Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/af703076-c254-3a5a-84d6-6afc2cfb865f.roa
File:                     af703076-c254-3a5a-84d6-6afc2cfb865f.roa (raw, json)
Hash identifier:          soNNX+RQwNUqmhTabyIZlJD5HYWGgmHsg9NfoLPJgXI=
Subject key identifier:   F7:7D:19:CD:B3:D2:4D:87:61:57:44:5D:D3:AB:A8:4B:85:77:CF:A8
Certificate issuer:       /CN=4936e456-c9b5-43ef-8bdf-475338747125
Certificate serial:       010D0C9F4328584E89BF8D6B7236E2E5A4060200
Authority key identifier: 96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/af703076-c254-3a5a-84d6-6afc2cfb865f.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     32415
IP address blocks:        64.139.128.0/24 maxlen: 24
                          64.139.142.0/23 maxlen: 24
                          64.139.145.0/24 maxlen: 24
                          64.139.150.0/24 maxlen: 24
                          64.139.193.0/24 maxlen: 24
                          64.139.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:8d:6b:72:36:e2:e5:a4:06:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936e456-c9b5-43ef-8bdf-475338747125
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=48b1a330-a211-41d9-9a27-3e51c14e2433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a1:2d:72:ac:77:9b:4d:08:55:c7:d0:bf:0a:
                    60:da:98:ef:1a:21:7c:e7:3d:00:b6:3a:37:db:5f:
                    ee:99:f3:2f:97:c9:64:39:a0:fa:d6:9b:e2:69:b4:
                    bb:55:bd:ff:92:9f:13:09:7d:34:f9:ec:c9:31:ff:
                    af:a4:5b:d0:d7:84:13:1b:80:fe:19:23:5f:fb:65:
                    14:a8:91:77:86:ec:6f:6d:7c:ab:b6:c8:bb:77:4d:
                    3f:63:4b:9d:8c:3f:e1:b2:48:81:b3:bc:95:ae:37:
                    ac:12:5d:74:47:89:78:36:e4:bf:ca:40:f6:c7:fc:
                    bf:b9:ad:45:27:f8:c2:92:63:b6:5f:cf:60:2a:6d:
                    97:4f:6c:49:fc:f5:71:c5:bd:80:72:7a:f6:9d:6a:
                    a6:90:75:14:15:9b:0b:9c:05:cd:60:c3:21:71:dd:
                    2d:91:9a:15:d4:95:1d:44:65:62:02:0b:45:5c:4f:
                    8d:a4:b3:79:7f:bf:e5:32:81:66:de:05:e3:f4:ee:
                    6d:f9:b4:99:0e:cc:36:22:6e:48:f9:00:ac:b5:a8:
                    b0:11:81:50:b1:6e:fd:a4:61:d3:7d:55:35:ed:47:
                    1f:e3:da:ad:5a:1d:f8:35:48:80:24:ea:74:53:11:
                    f8:5f:f1:66:13:7f:75:b5:e9:21:8f:00:00:07:8c:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:19:CD:B3:D2:4D:87:61:57:44:5D:D3:AB:A8:4B:85:77:CF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/af703076-c254-3a5a-84d6-6afc2cfb865f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125/4936e456-c9b5-43ef-8bdf-475338747125.crl

            X509v3 Authority Key Identifier:
                keyid:96:44:FC:2E:15:E6:90:83:4E:9A:85:53:91:B8:1A:E2:8C:4A:35:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4936e456-c9b5-43ef-8bdf-475338747125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.128.0/24
                  64.139.142.0/23
                  64.139.145.0/24
                  64.139.150.0/24
                  64.139.193.0/24
                  64.139.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:90:6d:32:cb:e6:7e:26:a3:eb:87:57:06:51:8b:80:75:da:
         f1:2d:38:47:78:e1:75:05:64:bb:48:25:ba:58:94:49:e8:8c:
         be:f9:99:b0:a6:a9:7d:0e:08:db:29:52:b5:3e:85:a9:5a:bb:
         30:bc:51:27:a4:c1:9d:54:00:7f:ea:89:fa:3f:e3:db:2b:f5:
         47:16:97:cc:e4:10:9e:bb:0f:b3:6f:64:d9:cc:6b:46:83:f1:
         ee:56:0d:a9:8e:59:df:d2:09:7b:9b:22:95:f1:0d:df:8e:75:
         98:9b:46:d3:8c:bd:58:d5:09:c2:0a:a4:60:5d:cd:21:32:33:
         94:b3:76:e0:ac:b3:4d:e6:d2:57:b5:df:30:a5:38:75:6b:25:
         d5:ab:b7:02:b2:fd:6a:e9:94:b3:5b:25:7b:30:b2:f2:d7:96:
         a7:e7:92:a8:55:48:f5:64:46:73:5d:e7:a2:a3:83:52:bc:4a:
         41:03:fb:60:96:30:83:3c:5c:b3:1b:c8:da:e9:cc:a5:d5:ee:
         d9:63:da:0e:90:13:d2:13:c4:3b:73:75:a9:30:93:ca:9d:d6:
         99:da:00:a3:32:77:34:73:d3:0e:d8:c8:8c:3f:cb:99:73:e4:
         2c:95:38:8d:eb:17:bf:90:ae:d6:b2:5b:f0:9a:2a:9a:48:ce:
         5f:ba:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:08 2026 by rpki-client