Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44849aaf-d953-3892-82cf-7574fdb82d17.roa
File:                     44849aaf-d953-3892-82cf-7574fdb82d17.roa (raw, json)
Hash identifier:          5/fcKIj0suOJOLnw5Ne6KuIh+e2iADnvVuZhT3zjKA8=
Subject key identifier:   A0:2F:4F:1A:B4:F5:91:A2:A8:7D:48:89:E9:5B:70:DE:F3:DD:95:BB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E418139229AEB2D4742597C80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44849aaf-d953-3892-82cf-7574fdb82d17.roa
Signing time:             Mon 22 Jun 2026 11:56:25 +0000
ROA not before:           Mon 22 Jun 2026 11:56:25 +0000
ROA not after:            Sun 20 Sep 2026 11:56:25 +0000
asID:                     6079
IP address blocks:        65.86.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:81:39:22:9a:eb:2d:47:42:59:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 22 11:56:25 2026 GMT
            Not After : Sep 20 11:56:25 2026 GMT
        Subject: CN=a04962e6-369e-45cd-a190-eef5e70b7b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:39:70:86:32:b9:b0:21:12:d9:6c:3b:26:
                    f6:e3:44:b4:79:8e:f9:26:e3:b7:4e:49:77:68:0e:
                    fd:7d:b6:15:dc:1e:59:38:88:9a:51:b5:21:33:f9:
                    34:4e:ac:4f:84:ad:e0:66:3c:dd:59:fc:13:0f:f5:
                    03:14:4a:0a:41:29:ae:e6:f7:61:ae:54:ff:0b:f0:
                    1f:9b:5f:af:3b:2c:72:ad:d8:93:d1:90:2e:11:77:
                    3b:0b:c8:e9:cb:11:e2:c7:e6:b6:25:a7:b1:cd:b9:
                    26:f2:4b:c9:57:17:18:12:d6:da:f3:1a:19:84:19:
                    e4:87:00:f9:5f:41:b6:63:ae:c9:e3:18:87:01:23:
                    33:70:4d:79:fd:6b:1a:88:c5:c2:db:2f:9c:fe:cb:
                    fc:a1:d1:af:8f:a1:fa:b7:12:3e:f4:41:d5:b7:1b:
                    bb:94:90:93:ef:42:df:74:10:40:76:6f:2b:b5:80:
                    a0:45:61:ed:65:44:10:0f:29:7a:08:f1:27:29:a4:
                    5f:7e:95:86:3b:51:97:13:13:a9:70:af:0b:65:4d:
                    a9:6e:61:bd:34:d0:49:a0:15:aa:20:a6:73:20:98:
                    08:07:37:30:f8:80:89:3b:41:3d:d6:c6:40:97:f6:
                    ed:be:d4:27:bb:ad:3a:9d:5c:1a:90:25:f4:25:92:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2F:4F:1A:B4:F5:91:A2:A8:7D:48:89:E9:5B:70:DE:F3:DD:95:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/44849aaf-d953-3892-82cf-7574fdb82d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b8:03:0a:c4:7f:17:9d:cc:88:99:f8:ce:93:5d:fa:d3:ee:
         8d:4f:7d:e7:21:27:55:e6:12:a2:7d:e7:70:c8:2a:2b:92:b2:
         b5:a5:96:d3:f4:c9:a0:c4:2c:80:0f:87:20:9e:66:6c:7b:79:
         4b:94:5e:38:be:5f:ce:71:98:ce:b7:e3:a4:c1:b4:55:ee:d9:
         bd:92:24:80:de:ce:b0:17:34:a7:e5:15:ee:a4:18:f7:0c:97:
         9b:b0:25:e6:d7:8f:2f:6b:9f:8c:e3:d1:0f:4a:c9:c8:0b:09:
         2b:5c:be:4c:79:3b:8d:5a:13:95:20:18:a5:3c:ab:e3:5e:37:
         ba:bc:14:27:51:a6:ff:0c:e2:49:b0:0a:b4:ac:90:ff:bc:6d:
         a6:f2:34:6c:fc:97:2a:ea:2e:6b:ad:de:ed:e7:ae:c2:ee:80:
         d4:20:76:e0:86:a2:55:33:4e:e6:88:e3:db:52:ff:85:7c:b2:
         b5:3a:39:59:87:25:f4:8a:d7:09:15:5a:32:6f:5a:02:05:a5:
         16:2a:d0:0e:55:4d:49:c1:7b:2c:f7:d9:a0:48:b2:4c:f9:be:
         57:1b:e3:a8:6b:73:fc:e2:91:d7:56:7e:12:1c:32:dd:13:d8:
         c3:df:95:ad:a8:4c:f2:d5:bb:f6:fd:6e:e4:f6:a9:d6:ec:bc:
         34:85:73:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:48:22 2026 by rpki-client