                    d8:a1:2a:2a:38:29:fe:5e:54:73:4c:9f:b8:eb:b5:
                    63:b6:1c:6d:15:ac:24:c2:ab:8e:85:33:55:be:26:
                    98:78:67:db:c2:1b:62:15:39:18:27:60:f7:fe:a1:
                    d2:5f:30:f7:5e:02:11:84:d1:eb:be:f8:8e:04:bc:
                    cd:40:3d:5f:a6:76:c4:f5:67:63:60:5b:c7:8e:61:
                    e9:1c:5f:5d:6f:da:ea:1e:db:c9:30:b6:68:17:fb:
                    0e:00:29:70:8e:35:dc:e0:13:41:a6:06:dc:06:ec:
                    c9:e1:f2:f2:1b:aa:55:03:05:4e:11:06:2a:8d:87:
                    92:b3:1e:07:3d:5d:01:c1:94:d6:80:2a:4a:6b:33:
                    70:33:a6:b3:9d:84:40:55:0a:44:b6:c1:fa:4c:64:
                    c0:11:74:00:cd:88:d7:c2:27:db:43:8f:2c:b4:cc:
                    e2:42:73:e5:1f:8c:de:5b:ae:9b:a2:94:e0:69:ed:
                    58:e3:0d:9a:68:e6:ea:50:3e:12:77:22:6a:a0:2f:
                    08:c0:7c:d2:96:e7:76:fa:4a:f8:81:df:f4:37:d0:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FB:6D:87:78:56:10:36:EB:50:21:7C:3B:8C:AA:A3:ED:0A:FE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl

            X509v3 Authority Key Identifier:
                keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:89:6d:f8:cd:5c:ba:e6:95:e7:9c:dc:3e:38:77:6c:d8:
         30:44:a8:8f:1b:51:62:80:69:26:dd:82:73:fb:a2:ed:11:5d:
         80:7f:8c:4c:82:0d:65:3a:9e:d4:51:e9:c1:da:bc:76:be:ad:
         1f:fe:ef:ae:63:ca:93:06:e3:99:20:1a:1b:de:72:bb:d7:c2:
         13:b2:2a:a2:27:ab:39:16:ad:a8:a9:d3:8d:aa:01:bb:6d:79:
         a0:b4:23:bb:3e:2f:03:04:85:6c:2e:34:09:4e:de:b2:2d:04:
         00:a3:6c:5f:c3:14:64:5d:5d:1b:e0:78:6b:aa:ce:08:74:7e:
         8e:2b:ac:a4:20:5c:60:60:9a:3f:33:b1:fe:cc:78:d8:e9:a8:
         44:2c:2a:58:af:64:02:bd:f3:fd:99:9a:e3:20:03:08:aa:ca:
         74:56:0d:1a:0d:40:cc:8f:68:95:5c:d3:dd:7f:4a:26:3f:ce:
         79:88:1d:e5:5b:d7:15:9b:f6:3c:15:f4:1d:35:d1:98:c9:09:
         ca:11:ef:60:8d:34:2f:4c:6b:33:40:f5:5f:18:85:4f:58:08:
         38:d6:2b:2d:3b:ba:2b:1b:e4:f7:00:6b:0d:60:8b:1e:79:a3:
         30:44:5e:ea:0a:c3:e0:63:37:c2:7d:ef:b2:b9:e6:2a:fb:f2:
         50:cc:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:06 2026 by rpki-client