Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d5e6045-17fc-3ba6-87c9-aab313e2bc51.roa
File:                     5d5e6045-17fc-3ba6-87c9-aab313e2bc51.roa (raw, json)
Hash identifier:          9RzpADje3sJeTKJJvj0nSbiDJdE03ULegkm46f0byWI=
Subject key identifier:   4E:7C:7B:F0:E5:50:E2:DF:E5:A8:C7:75:F0:96:8E:BF:8F:D5:18:08
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D626D15A9B13DFC3A5812AB00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d5e6045-17fc-3ba6-87c9-aab313e2bc51.roa
Signing time:             Fri 03 Apr 2026 14:10:35 +0000
ROA not before:           Fri 03 Apr 2026 14:10:35 +0000
ROA not after:            Thu 02 Jul 2026 14:10:35 +0000
asID:                     214025
IP address blocks:        64.204.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:6d:15:a9:b1:3d:fc:3a:58:12:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  3 14:10:35 2026 GMT
            Not After : Jul  2 14:10:35 2026 GMT
        Subject: CN=cbb27272-4487-4d63-8962-05f929005dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:c7:8b:4f:dc:8e:ab:01:b8:b6:46:d7:63:
                    e9:de:14:50:d6:17:33:65:b3:cb:46:96:7b:6a:67:
                    0b:1b:93:76:a2:df:56:87:f9:e9:27:c5:7f:07:43:
                    ce:10:4d:ad:ec:0b:52:79:7f:93:cc:bd:01:6c:6f:
                    31:a4:be:ec:da:f8:7b:d3:87:f4:46:67:09:14:e3:
                    42:12:2c:c3:98:6c:01:f0:7e:db:be:13:31:42:94:
                    45:93:b7:0e:0c:a4:31:93:17:28:c5:9e:50:8f:80:
                    52:79:ec:4e:95:31:42:ce:48:ef:9a:4c:85:65:a3:
                    f1:3d:30:99:c8:5e:c3:6d:a0:6b:0d:cf:d2:ad:1d:
                    c9:2d:19:19:d5:36:a3:24:8a:52:c2:6a:4b:2a:79:
                    54:6d:2c:7c:9e:ec:47:8a:86:28:ac:07:b9:59:3f:
                    2c:3a:ac:a8:3d:6c:9a:0e:c9:ca:d3:82:7f:98:bc:
                    8f:92:51:e0:99:1b:08:a6:c7:c2:ad:69:63:3e:69:
                    d1:fa:7f:eb:e3:82:77:9b:d6:c9:92:4b:39:51:26:
                    a4:a2:df:44:6f:eb:18:f2:91:95:b9:bb:0f:80:d2:
                    f2:8e:58:ac:14:a7:18:16:de:01:21:ad:3c:ed:33:
                    04:4a:7c:0b:29:5a:80:d5:1f:4d:58:d7:f8:93:85:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7C:7B:F0:E5:50:E2:DF:E5:A8:C7:75:F0:96:8E:BF:8F:D5:18:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d5e6045-17fc-3ba6-87c9-aab313e2bc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:ff:68:86:d5:2e:4f:07:0b:6e:62:6b:ea:96:f1:19:e0:
         eb:ae:f9:be:a5:7f:9d:11:e1:de:71:77:22:52:04:79:04:18:
         2a:71:83:20:09:db:c5:4b:1f:bc:3f:9c:8d:63:81:f5:f6:e0:
         8c:77:1c:f6:56:a5:f8:54:b8:7b:d6:97:06:bc:f8:c2:e5:ae:
         d2:6e:2e:d9:a8:b0:48:c4:f8:28:77:ab:c9:e5:47:a5:b4:35:
         70:68:06:52:c2:9f:2a:c4:8a:2c:fb:ce:02:ca:85:1b:b5:fb:
         c6:54:2e:b4:cb:d4:df:7c:f1:fb:2d:39:20:c1:10:2b:1d:ec:
         35:cd:19:55:3b:b6:d1:43:cd:16:82:f5:4a:45:33:cc:7d:99:
         6d:95:9b:d9:a8:09:e0:d0:06:b6:e6:ef:4e:28:57:d2:6c:30:
         40:92:f5:a9:17:d5:84:27:bf:26:2a:a4:7e:68:e0:34:67:da:
         1e:79:4b:a7:ca:9b:78:04:41:3c:ff:1e:6d:b5:ca:5b:28:7c:
         d3:9e:dc:3b:41:24:a2:a6:75:4a:6b:7a:84:42:0d:0c:e0:5e:
         c2:a0:a6:30:c2:62:ea:9c:ca:b9:d3:6d:69:3d:b3:73:63:74:
         0f:17:f4:43:8c:28:a4:4e:25:3d:d8:b6:52:bf:32:a4:e7:66:
         bd:1d:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:34 2026 by rpki-client