Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa
File:                     6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa (raw, json)
Hash identifier:          Qj+00ok8E1hQKm0Rf2HLaMmNB4V101l0JKWw63PWtks=
Subject key identifier:   18:76:A0:4D:F0:78:83:9E:74:AA:E4:5A:B6:74:81:CA:0F:70:18:C9
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584E90BA4BEA12B2DF11286690B0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     852
IP address blocks:        64.22.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4b:ea:12:b2:df:11:28:66:90:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=1f035cc1-6ba5-4eca-b828-5cab7d5f1d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7d:bd:0e:6c:6b:99:f2:91:8d:6e:b0:a5:b3:
                    83:41:7e:11:2b:25:fd:41:1c:59:50:5e:6f:bd:b1:
                    fd:8c:e0:70:cf:bf:2d:26:e7:ec:7e:9d:2d:ad:df:
                    dd:02:3b:a2:4e:6a:8a:1d:85:c3:f9:90:09:86:d4:
                    9c:b7:e8:65:5c:4c:ef:4a:3a:3b:90:06:ce:38:af:
                    c8:b8:0c:bd:9d:b3:97:9d:94:a5:e5:06:be:82:c6:
                    ef:a9:49:f9:1c:bf:ff:56:86:c3:fd:bf:14:71:de:
                    03:04:0c:4d:f5:68:30:ab:cb:da:8e:20:4c:41:1d:
                    5e:5c:4d:6a:29:6f:ad:0b:f6:15:9e:f4:7f:90:73:
                    ae:08:75:e3:98:28:85:0f:19:43:4c:b0:b4:f0:b1:
                    8d:fc:29:03:dc:0b:2a:46:06:f4:48:5a:29:52:63:
                    78:8c:2f:32:21:74:3c:3d:f5:a3:18:d5:2c:0f:73:
                    5e:43:d5:e7:71:43:d8:a5:45:39:a6:b5:e0:e8:ea:
                    5c:d9:77:be:15:0d:f0:79:cb:9d:40:ac:f7:d3:49:
                    6b:40:92:60:87:bf:f7:a6:88:d9:6a:0f:a6:2f:b5:
                    71:6f:c5:6d:49:d1:e3:a4:e5:46:68:b5:79:70:4f:
                    b7:50:04:1b:f2:59:6d:af:29:37:dc:e4:8f:26:e2:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:76:A0:4D:F0:78:83:9E:74:AA:E4:5A:B6:74:81:CA:0F:70:18:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:68:c5:9e:2f:d0:35:28:0f:7c:98:85:b9:36:59:5a:f0:
         46:fa:fd:66:ec:59:6b:d9:24:6c:3c:86:fa:fb:15:37:a1:a0:
         61:a9:e8:bf:fd:e8:5a:2b:7c:45:61:46:00:5c:f3:b1:63:d7:
         66:54:04:ac:fe:2b:b2:81:8f:1e:5d:05:79:af:f7:27:e2:e2:
         72:03:5b:08:1f:b5:00:c9:43:03:b7:e9:77:8b:52:fa:e9:52:
         ac:fb:9f:e9:b3:4b:55:38:9e:ac:5d:ec:98:1c:76:c2:4c:39:
         f1:e1:57:e1:90:97:b2:22:43:fb:73:0e:20:12:1c:d0:79:9d:
         84:87:1b:f6:4c:9e:98:c1:22:50:f4:ac:f6:c6:9d:cd:73:89:
         6e:ee:45:a0:94:a0:77:7d:d8:50:b1:80:b7:c4:80:af:db:99:
         b9:97:cb:39:e8:96:73:72:19:cf:5b:e0:03:df:f9:e7:5c:3f:
         1e:94:f8:f8:5d:28:9e:57:80:74:d9:c9:4d:ef:29:da:ac:e7:
         2d:0d:71:79:ef:5f:40:a1:73:7c:1f:38:43:ed:6b:78:43:eb:
         2c:dc:f4:54:db:ac:16:bd:7e:c2:be:15:75:12:ed:39:28:c8:
         61:77:99:03:a6:07:81:d6:33:3f:d1:36:9e:df:87:ab:96:04:
         b8:a6:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:11 2026 by rpki-client