Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c4a1299-3b22-33b8-b42a-fe12b3d54d0f.roa
File:                     4c4a1299-3b22-33b8-b42a-fe12b3d54d0f.roa (raw, json)
Hash identifier:          8l008JhFbtEmm9BSrvfgmuOyeT4eOZzzPZLkhUfFV4k=
Subject key identifier:   22:E2:07:A8:F5:0D:FC:D9:E3:7D:A7:34:C2:DE:D5:7F:9C:B0:7E:7E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF5437D408F4F850BA4A31600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c4a1299-3b22-33b8-b42a-fe12b3d54d0f.roa
Signing time:             Tue 25 Aug 2026 21:17:32 +0000
ROA not before:           Tue 25 Aug 2026 21:17:32 +0000
ROA not after:            Mon 23 Nov 2026 22:17:32 +0000
asID:                     402265
IP address blocks:        64.204.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:43:7d:40:8f:4f:85:0b:a4:a3:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 21:17:32 2026 GMT
            Not After : Nov 23 22:17:32 2026 GMT
        Subject: CN=55c7cf45-7740-422c-8d3d-d6cc47785429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:de:42:9b:ae:25:72:8c:06:41:90:af:d0:
                    e9:84:83:d2:47:24:33:99:a4:7f:6c:ea:76:cc:1f:
                    67:9a:13:90:23:80:52:87:0b:1f:fe:6e:14:30:f3:
                    fc:49:87:b0:71:6d:03:7c:ab:09:f7:1e:88:50:56:
                    59:03:8c:d8:6e:96:cc:f0:ef:21:8f:0b:14:11:99:
                    ff:a4:98:c1:6d:3a:15:da:50:82:d3:03:35:a4:bc:
                    70:24:bf:db:da:d2:f6:52:7e:eb:71:c4:98:5e:0e:
                    78:7e:f6:fc:36:5a:5f:51:97:ac:90:36:3e:bc:65:
                    21:db:1b:3b:04:44:05:78:aa:14:5e:dc:d7:21:ab:
                    4c:83:39:11:9e:66:b9:ab:c8:8a:ac:67:58:b4:f4:
                    78:4f:68:f3:3b:96:18:1e:02:2e:ac:62:dc:e3:03:
                    c2:63:84:70:7c:97:d4:4f:36:1c:3b:9f:b9:37:17:
                    a5:97:14:91:8b:81:bc:04:9a:5c:85:cc:52:1d:de:
                    3f:49:46:9f:4d:e6:33:ce:77:28:15:58:e0:a2:e2:
                    89:58:02:24:8c:55:36:f7:8c:8e:c7:50:84:5a:a1:
                    45:a6:ba:01:61:e1:02:14:2c:d6:9c:f5:e4:98:69:
                    72:26:a5:d6:a3:a8:ad:e2:72:59:d7:8a:42:19:d0:
                    2b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E2:07:A8:F5:0D:FC:D9:E3:7D:A7:34:C2:DE:D5:7F:9C:B0:7E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c4a1299-3b22-33b8-b42a-fe12b3d54d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:a2:40:58:57:a3:17:09:34:57:01:ea:63:7c:7a:d1:04:
         10:e3:5e:e3:15:7c:31:6b:a0:dd:4c:bb:97:0a:51:ca:e4:67:
         0c:04:89:de:4c:8e:77:f4:73:b2:8d:7a:0b:00:00:e6:fb:ae:
         66:71:ca:cb:a5:b7:33:de:3c:93:9f:f7:5d:1b:27:7e:3a:92:
         04:f8:80:da:0e:10:48:ee:d1:ac:a8:70:93:87:ec:45:03:a4:
         d5:22:f1:39:df:16:c8:cf:55:30:78:40:a5:dd:15:da:de:db:
         90:f9:af:01:d9:a1:35:03:41:5c:6b:1c:df:68:1d:08:ab:f2:
         b1:e0:7d:29:fd:1d:19:72:cd:d1:ca:4f:ed:c9:8a:97:ad:d9:
         d4:b5:96:c3:1b:e9:85:d3:08:e7:e8:11:a2:7a:8c:13:c2:d6:
         4e:42:24:45:9f:a1:c3:b5:b9:ae:89:fe:94:9d:c1:da:b5:f9:
         b4:8c:1d:1e:65:d7:9f:04:f7:93:fc:37:93:51:28:f4:9e:8b:
         91:50:3c:50:3d:b7:04:cc:e1:17:b4:f2:b1:9a:bd:8f:50:57:
         4d:86:7c:0c:25:b6:b5:e5:89:7a:b7:c9:b2:0e:93:99:28:76:
         34:70:50:d2:01:f3:bf:02:21:7d:6c:17:7d:7f:90:67:95:dd:
         6d:56:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:56:17 2026 by rpki-client