Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4821b1db-8d1d-3cce-ab86-46566d33aa8a.roa
File:                     4821b1db-8d1d-3cce-ab86-46566d33aa8a.roa (raw, json)
Hash identifier:          tUsfjRth8UOIBWE//yT10nl7yjjj5sdXWScMeg85Y9E=
Subject key identifier:   A6:BC:27:F1:B3:D7:9C:5F:6A:0A:17:CF:A9:62:E9:7D:A3:EB:D2:0A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D65429CA5F872F8A82165B100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4821b1db-8d1d-3cce-ab86-46566d33aa8a.roa
Signing time:             Sat 04 Apr 2026 14:32:26 +0000
ROA not before:           Sat 04 Apr 2026 14:32:26 +0000
ROA not after:            Fri 03 Jul 2026 14:32:26 +0000
asID:                     402276
IP address blocks:        64.204.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:42:9c:a5:f8:72:f8:a8:21:65:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  4 14:32:26 2026 GMT
            Not After : Jul  3 14:32:26 2026 GMT
        Subject: CN=f8a76c9b-dd51-4efd-ab04-c8cb0734d98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:fc:df:57:2b:61:e3:ff:d1:0f:be:29:a5:
                    87:c2:aa:ad:97:42:ff:62:f0:1a:dc:ec:b3:4e:60:
                    c1:d8:4e:3c:c2:5d:81:67:e4:46:14:d1:09:8b:56:
                    fc:37:53:14:b4:bf:30:59:c7:44:ba:e9:1c:bb:5e:
                    98:ad:66:22:1a:ea:50:43:34:03:02:75:2d:fa:31:
                    c1:f0:a8:53:1c:45:ed:a5:e4:31:ec:3a:3f:3c:01:
                    12:66:94:4e:51:1f:bb:a9:35:83:23:e4:84:4d:10:
                    95:76:e6:1a:32:68:49:ea:de:be:22:be:b6:4a:aa:
                    28:d9:4f:f3:c1:2d:09:27:50:70:d7:a3:a0:93:3f:
                    d3:4a:00:10:2b:55:67:b8:f7:d6:c9:96:89:46:14:
                    4e:b1:55:b7:39:54:68:61:48:25:46:16:35:bd:ff:
                    5e:d6:bd:78:3b:8c:ce:67:c8:cc:e7:ac:59:81:e2:
                    57:cd:b3:7f:ac:44:0d:0e:a7:65:93:56:43:2e:57:
                    2c:a4:de:d5:b5:0e:3b:a7:0b:49:33:72:df:a2:c8:
                    d9:c6:7e:39:42:7f:c0:61:ac:a1:5b:2f:ab:26:65:
                    aa:7c:86:a2:1f:5d:b5:8f:13:d4:91:5e:5d:36:bd:
                    48:2b:bd:eb:5e:20:b1:e2:90:47:4e:86:51:bf:a4:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:27:F1:B3:D7:9C:5F:6A:0A:17:CF:A9:62:E9:7D:A3:EB:D2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4821b1db-8d1d-3cce-ab86-46566d33aa8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:17:79:da:83:f7:51:6e:56:eb:83:48:48:63:bb:44:d2:de:
         37:5e:e5:fd:78:01:25:88:3e:46:0c:e5:ef:7e:a3:ef:ef:63:
         94:41:8e:5a:83:8a:ae:d5:01:71:cd:53:9e:e4:01:00:16:c9:
         f8:0c:13:a2:4b:7f:4c:b8:d6:0f:82:c9:b3:0f:59:ef:06:1b:
         c4:73:9c:fc:8b:08:cc:b3:7d:a7:c9:d9:90:13:c8:ac:00:b3:
         47:e2:84:bd:36:a4:50:91:b9:4f:ee:fa:6f:6d:d4:25:d6:60:
         53:c5:14:e7:90:f3:25:19:a3:2e:ab:9d:42:cc:d3:f9:fb:ac:
         7d:b0:c5:5c:d3:f0:2e:87:ea:cd:0e:f0:60:ce:5a:2a:00:b4:
         84:8c:5d:be:95:f3:fa:17:d5:e5:ef:4c:92:3c:fb:66:b6:88:
         6a:8f:bc:cb:09:be:d6:8c:c7:77:38:95:b9:45:bc:54:a6:00:
         4a:85:a2:c7:d1:9b:0e:45:93:14:bd:c4:cc:40:53:cb:14:99:
         56:e5:42:db:fb:45:75:c3:9e:46:5a:3f:ae:83:46:38:81:a9:
         3a:f9:12:21:00:94:65:b5:67:ca:9e:81:32:f0:65:d7:93:22:
         96:64:b0:4b:1b:41:26:07:e3:c1:88:20:9e:c5:f1:70:44:d2:
         49:d6:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:00 2026 by rpki-client