Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ee962ca-4e6d-3459-843a-a268b77afda4.roa
File:                     3ee962ca-4e6d-3459-843a-a268b77afda4.roa (raw, json)
Hash identifier:          MvEVfc0e/xPota1CMGiON04VP+5dRo/NqNGpnZha3x8=
Subject key identifier:   DF:54:BB:10:C2:5D:31:85:57:18:6B:F7:25:EA:5B:20:BD:1E:2B:3C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DD09332F95B55FF3ABAB79000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ee962ca-4e6d-3459-843a-a268b77afda4.roa
Signing time:             Wed 13 May 2026 01:06:18 +0000
ROA not before:           Wed 13 May 2026 01:06:18 +0000
ROA not after:            Tue 11 Aug 2026 01:06:18 +0000
asID:                     5650
IP address blocks:        64.205.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:93:32:f9:5b:55:ff:3a:ba:b7:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 13 01:06:18 2026 GMT
            Not After : Aug 11 01:06:18 2026 GMT
        Subject: CN=d63d9c4e-b226-4867-9e3e-b72942d3045a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:a3:38:6b:e8:0a:d2:64:29:a2:22:9a:75:
                    2d:91:af:c9:63:0f:14:14:d5:e7:3c:ef:e2:25:0d:
                    59:ea:d9:92:49:9b:42:9e:11:cb:f1:b9:e8:34:06:
                    21:df:16:e7:46:fb:20:95:8e:98:3d:27:76:99:0a:
                    12:e0:ef:f7:eb:ee:04:0f:0f:e3:62:82:63:c4:66:
                    87:10:a9:69:12:e6:b3:91:49:e1:85:ca:f4:f4:3f:
                    9c:f9:56:51:62:0a:35:c5:c2:6c:b5:a4:b2:28:6a:
                    7f:7c:08:9e:eb:0b:06:cc:5b:d1:eb:6b:85:38:ff:
                    6c:66:92:a6:6b:c5:5f:86:e5:3b:63:12:82:f3:3d:
                    f6:43:22:37:16:47:2b:55:0e:7e:76:9e:79:55:b5:
                    a0:be:88:75:34:d5:d3:6b:fb:f5:42:1d:85:9b:ab:
                    58:f3:56:f9:7c:36:33:23:d3:33:22:0c:fe:f5:51:
                    5a:b7:2b:4c:e0:d7:7f:d9:69:08:b0:90:0d:ad:4d:
                    7f:f7:60:03:5e:44:b6:09:e6:62:79:19:93:51:f8:
                    cd:37:7c:3c:30:d0:e9:d7:9b:aa:6a:64:f4:e8:89:
                    92:59:b2:6d:c7:83:19:88:99:9a:4c:35:6e:6d:79:
                    93:4b:89:78:6a:d2:da:d5:50:fc:81:44:1f:7e:25:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:BB:10:C2:5D:31:85:57:18:6B:F7:25:EA:5B:20:BD:1E:2B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ee962ca-4e6d-3459-843a-a268b77afda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:0a:3f:db:34:95:45:75:83:fd:8b:d0:9f:42:0b:fe:06:
         ed:96:e5:e4:a5:62:84:08:49:ea:2c:f7:b1:f1:97:03:1e:af:
         ab:f7:46:cf:d9:4b:cc:5b:7b:c4:41:64:3b:b9:71:02:16:10:
         39:27:b9:4b:04:d0:03:e9:ee:fc:69:9b:13:cb:e2:c1:e3:2e:
         e8:6f:96:d0:03:e9:9d:f1:e7:0f:db:72:a4:2e:1a:d2:ff:ea:
         28:cf:2f:de:d7:13:3b:37:a4:2c:86:f8:b5:28:93:16:1f:a6:
         2d:fc:0e:2b:fc:25:a0:22:4e:e5:7f:72:de:70:9f:ac:cc:ca:
         55:db:2a:4b:1c:19:dd:00:ce:83:95:93:b5:11:e5:4e:8a:42:
         f7:85:6f:87:51:c2:50:3c:84:65:29:9c:32:12:db:f8:38:2f:
         20:85:97:79:56:0b:76:ef:f4:f6:76:d4:c4:3d:90:02:e3:9b:
         3f:8d:cd:da:ff:21:e7:fd:89:00:ba:f4:0c:a3:de:88:b4:6e:
         57:43:3b:bd:05:b2:9a:23:9c:f9:b2:e5:95:53:96:b7:24:71:
         98:c0:bc:bf:f9:80:3f:ea:9d:44:f6:69:d8:a6:ca:9c:5a:4f:
         d6:60:9d:c9:a0:03:8c:11:94:71:aa:a5:80:77:61:b6:e2:33:
         d3:22:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 00:53:41 2026 by rpki-client