Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6030e187-5f9d-33d6-bc74-5197f02e830a.roa
File:                     6030e187-5f9d-33d6-bc74-5197f02e830a.roa (raw, json)
Hash identifier:          8Rrq+qab/p9jgBV9B8+d2hAmBBk542MfBzLisKwF1js=
Subject key identifier:   C6:0E:37:49:30:AF:AF:60:8C:2C:55:21:33:B2:12:26:1D:80:FD:C0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ECBB67405273640292B250640
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6030e187-5f9d-33d6-bc74-5197f02e830a.roa
Signing time:             Tue 11 Aug 2026 00:05:14 +0000
ROA not before:           Tue 11 Aug 2026 00:05:14 +0000
ROA not after:            Mon 09 Nov 2026 01:05:14 +0000
asID:                     834
IP address blocks:        64.7.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:b6:74:05:27:36:40:29:2b:25:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 11 00:05:14 2026 GMT
            Not After : Nov  9 01:05:14 2026 GMT
        Subject: CN=2c9381e7-baed-4f5d-b30a-422346f7f4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:70:1b:6d:63:6a:7d:63:f4:e0:36:62:e1:
                    c8:5c:8f:b5:99:8d:c5:98:e1:70:44:38:b5:f5:90:
                    ed:3e:ef:9a:5a:c7:5d:c2:47:96:7b:ea:11:32:a0:
                    6c:d2:32:f1:8c:f9:e8:85:9a:80:88:8d:61:9f:2b:
                    99:84:54:4b:e8:84:41:21:a9:5d:54:a3:3f:6c:0f:
                    28:2a:98:a3:0d:a1:10:4e:3a:b2:a3:f5:e7:ea:d6:
                    76:9f:e8:ab:38:a0:54:9e:e5:20:af:f8:c0:e6:4f:
                    b4:1b:c6:9c:0f:ec:23:9a:3a:35:49:0b:f0:f3:0f:
                    a5:61:eb:71:c7:f0:e8:6d:dc:8e:20:b9:23:64:d4:
                    44:dc:a0:62:62:34:ed:25:6d:30:6a:5f:75:9c:98:
                    df:d1:da:a2:f7:21:32:77:7f:83:48:01:98:a2:9f:
                    dc:37:6a:57:11:14:ee:58:c2:86:fb:ed:2d:a7:a8:
                    c3:16:81:8b:b4:88:1a:c3:5b:53:a4:6f:4f:b0:20:
                    e1:3a:eb:81:04:a6:f2:90:2a:dd:90:06:cf:0a:ee:
                    53:5d:5a:67:70:03:a0:43:8a:f4:50:7b:f3:47:b2:
                    1e:d5:8d:d1:00:38:5f:fb:ee:56:b7:03:d8:a3:cb:
                    86:e7:eb:09:e2:ca:76:55:19:46:16:89:a8:3c:61:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:37:49:30:AF:AF:60:8C:2C:55:21:33:B2:12:26:1D:80:FD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6030e187-5f9d-33d6-bc74-5197f02e830a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:a8:a4:2a:88:40:99:60:54:9b:be:10:4e:b5:be:9c:a4:
         33:8c:bf:eb:28:cc:5e:e7:53:0c:31:f2:38:16:7a:3a:c5:51:
         f6:1f:26:e7:66:73:29:1d:b8:3b:15:93:df:e3:e5:1b:ae:1e:
         79:ae:b4:28:34:12:86:58:a9:37:68:28:d4:fc:82:2e:c5:fa:
         23:95:93:bf:ac:0f:5d:c4:4e:7c:8b:ef:cf:d9:df:e3:46:46:
         20:66:76:c0:94:1c:39:cd:4e:51:71:48:76:57:b2:35:bb:e4:
         5a:fd:25:0c:72:5f:a0:b1:77:94:ea:8b:e7:61:90:00:d9:0d:
         38:73:5f:93:60:76:03:37:7a:bf:c0:6e:6f:ed:1a:a5:4e:e8:
         1c:19:40:23:05:5c:fa:d9:08:7a:0a:4d:1f:dc:88:f9:04:ce:
         9b:6f:06:cb:c5:d9:93:ae:47:2e:ab:4a:be:ac:e3:4b:42:e7:
         3d:db:6e:bc:bf:74:e5:20:58:b5:80:3d:34:2b:1e:88:2f:3e:
         ec:ad:59:7e:68:21:14:95:60:22:2b:5b:d7:da:50:a4:a8:4f:
         14:bb:36:86:7a:cc:9d:ff:26:29:49:68:9c:aa:dd:e9:ca:de:
         60:27:54:7c:5b:dc:97:92:6a:24:cb:7a:51:22:12:52:e2:6f:
         12:de:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:42 2026 by rpki-client