Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/eaa7439b-44d4-3b5f-8ef8-0650ff069bb2.roa
File:                     eaa7439b-44d4-3b5f-8ef8-0650ff069bb2.roa (raw, json)
Hash identifier:          1BzbdtddoPR1EriNnMPUkz3cfMA3VKQ3fpRUXk3taPg=
Subject key identifier:   0A:41:A1:F0:EB:61:9C:81:29:5F:BA:D5:18:2F:95:22:E4:1C:B7:1B
Certificate issuer:       /CN=12de60db-ef00-4011-ac2b-057362ea0602
Certificate serial:       010D0C9F4328584E89BF905A4251063225775F00
Authority key identifier: 34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/eaa7439b-44d4-3b5f-8ef8-0650ff069bb2.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     36849
IP address blocks:        64.65.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:90:5a:42:51:06:32:25:77:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12de60db-ef00-4011-ac2b-057362ea0602
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=79ca8ac9-4197-42b8-8bcd-c09608ef30df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bc:d1:a4:5c:76:24:74:19:2f:9e:ea:60:d5:
                    98:0f:71:5e:67:60:5d:09:c9:25:a5:8a:88:83:8b:
                    66:5b:89:d7:33:27:2d:80:c7:64:78:2f:f4:e3:9e:
                    ca:9b:c9:bd:fc:18:16:45:9a:a5:79:58:3c:4c:f5:
                    42:8b:d0:ce:71:99:ee:36:69:12:3e:c6:66:89:54:
                    57:bd:f9:47:f3:94:f7:77:90:2f:f7:df:1a:b1:c2:
                    a7:56:07:b0:94:be:0f:6f:b2:4a:49:59:ea:20:69:
                    29:1f:dd:86:1f:cd:88:42:6d:2f:b9:1b:21:b3:a8:
                    ba:09:d3:81:88:6e:43:2e:9b:c6:b7:2c:df:37:61:
                    bf:7c:44:a3:e7:e1:78:c5:9b:a0:18:6b:c9:79:e4:
                    ae:cd:31:07:e0:c4:d1:cb:c5:1c:24:30:ac:21:7a:
                    26:27:9c:e4:46:0d:15:4b:06:fb:76:6c:09:f9:aa:
                    82:f5:fe:e6:c4:9e:81:90:29:39:25:04:a5:35:a6:
                    62:27:6d:c2:2c:64:39:71:27:76:7a:36:e9:5b:9b:
                    dc:d7:df:96:f5:7e:06:91:b9:c3:c4:51:e1:e3:c6:
                    f3:9a:4c:67:c4:4c:59:6f:79:b0:b0:d6:ac:19:d2:
                    52:78:07:2d:b7:ad:2f:30:97:1f:61:fc:44:46:16:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:A1:F0:EB:61:9C:81:29:5F:BA:D5:18:2F:95:22:E4:1C:B7:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/eaa7439b-44d4-3b5f-8ef8-0650ff069bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602/12de60db-ef00-4011-ac2b-057362ea0602.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:A5:18:F7:17:0E:8A:9E:0A:AB:34:70:1E:47:CD:00:50:B4:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12de60db-ef00-4011-ac2b-057362ea0602.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.65.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:e6:9b:8f:e3:64:8c:a1:1f:40:5e:8b:72:7e:10:00:08:0d:
         f6:dc:79:db:92:ae:7b:9e:b2:53:7f:e1:5b:b2:5d:27:a5:ad:
         ef:4c:40:ca:66:78:e5:33:e6:47:3a:49:7d:92:9a:69:08:0c:
         34:3f:41:bb:51:11:1c:ba:19:53:82:d8:bf:da:d6:4d:3b:fc:
         8b:de:eb:56:de:25:94:84:78:8f:e9:8e:1d:ae:04:08:7b:fb:
         1a:80:4c:df:57:1b:86:35:41:70:6d:e4:80:e8:c4:36:8d:6c:
         70:0c:3e:9d:b4:ad:68:a4:f0:f8:fb:bb:ec:7f:3b:70:12:58:
         4e:20:4d:5d:0c:71:57:71:21:30:8f:0e:26:82:ee:a4:ca:7c:
         a7:ae:c4:75:c7:71:c3:f3:0f:8a:71:f8:da:ac:00:1b:b9:b1:
         42:a7:44:e5:55:bf:1d:d4:00:2c:76:f1:c6:61:ba:8a:52:e0:
         fe:94:c3:9e:b4:bb:ea:b3:94:3a:c1:38:07:97:d2:a1:91:e6:
         2e:bb:ff:79:67:ec:14:85:bc:fa:6c:19:7a:23:3a:7a:8b:8e:
         b0:52:c3:46:8b:cb:bf:68:41:63:f0:30:cf:2d:82:3a:39:48:
         f8:00:a0:49:27:12:d3:b1:99:7a:3d:fc:b6:a8:82:40:ed:ae:
         d6:bd:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:27 2026 by rpki-client