Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/53a7023f-efea-311b-9ab5-6f3a3c9bfa23.roa
File:                     53a7023f-efea-311b-9ab5-6f3a3c9bfa23.roa (raw, json)
Hash identifier:          Js/DKIPkJNc+JdDunYnS1JITYq0u62OOIoQAOlbuhxM=
Subject key identifier:   B1:D3:56:EB:57:C7:2E:28:CB:35:6A:D9:6D:6B:8B:CE:DE:DB:EF:7A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D627B876664020A2816007F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/53a7023f-efea-311b-9ab5-6f3a3c9bfa23.roa
Signing time:             Fri 03 Apr 2026 14:39:41 +0000
ROA not before:           Fri 03 Apr 2026 14:39:41 +0000
ROA not after:            Thu 02 Jul 2026 14:39:41 +0000
asID:                     214025
IP address blocks:        64.204.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:7b:87:66:64:02:0a:28:16:00:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  3 14:39:41 2026 GMT
            Not After : Jul  2 14:39:41 2026 GMT
        Subject: CN=c494e0bc-06ca-4e79-8b59-7c0736d1a4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:81:78:e8:96:9f:4d:a8:41:37:e4:de:60:e8:
                    2e:98:c4:92:e8:c9:49:42:3d:41:3e:c0:fc:5e:06:
                    20:c9:fa:cc:7e:f5:fc:88:a7:2b:43:dc:23:40:84:
                    d4:bd:a5:c3:18:c7:8d:5a:fa:bb:e1:db:21:47:8e:
                    d9:89:75:1a:ad:e2:9c:8f:97:c3:38:82:75:ed:92:
                    af:d2:ec:1f:26:c2:9c:23:7e:f8:fb:fc:59:d7:09:
                    2d:f6:06:1f:89:ee:7a:42:4d:53:85:d0:60:2f:80:
                    07:2b:2b:0b:32:6d:c1:46:67:5f:de:66:ed:4f:18:
                    2f:1d:ae:5c:76:31:b0:f3:4f:42:a8:3f:e0:34:c9:
                    66:6a:99:cb:60:9b:19:39:83:f4:0e:fa:2c:43:b2:
                    04:d5:e7:ff:83:e6:61:ff:4a:9c:8d:d9:d8:e9:e6:
                    b8:f8:5f:f4:ca:e0:ea:d9:66:ed:55:62:f2:74:b2:
                    a1:87:bd:0b:f3:03:b9:72:91:a4:48:33:d5:ae:6b:
                    9b:dc:29:a4:ab:35:26:bc:3b:48:89:54:47:ae:cf:
                    f2:ea:43:eb:b2:cd:69:ef:a3:83:03:a4:22:a3:55:
                    eb:f0:89:aa:1e:49:e9:ff:65:0c:af:d5:3f:a5:72:
                    30:ed:39:f8:87:49:31:c2:be:da:96:72:70:75:9a:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:56:EB:57:C7:2E:28:CB:35:6A:D9:6D:6B:8B:CE:DE:DB:EF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/53a7023f-efea-311b-9ab5-6f3a3c9bfa23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ff:5b:ad:de:b8:01:c5:95:18:bc:73:a5:e4:1e:22:03:a9:
         34:77:bd:d7:ec:48:1a:2d:35:e4:dd:a0:8c:58:c9:39:0e:84:
         b9:37:17:cb:45:9a:10:d5:a8:1f:c2:c6:e0:0a:3c:0c:3d:19:
         04:d5:e2:b1:16:08:6f:84:4a:08:e1:0e:b4:b0:5b:97:62:9a:
         ba:fd:0e:04:01:cf:27:f1:c2:2d:c0:b6:e6:fa:24:02:aa:13:
         e8:94:ab:34:a1:8a:f6:6a:9f:d4:02:50:6f:eb:e1:d2:03:62:
         4f:44:67:03:3b:e8:b8:fa:74:35:86:6b:27:7c:fb:f3:f2:7c:
         9d:6b:0a:a4:d1:ba:76:0b:ae:ee:08:4a:08:e2:85:9b:db:64:
         2d:38:08:44:6c:27:94:9d:15:6a:35:fd:ed:3e:a5:68:4c:be:
         4b:cb:0b:c7:c8:b8:5c:c6:64:5f:67:b7:5e:e9:61:87:f0:f6:
         ed:0b:74:3b:05:5b:41:1c:3d:20:e8:40:d3:9b:94:27:c8:75:
         df:b0:78:1f:6b:50:04:0d:db:69:70:8b:21:27:16:5e:1b:b4:
         41:b4:f5:93:53:66:11:1b:b1:43:f8:86:10:68:8a:84:bf:5e:
         12:1b:19:02:dc:db:d6:0c:93:38:7b:ac:2a:09:12:f6:e7:9a:
         fc:c8:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:35 2026 by rpki-client