Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23ef1f6d-a6c4-35d8-8003-82a5c8402d62.roa
File:                     23ef1f6d-a6c4-35d8-8003-82a5c8402d62.roa (raw, json)
Hash identifier:          CxgZWbbp5lrGGb0ms07gy2Pd9bgbb9cDaPqPgIWanZo=
Subject key identifier:   03:D0:FB:3D:04:85:63:11:46:9C:8F:6D:28:35:B1:FA:3E:C2:82:45
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EEA878BF13E09A2B08F617000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23ef1f6d-a6c4-35d8-8003-82a5c8402d62.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     273894
IP address blocks:        64.204.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:8b:f1:3e:09:a2:b0:8f:61:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=f4d42888-42f5-48d3-bb09-9489cdbc1398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:27:90:34:03:9b:03:5d:cd:80:57:b2:14:
                    3e:af:d8:66:d9:7a:29:4c:2f:98:2c:c3:9d:6b:3a:
                    c6:b5:a5:a0:fc:77:fe:ef:d4:0f:f1:9a:77:cb:08:
                    de:10:31:e7:11:68:97:25:c7:5c:e0:f9:de:84:15:
                    e0:90:f6:34:a5:ee:34:c8:51:88:6a:1d:2b:5d:ab:
                    01:f6:d9:ad:10:1f:5a:42:40:d6:e2:e6:69:90:9b:
                    82:3d:e6:cb:53:3c:84:fc:d1:99:8a:da:74:50:b4:
                    e4:32:a8:40:0a:76:68:0b:82:86:73:39:ce:1d:71:
                    95:c8:86:b4:44:e7:b5:b3:7b:e3:90:cb:02:1d:70:
                    80:bc:83:fa:57:cc:6f:78:45:0b:e6:26:69:e6:8f:
                    27:d5:c3:72:d2:8f:47:f7:69:34:16:d0:53:eb:b3:
                    fc:aa:7b:87:df:42:2e:cd:8a:61:56:1e:b1:c5:7f:
                    48:39:c0:68:c3:12:eb:66:f0:c6:c0:ff:d6:3c:9c:
                    9a:44:57:fe:94:09:15:54:33:02:dd:f9:fc:17:75:
                    6f:b5:99:d5:d6:8b:cd:b7:74:f1:f1:40:75:6e:c9:
                    bb:14:b5:7b:8c:4b:74:43:7a:36:48:f7:bb:1e:95:
                    30:ff:52:95:83:ce:0c:ea:d9:0a:42:66:09:8f:02:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:FB:3D:04:85:63:11:46:9C:8F:6D:28:35:B1:FA:3E:C2:82:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/23ef1f6d-a6c4-35d8-8003-82a5c8402d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:97:2b:c3:7f:95:5a:68:a3:0c:61:52:8c:97:7b:94:8b:
         26:6f:ea:2a:5f:6c:39:cd:ea:b2:be:f2:e1:a7:09:6b:c6:41:
         ab:62:f2:38:2c:c7:a9:0c:de:a0:5e:1f:e4:00:5c:47:13:13:
         f1:fb:ac:e0:a5:43:53:31:ab:e8:c0:e0:d7:fb:06:98:ab:fd:
         b5:16:ef:8d:eb:df:8d:bf:ea:bb:62:42:78:f5:4c:4e:5b:5f:
         eb:24:25:52:58:55:bc:a2:1a:fb:0b:b5:78:13:8c:95:cc:0a:
         74:c4:55:ca:17:bd:ba:19:ff:05:c8:2c:d3:a9:67:ee:de:9a:
         3b:3e:08:b4:b7:7e:82:d1:c3:46:7a:ed:ad:ed:83:b6:c2:34:
         05:4a:56:0f:94:b9:35:c2:3d:af:bc:74:e1:eb:b5:46:5d:27:
         dc:cd:f7:dd:ad:fe:43:92:01:2c:6c:44:1c:7a:e0:b1:d4:7c:
         26:21:4c:4b:ec:bf:39:32:f2:5d:c9:45:8e:0a:0c:3c:ff:f6:
         a3:f4:98:3f:f2:6b:2c:cd:32:7e:c1:90:1c:d5:21:dc:89:a6:
         3d:c5:4d:b8:da:48:33:d0:da:6d:3d:5f:c8:4f:a8:42:a7:b2:
         f8:31:20:ac:4d:9f:b9:b9:2f:95:0b:10:7f:27:14:ba:b1:51:
         ba:b1:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:45:23 2026 by rpki-client