Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/8acca350-9001-3779-b783-64bf0bd821a3.roa
File:                     8acca350-9001-3779-b783-64bf0bd821a3.roa (raw, json)
Hash identifier:          jmORyQ+5L6alADONoKr4DW5O19Er7kAV/H88JKHH//4=
Subject key identifier:   2E:DE:36:AD:1D:45:50:60:CF:0D:FE:12:DF:34:CC:55:CF:44:50:E7
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584E991A55AEF223E1A0ABDA9B80
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/8acca350-9001-3779-b783-64bf0bd821a3.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     398391
IP address blocks:        64.227.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:55:ae:f2:23:e1:a0:ab:da:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=36581e35-8878-4f6a-bb97-c7041b3944f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:85:92:57:f4:9a:ae:67:1e:2f:b2:34:b2:0e:
                    70:06:60:7c:18:13:4b:4e:e9:a9:b4:c6:83:8f:eb:
                    04:4f:10:bc:70:3f:1c:a2:fb:d9:e2:0c:30:b1:ea:
                    74:c9:83:2b:eb:8d:ee:67:34:99:b3:9a:c9:07:81:
                    51:84:41:0c:c3:77:41:1b:38:9c:b7:7d:e6:bb:82:
                    a1:8c:c8:6b:f9:92:9f:cb:7d:ac:06:09:1b:a7:5a:
                    73:6a:c3:02:ac:94:90:ad:bf:98:bc:c7:78:91:8d:
                    59:2c:69:e5:41:61:ef:75:24:95:dc:25:bd:ef:e5:
                    51:86:26:bd:63:5f:77:47:9e:a2:a3:44:64:f5:a2:
                    42:56:73:1b:d4:01:e1:73:79:2e:4a:85:12:dc:e4:
                    a7:d2:d3:57:07:da:da:58:03:27:54:e2:8a:8e:ef:
                    af:b1:b1:59:00:0c:90:0d:eb:94:02:83:54:01:fb:
                    c3:e3:23:5a:24:77:2f:48:1e:c8:5a:00:cd:c3:87:
                    ee:58:46:30:e8:75:e0:be:0f:6d:69:32:f2:ff:36:
                    ea:da:5b:f8:44:bd:9a:84:73:f2:6c:4a:13:5c:4e:
                    c6:c9:51:f7:df:f4:e2:8b:54:b4:8a:60:7a:5f:5a:
                    ae:b0:3a:69:2d:d7:66:3b:c5:4e:1c:a2:a4:3a:d7:
                    5b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:36:AD:1D:45:50:60:CF:0D:FE:12:DF:34:CC:55:CF:44:50:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/8acca350-9001-3779-b783-64bf0bd821a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:7d:af:db:4c:25:94:63:8e:db:83:80:ea:33:70:2f:38:
         58:b6:48:c0:b5:cb:d1:ae:bd:49:ac:f1:1c:d0:eb:b7:f0:ac:
         c0:dd:cb:c8:ca:cc:49:fc:25:45:9b:42:db:c3:df:51:4b:de:
         de:34:66:0f:8c:ea:5a:da:06:5e:c9:2b:dd:df:c7:8a:23:5a:
         bf:f1:c4:f6:74:1d:03:41:75:38:ab:61:4f:57:0b:67:a6:23:
         13:62:d1:4b:9a:6b:ab:8d:b5:e9:4b:08:12:3c:fa:53:cd:55:
         83:a9:ac:39:c6:ea:8d:ea:a1:4d:12:58:0c:1e:5e:26:96:bd:
         97:74:59:1c:f2:f4:ac:9a:50:8d:f3:ab:aa:c4:73:63:40:f6:
         57:94:1f:23:ad:d1:6c:51:70:3a:75:fd:e0:6e:05:fd:ec:3a:
         d0:a9:5c:f4:d8:80:94:6f:b6:33:de:80:cf:b2:cd:1d:bb:66:
         37:86:5d:51:44:47:5c:ad:40:c4:5c:8b:22:50:5a:f8:b0:36:
         04:79:34:eb:55:97:f8:e6:9e:45:c5:69:19:f4:59:32:af:01:
         b4:a7:ac:2b:7f:ea:7f:bf:ce:72:a0:ea:ac:46:a1:e9:c2:a0:
         62:dc:8e:01:cd:07:17:2e:a6:16:e4:fd:5f:68:b3:56:54:f0:
         9c:63:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:16 2026 by rpki-client