Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/045ea523-a529-346b-a12a-85e835d604fd.roa
File:                     045ea523-a529-346b-a12a-85e835d604fd.roa (raw, json)
Hash identifier:          wVoZ4EututjD0bTkelDnkdYjKrBZQQkWV1h+ypqP3LI=
Subject key identifier:   1C:42:E9:11:2C:0E:39:F0:B2:74:79:1D:28:A6:B6:2F:6E:FB:A9:87
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E729B7CF086637339DC9A1ABC
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/045ea523-a529-346b-a12a-85e835d604fd.roa
Signing time:             Fri 10 Jul 2026 02:03:57 +0000
ROA not before:           Fri 10 Jul 2026 02:03:57 +0000
ROA not after:            Thu 08 Oct 2026 02:03:57 +0000
asID:                     402487
IP address blocks:        65.86.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:9b:7c:f0:86:63:73:39:dc:9a:1a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 02:03:57 2026 GMT
            Not After : Oct  8 02:03:57 2026 GMT
        Subject: CN=71fb2b20-c0f2-4348-a5b5-59df6e054504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:9f:7b:fc:12:92:12:70:5f:b0:07:43:89:
                    44:2b:25:5f:2c:81:47:56:f1:d0:33:64:a2:68:ed:
                    c0:3c:b0:2b:36:60:62:20:b9:45:48:a9:6d:3e:d9:
                    c4:4a:3d:5c:3f:e0:eb:07:ee:36:a2:e2:2d:c3:8e:
                    ac:d5:28:1b:d2:a8:a8:4b:a2:b5:34:22:ef:27:3b:
                    c6:0f:46:d0:e6:b9:bf:51:a5:f2:a1:9d:cf:4f:18:
                    9a:1d:4f:ce:bd:e3:74:01:dc:9f:c5:73:f9:79:d0:
                    24:a7:0c:56:4e:86:e6:85:2e:4c:01:fb:de:1c:d2:
                    c4:fd:5f:25:ad:15:23:a2:d0:c5:bb:8e:71:f3:81:
                    8a:db:b7:53:db:64:5b:f7:5e:4a:63:89:fc:4c:93:
                    db:0d:5b:f1:f0:1d:e0:9d:04:9b:cc:07:97:c1:25:
                    ca:51:91:58:ef:da:7c:a1:75:8c:05:81:5a:91:6b:
                    84:f1:31:5d:31:06:8b:24:28:db:26:ef:e9:f4:a6:
                    23:14:dd:9e:ac:c1:cb:fe:07:d5:4a:c4:e5:ee:10:
                    c2:2f:f5:ee:7b:38:74:0c:99:28:0c:63:a0:2c:3a:
                    e6:ea:8a:c6:dd:99:1a:fd:ba:0f:d0:ae:d5:ea:6e:
                    59:86:ae:35:0b:69:60:20:7c:f5:a5:84:c3:9b:a9:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:42:E9:11:2C:0E:39:F0:B2:74:79:1D:28:A6:B6:2F:6E:FB:A9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/045ea523-a529-346b-a12a-85e835d604fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:ca:17:14:9b:66:3c:2f:2c:99:4d:e2:5a:6c:0b:d7:31:
         2b:93:03:8a:70:17:29:5f:8a:4c:7c:24:90:08:29:67:7d:57:
         46:be:9b:ff:70:af:13:b0:bb:ac:40:bf:eb:f3:de:47:c2:76:
         6a:1d:67:55:68:69:9f:25:68:4e:0c:07:c1:e0:50:08:14:ce:
         d3:d4:50:7b:b3:6b:f9:6a:7f:09:c6:ed:e9:3d:a6:69:4b:e8:
         72:98:fe:73:a1:3a:1b:fe:8a:e6:1e:5a:18:56:d4:15:72:cb:
         87:6a:ae:95:30:ee:6b:4a:88:8c:1c:75:25:f5:67:80:5a:22:
         c7:b9:05:75:a7:87:d0:63:3f:c7:03:3a:d2:f0:70:e6:88:92:
         c1:63:85:50:39:2e:e2:dc:e8:70:a6:38:c6:3b:0e:b8:da:d5:
         9c:33:61:a1:43:83:b5:00:e2:9c:8e:7e:13:ff:4c:49:06:08:
         29:35:63:73:d8:aa:68:b4:2d:32:7b:75:2b:26:2b:3a:83:9a:
         ca:ac:ea:92:bc:b9:e9:48:4e:7f:e0:63:c1:93:87:1d:89:17:
         c4:fd:a4:ba:53:18:d8:f5:f3:03:1c:dd:d9:b9:0d:6f:9f:76:
         56:b1:17:1f:7a:14:d5:32:07:a8:9f:49:3e:ae:94:bd:90:33:
         53:70:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:49 2026 by rpki-client