Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/328317c3-822e-38f4-99fd-1c6bf61030a4.roa
File:                     328317c3-822e-38f4-99fd-1c6bf61030a4.roa (raw, json)
Hash identifier:          BaPlMXh1++jjZoGiEvl0Ks5bSHIXgW230CALt60kZ9A=
Subject key identifier:   F7:FA:D2:03:D4:00:19:BC:85:11:6A:06:35:CB:AD:A2:65:F8:CE:CE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5619E5ECF11D31730C657C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/328317c3-822e-38f4-99fd-1c6bf61030a4.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     2914
IP address blocks:        64.205.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:e5:ec:f1:1d:31:73:0c:65:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=79e12db3-c71a-4e49-a089-a61d7735f9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:43:49:e7:e6:21:e9:d1:e7:98:9a:9b:90:
                    ff:6c:81:70:12:99:ed:3b:ff:e6:66:dd:5f:2b:d5:
                    c8:d6:74:50:65:60:8c:24:f1:20:6c:1b:26:d6:cd:
                    79:60:a6:28:2f:93:15:08:da:77:87:c4:52:a4:f9:
                    94:62:68:f3:a1:58:6c:e7:49:7f:51:72:31:07:32:
                    6f:b9:99:98:f5:a1:a2:0b:84:cb:86:ec:57:18:59:
                    6b:14:c1:48:6b:1b:b9:29:42:c9:94:7e:7b:13:b7:
                    64:86:dc:fc:81:b2:e3:55:4f:38:96:02:02:da:ab:
                    6e:49:61:56:0f:05:14:15:9d:28:ba:fa:35:61:6b:
                    bc:63:f4:69:1a:de:27:1a:07:f7:6b:f4:dd:e8:b9:
                    af:7b:12:30:df:80:43:6f:4f:84:04:16:4d:df:e2:
                    6a:fd:4f:90:f7:bc:97:9c:2f:5d:57:52:fb:d0:32:
                    d8:29:9f:1c:9d:60:94:59:41:aa:50:60:01:a4:c2:
                    61:58:1c:fe:84:ab:92:0b:fd:ab:75:22:69:41:dc:
                    d3:8d:08:02:4f:cb:18:d7:c9:c9:fe:84:1d:06:6a:
                    2f:30:56:37:bd:49:63:05:a0:0e:43:43:4d:f8:c7:
                    e2:8b:40:76:36:6d:a9:94:6c:23:2d:cd:6d:2b:ff:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FA:D2:03:D4:00:19:BC:85:11:6A:06:35:CB:AD:A2:65:F8:CE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/328317c3-822e-38f4-99fd-1c6bf61030a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:55:92:f3:da:db:4d:3f:ab:99:88:3b:ac:d1:90:d7:ac:8a:
         6d:6c:f5:6b:9e:ce:ec:0c:80:c9:d7:3c:9f:01:6c:62:be:bd:
         24:4e:f7:18:f4:aa:73:ba:cc:cb:94:3c:4c:9a:03:46:20:2a:
         5b:2e:b8:cf:67:5a:2d:4d:35:7c:3a:9d:66:9c:ce:5c:59:5a:
         b4:b1:b6:b3:6e:25:4a:8d:7a:3f:93:e4:7f:06:8b:24:6c:0c:
         06:90:dd:2f:a0:99:37:26:06:4c:34:f7:a5:bc:5c:4a:20:94:
         ff:d5:64:87:47:c6:bf:26:af:8a:56:f5:e2:2b:fd:ba:d3:da:
         69:c4:68:74:e7:69:fd:8b:4c:a2:96:5e:53:4d:f5:bd:c9:8b:
         05:99:07:e9:6f:d2:bd:f3:b4:91:38:49:58:f8:49:9e:b0:03:
         0b:3d:3b:ea:f3:37:ca:0e:c1:1f:10:71:7d:3d:35:ec:10:96:
         c0:bb:f4:39:01:f0:73:9d:43:12:35:76:b7:d9:06:80:7b:77:
         ef:e3:56:d1:65:35:e1:db:85:01:be:6a:56:6e:ae:62:f9:1b:
         d0:a3:c7:f9:61:f7:2e:3e:10:88:c8:62:37:27:03:7e:89:6b:
         b0:ac:16:78:36:c4:33:59:53:23:14:8f:e2:4b:d8:3c:bc:fd:
         c9:b6:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:52:09 2026 by rpki-client