Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b217e3d-9b8f-38e7-9a2c-910fc1781c4e.roa
File:                     6b217e3d-9b8f-38e7-9a2c-910fc1781c4e.roa (raw, json)
Hash identifier:          UFEMOR/ZN2jGoqNEeR996GFaPr/XGb4MgGE62cydiZo=
Subject key identifier:   44:04:B9:A7:D9:2F:EE:97:2F:2F:E0:A7:0F:EA:71:A9:57:12:5A:C4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D6D75139970719E53D766FA00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b217e3d-9b8f-38e7-9a2c-910fc1781c4e.roa
Signing time:             Tue 07 Apr 2026 13:00:30 +0000
ROA not before:           Tue 07 Apr 2026 13:00:30 +0000
ROA not after:            Mon 06 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        64.204.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:75:13:99:70:71:9e:53:d7:66:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  7 13:00:30 2026 GMT
            Not After : Jul  6 13:00:30 2026 GMT
        Subject: CN=c8880caa-eb09-4bf5-922b-f6aefdb17a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:1f:25:fe:87:d8:72:de:72:27:8b:6b:eb:
                    00:6c:3f:9c:97:72:f7:8f:09:3e:99:65:22:fa:10:
                    20:d0:e9:9d:ed:fc:15:91:44:67:21:15:75:5c:73:
                    f5:43:b8:bc:cd:d6:58:98:51:f5:d2:bc:bb:c5:73:
                    ae:04:97:41:b2:05:d2:3c:dc:b6:7d:72:f2:5f:08:
                    9e:7a:f3:e2:21:b3:39:f7:91:d6:a6:50:8a:52:e9:
                    b3:6c:dd:90:81:24:a6:f9:d8:76:d7:06:6f:13:6a:
                    8a:b4:cb:ce:24:36:d9:94:80:77:17:7d:d2:5a:e0:
                    7e:7b:e3:66:6e:be:bd:a2:96:cb:b4:fa:c2:6f:97:
                    13:da:a3:d5:18:19:f6:2f:15:96:25:72:d3:03:08:
                    6d:12:c8:47:66:b3:42:92:0c:45:26:55:61:83:90:
                    bc:c7:a9:09:e4:fa:fd:19:7d:11:41:b5:fb:fd:10:
                    d7:ed:43:a4:85:fc:d8:70:f0:66:d8:08:3b:7e:af:
                    7c:5c:ff:8e:0c:81:21:fa:b3:cf:2d:39:8a:47:ed:
                    49:b6:7a:fe:fb:27:d0:fc:71:81:80:da:80:7a:69:
                    ad:c7:cd:26:78:bf:f8:fe:80:31:91:63:3a:b3:70:
                    c4:8f:6a:74:8a:75:4c:92:c8:7d:c5:41:36:9e:69:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:B9:A7:D9:2F:EE:97:2F:2F:E0:A7:0F:EA:71:A9:57:12:5A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b217e3d-9b8f-38e7-9a2c-910fc1781c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:55:c0:d6:bc:00:4b:6c:cb:b9:19:87:38:47:6d:26:77:8d:
         84:40:1d:3d:8d:c1:ff:22:30:d3:09:fe:76:5b:a6:7b:0a:17:
         54:cc:84:f9:70:d0:e0:da:c5:6a:e0:a0:15:6a:99:ab:18:27:
         3d:33:fc:5b:70:3a:8f:d5:7a:b2:f5:33:2f:88:1b:b9:64:fd:
         c1:b7:6f:92:78:74:9b:5b:c4:eb:d8:28:34:d4:c4:15:6c:7b:
         ef:69:28:11:ec:e4:80:c7:ff:67:2d:a8:7d:20:88:95:2c:9d:
         f6:1c:8d:da:4d:5a:da:d5:3f:fc:c7:e9:dd:68:f1:62:b3:59:
         97:28:53:77:54:af:ac:24:0e:e5:78:1c:13:72:64:ad:c7:97:
         ff:bc:91:1e:01:25:12:1d:6b:cd:11:e5:08:55:65:c7:da:f6:
         cf:26:7d:4c:03:d3:af:31:73:f9:e1:3d:b8:b0:ab:e9:25:bd:
         52:e6:10:cf:3d:35:60:90:e1:32:cb:57:b2:09:2f:71:5a:b0:
         86:e2:2a:87:e8:10:5b:a2:fe:65:51:66:0b:6b:17:9e:65:25:
         49:6f:0b:c1:8f:fa:33:02:65:af:c6:6f:db:ef:5c:14:0b:e4:
         20:98:c3:a9:2b:21:8e:a5:f9:55:cb:d8:de:2b:68:0e:54:db:
         dc:1d:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:42 2026 by rpki-client