Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/328317c3-822e-38f4-99fd-1c6bf61030a4.roa
File:                     328317c3-822e-38f4-99fd-1c6bf61030a4.roa (raw, json)
Hash identifier:          4strn8oD3I5Zv0QeR/DPAv1QJDJXmneONIRkT9LPYrY=
Subject key identifier:   E6:AA:57:74:45:0E:8A:17:1B:3F:06:BB:C3:78:20:8D:4F:71:04:F6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D757BFFE8FF72BE2E2B6B0D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/328317c3-822e-38f4-99fd-1c6bf61030a4.roa
Signing time:             Fri 10 Apr 2026 10:01:00 +0000
ROA not before:           Fri 10 Apr 2026 10:01:00 +0000
ROA not after:            Thu 09 Jul 2026 10:01:00 +0000
asID:                     2914
IP address blocks:        64.205.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:7b:ff:e8:ff:72:be:2e:2b:6b:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 10 10:01:00 2026 GMT
            Not After : Jul  9 10:01:00 2026 GMT
        Subject: CN=9906b7ad-9f18-45f5-b9be-287c9fbe9767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:29:69:60:d7:85:46:19:1b:c2:6c:0c:19:
                    d9:7b:fa:c7:30:95:d6:de:74:09:2f:de:bb:41:60:
                    e5:27:9b:2e:6e:25:a3:d0:e1:4e:8c:59:8f:e9:69:
                    c5:f2:68:3e:ae:65:34:3c:12:c4:1b:45:48:68:a2:
                    2c:8f:81:c0:28:de:92:e1:3c:12:0e:d2:70:a3:ed:
                    19:a8:e9:9a:f6:12:ed:0f:a3:22:10:c8:99:ef:1e:
                    2c:c6:12:ca:be:e7:74:88:4f:52:d5:09:37:6a:e3:
                    d0:f2:82:52:87:5e:c6:ae:4c:e9:50:7b:4b:af:ff:
                    50:75:d5:71:b0:0c:cd:8e:ee:fc:cd:15:6d:3a:bd:
                    83:8a:90:3d:b0:22:fc:8f:d8:e9:46:db:f1:b9:43:
                    71:92:c1:f0:c7:4b:e7:3e:88:46:d7:61:6b:41:ec:
                    bc:e7:8c:88:bf:08:c0:5f:eb:e8:70:0f:a1:c8:f9:
                    df:a6:0d:d9:79:75:98:7f:3e:53:1b:0c:bb:21:a3:
                    02:eb:36:16:b6:cf:27:a3:db:df:df:58:1f:f0:06:
                    cb:2b:07:4d:88:b9:bb:fa:30:c3:8d:c9:41:b5:e3:
                    49:f4:2f:8f:52:75:c2:d2:e1:b8:be:92:91:bb:1a:
                    98:92:f2:cc:90:a8:2e:71:92:61:f0:04:bf:d3:b1:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:57:74:45:0E:8A:17:1B:3F:06:BB:C3:78:20:8D:4F:71:04:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/328317c3-822e-38f4-99fd-1c6bf61030a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:49:f8:62:9c:9d:36:62:3f:76:f7:34:f9:d1:d6:c0:b2:73:
         2a:ef:36:61:b0:bf:bd:06:88:07:eb:72:55:49:f7:22:71:09:
         53:e9:d9:d5:26:1d:fb:62:64:a3:ab:7c:09:fc:54:e0:96:83:
         9a:1e:58:97:57:4c:d5:13:2d:2c:6c:ab:b6:8e:18:d7:fc:5a:
         22:0d:ac:79:65:48:f3:a9:0c:cd:17:11:7b:90:84:af:54:07:
         7a:ff:f7:cc:80:cd:80:7d:43:12:71:a4:93:ec:2c:6f:ec:d9:
         3a:ce:07:47:67:ad:67:d1:8c:d9:c2:58:b0:de:6f:07:93:86:
         1d:6e:bc:db:28:f3:f6:9d:d5:a9:40:13:39:0a:bd:d5:94:f7:
         53:9d:e6:71:43:fc:c6:0f:cf:56:be:0d:69:46:19:89:b9:7c:
         46:cf:a8:ed:0f:d0:6d:eb:c8:1f:07:26:40:2e:c9:84:53:d5:
         08:bc:c9:cb:70:e6:ce:01:66:fe:dc:01:2d:90:af:f0:07:85:
         cf:02:02:7b:2c:9a:c3:41:66:3e:af:72:41:f0:d6:27:f1:41:
         67:b8:b9:2a:35:90:ff:7a:84:c8:3c:92:b4:67:1b:1c:a7:74:
         16:41:96:e7:fd:6c:29:ea:3c:88:04:af:aa:a6:00:34:2c:b9:
         a2:c5:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:09 2026 by rpki-client