Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f1c4708-e99a-354d-8a6f-84dd38c8d7ea.roa
File:                     3f1c4708-e99a-354d-8a6f-84dd38c8d7ea.roa (raw, json)
Hash identifier:          X6xXl4YropFE4yUBiqbfPA/Y/H+wSAq8no0gaz6DrZk=
Subject key identifier:   E5:F5:3E:C3:A6:BF:4C:95:33:3C:B1:1B:92:D7:94:BD:4A:26:E1:99
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DD0936C9A1883EFD0F3DB7580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f1c4708-e99a-354d-8a6f-84dd38c8d7ea.roa
Signing time:             Wed 13 May 2026 01:06:45 +0000
ROA not before:           Wed 13 May 2026 01:06:45 +0000
ROA not after:            Tue 11 Aug 2026 01:06:45 +0000
asID:                     5650
IP address blocks:        64.205.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:93:6c:9a:18:83:ef:d0:f3:db:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 13 01:06:45 2026 GMT
            Not After : Aug 11 01:06:45 2026 GMT
        Subject: CN=8f20429d-811d-4155-8ac9-ce31e9e61afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:2b:2f:62:1e:bd:68:4a:bd:1a:26:2e:17:
                    d7:55:cc:d4:21:bb:e6:5c:ab:3d:87:18:28:3f:71:
                    01:d9:7a:e8:71:10:3c:e0:e7:02:23:13:47:87:2a:
                    7a:f9:af:3a:c7:3f:1d:98:f5:28:a7:da:eb:44:fa:
                    c0:99:3c:6e:d5:20:c2:cf:10:1d:cf:ac:e7:7e:8f:
                    81:33:ec:39:2d:b8:2c:7c:12:76:0b:08:da:fe:4b:
                    ba:fc:eb:a5:39:4c:13:ef:fa:e7:9a:6a:d8:99:7b:
                    fc:c5:87:3c:45:e3:20:ea:9a:09:77:0c:68:7c:31:
                    c9:20:12:21:94:de:9d:65:24:1d:9f:4f:af:09:8f:
                    7e:80:8a:00:86:5a:d9:ce:b5:86:5e:84:f6:04:db:
                    66:d0:81:7b:db:06:9f:f9:7c:20:f3:65:90:69:aa:
                    e0:d8:ea:d2:11:ac:d7:2d:37:3f:7f:fa:8b:94:31:
                    73:3e:8a:c9:0e:69:f6:65:7b:56:4d:55:4f:ea:d4:
                    f8:3a:88:29:f2:ce:f5:de:d5:6d:29:ae:47:ed:ec:
                    e6:f4:9f:8b:3e:af:12:0d:6c:f5:6d:e0:fd:9d:e2:
                    70:35:9f:e4:1d:20:fb:a0:20:3e:9a:10:27:d1:4d:
                    37:e4:26:cb:b0:f1:ad:e0:90:ee:a5:eb:ef:00:52:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:3E:C3:A6:BF:4C:95:33:3C:B1:1B:92:D7:94:BD:4A:26:E1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f1c4708-e99a-354d-8a6f-84dd38c8d7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:ce:d3:a9:43:1b:8e:85:aa:47:43:f3:4d:89:4c:a3:9c:
         3d:ff:08:d2:dc:6d:a1:aa:47:53:3a:1f:c5:c4:1a:d9:c8:2a:
         55:83:19:f3:e1:7a:ec:ad:a7:bf:99:37:96:84:a4:76:27:a7:
         19:f7:be:39:31:91:b9:de:da:63:84:42:16:e3:6f:41:c5:a4:
         e7:c6:f4:a8:ac:d5:cb:e1:a0:21:0d:ff:a2:15:b7:05:7e:ed:
         2e:4d:cc:2e:7d:fa:8d:c9:19:0a:a3:9b:cd:e3:e6:45:e3:ff:
         62:9b:b4:b2:6a:50:f3:ea:f1:ad:45:1b:2d:c2:51:9e:cb:58:
         e6:de:24:97:ed:13:39:59:26:ae:19:2e:31:5a:c9:8c:75:96:
         12:a1:b9:45:5e:dc:22:a5:a7:56:7c:49:9c:50:dc:7e:27:d8:
         fb:01:23:15:fc:42:cc:97:31:e4:e2:01:a4:31:f1:f1:68:81:
         41:8f:9a:70:82:4a:96:f3:4b:17:2e:14:32:47:dc:7e:cb:b1:
         cf:a2:2c:59:50:5c:9e:52:d3:35:f5:53:7c:7b:2d:e2:5e:9e:
         47:b5:66:e5:6b:77:d1:d5:bb:78:7d:11:b2:c0:15:fb:cf:63:
         6e:c3:40:c8:5b:15:44:64:c8:86:aa:01:55:45:cb:38:ac:da:
         1a:74:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 00:53:19 2026 by rpki-client