Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa
File:                     430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa (raw, json)
Hash identifier:          /+HpQpagQwQI+U2UshtRZJdTdv8EpyZot8o6lDrsT/U=
Subject key identifier:   32:66:6C:D7:C1:E1:89:2A:B3:AE:21:DB:4E:D1:AB:8D:B6:A0:AC:11
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA787D6DD2DBED49378E85440
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54103
IP address blocks:        64.6.176.0/22 maxlen: 24
                          64.6.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d6:dd:2d:be:d4:93:78:e8:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db8bd424-23f6-4ff6-a2a8-571c2ce4a8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:66:12:91:b3:14:b1:28:14:88:f3:da:2c:
                    28:c5:26:12:56:ed:aa:11:86:7c:ba:87:88:bd:15:
                    e0:a6:20:2f:26:f5:6b:a2:48:e6:22:5c:ef:e6:c4:
                    7a:c4:ad:ec:d9:9d:f3:e4:34:e7:5b:12:b0:87:f0:
                    97:11:7c:f5:0b:52:ec:8b:78:09:7c:12:ea:31:60:
                    ff:1f:2d:07:79:d1:60:66:d7:1b:19:a9:ac:91:93:
                    09:ad:56:e9:29:97:2c:32:45:f8:ac:be:04:4f:45:
                    c5:e9:e2:d9:a2:30:e3:48:75:7c:02:80:d5:13:48:
                    20:b6:cd:4f:db:10:cd:b3:a7:fc:bf:76:a3:58:91:
                    46:6d:d5:1c:f9:1a:13:2d:ff:86:3d:bf:63:6a:eb:
                    ba:b6:2a:d0:cd:26:f2:81:99:5b:05:47:4c:03:27:
                    3d:87:ca:1a:0f:fe:0f:7e:49:03:2b:8d:9d:4c:fe:
                    8c:97:b3:db:18:58:0f:4e:8d:68:ad:fb:08:a7:75:
                    6a:ea:df:43:db:d4:62:c1:db:d8:c9:05:e5:61:a9:
                    97:0e:e7:17:02:d6:20:db:a6:e4:4a:ce:58:b9:08:
                    6c:b0:b4:6f:3e:49:e5:90:88:4a:62:78:4a:e8:9c:
                    14:f4:a8:6d:91:ac:e8:d9:cc:08:54:5d:af:e1:73:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:66:6C:D7:C1:E1:89:2A:B3:AE:21:DB:4E:D1:AB:8D:B6:A0:AC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/430f7c0b-f9b6-3358-be0f-4d3ee7c1cc46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:86:45:b8:b8:31:22:de:34:ea:30:86:1f:9d:95:5b:86:ee:
         68:ef:31:cb:03:c7:d3:09:a4:b2:77:b9:e5:c8:7b:c9:bc:53:
         87:d2:72:3a:e7:7f:44:b5:bd:45:78:08:af:e1:8c:23:7e:c3:
         2c:bb:70:3f:9c:c2:3e:4d:94:cb:86:13:a0:d0:72:e9:83:af:
         93:55:84:ae:19:d3:ef:65:d8:bc:52:17:10:a2:71:e3:a5:17:
         d4:95:9d:43:d0:43:68:28:58:a7:78:2f:24:b4:b7:0c:b2:ed:
         58:15:1f:59:7d:fe:e6:a1:d9:f1:84:98:0e:47:56:62:d6:72:
         35:0c:02:81:52:ec:a7:4b:4c:02:e2:00:73:82:90:c8:11:01:
         ca:1d:49:e2:55:49:66:0c:d6:a5:2f:6a:58:a0:e5:f6:9c:66:
         11:27:10:d8:d3:3d:1b:16:20:06:43:d6:3b:d2:0b:73:d2:fe:
         18:02:3f:89:75:47:1b:0d:78:73:d8:aa:37:0d:3b:9e:60:58:
         04:66:58:a4:d0:d2:f0:64:45:0f:ef:bd:40:4b:9a:d6:33:8c:
         53:c1:f0:50:25:a0:01:40:01:4b:a9:64:ba:16:05:f9:03:05:
         3f:b6:17:59:46:3e:28:f5:1c:60:46:7a:f8:be:79:1e:27:0d:
         9f:c2:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:23 2026 by rpki-client