Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7031424a-a711-304f-9a5e-ca1372668b32.roa
File:                     7031424a-a711-304f-9a5e-ca1372668b32.roa (raw, json)
Hash identifier:          poUqrK0GYdqercqTI7MpL0hUfkgx+WwzrVdRuVruuVk=
Subject key identifier:   48:E5:F7:AB:96:69:1E:1E:54:88:1D:BE:69:F0:A0:63:87:54:88:AF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EC907170D2E48406F7C3557C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7031424a-a711-304f-9a5e-ca1372668b32.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     32693
IP address blocks:        64.204.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:17:0d:2e:48:40:6f:7c:35:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=e8b1f940-8b6b-48b0-97dc-27fe692fed4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:27:df:18:09:e3:8a:76:87:ef:05:76:9f:
                    17:be:d1:5f:ee:df:63:b2:cc:7a:94:7d:59:01:8a:
                    f3:c6:17:11:a0:cf:74:a1:b4:d0:d3:7a:31:31:a0:
                    a0:ce:57:4b:a3:14:b6:7b:4f:35:b1:fb:d6:61:5b:
                    38:d1:8a:b8:4d:7b:8a:63:e6:a8:ac:0c:4a:89:9d:
                    fa:3b:58:86:79:bc:34:87:8a:74:0e:2f:7b:e5:10:
                    0c:3f:31:52:51:05:6b:fe:15:80:72:a5:d0:02:fa:
                    28:ac:a8:96:c8:27:45:3e:07:32:93:d7:72:7c:7f:
                    8b:ba:08:30:6f:4a:63:94:37:de:fa:97:8a:53:06:
                    c1:9f:54:0f:6b:d6:35:ce:69:ce:68:75:45:01:b2:
                    c2:de:4c:60:4f:bb:28:0f:a3:fb:eb:e8:70:85:63:
                    44:6f:a1:fe:43:09:c5:1e:3c:5a:75:55:30:46:84:
                    ea:dd:de:a9:40:c6:7c:42:cc:c0:8f:ff:b9:f0:d0:
                    33:d7:ac:90:e5:33:70:ad:6c:3f:94:7f:d9:02:cb:
                    2f:0e:87:ca:3f:9a:b0:fa:98:f6:1e:d9:5e:e2:74:
                    78:c5:a7:6c:75:14:72:ab:de:d4:32:8c:5b:bc:ba:
                    54:c7:b7:74:b8:57:ba:bd:ab:e9:42:8e:f0:61:dd:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E5:F7:AB:96:69:1E:1E:54:88:1D:BE:69:F0:A0:63:87:54:88:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7031424a-a711-304f-9a5e-ca1372668b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:e9:ae:1c:ff:68:30:09:6d:8d:be:1c:46:50:d8:a1:30:
         4e:15:b5:a8:3a:41:93:1c:0c:f8:f9:4b:27:82:11:8a:21:5f:
         b6:d8:fc:36:21:7a:6c:7a:d3:9f:1b:ba:cb:2c:b2:81:ee:13:
         1a:fd:6f:a1:00:86:99:d0:61:74:90:53:11:78:58:10:8c:76:
         51:c0:f8:56:b1:69:01:63:05:5b:e0:45:18:27:36:aa:1d:59:
         73:f5:25:0e:49:87:64:a0:3a:63:4e:9d:5c:ba:d3:25:1e:ed:
         22:70:c2:0b:ee:0d:94:e1:ca:98:94:34:ac:ab:23:95:8c:10:
         7c:a4:9c:ce:9c:fa:c0:a8:40:f0:75:b6:b6:09:49:96:1a:83:
         26:d5:29:4e:0b:43:15:8e:f7:ff:48:90:7a:03:89:16:f9:53:
         9f:fc:62:4d:4d:64:3b:44:b3:7b:d6:b4:70:df:14:21:54:2a:
         93:c8:dd:f9:93:c7:ab:ff:94:67:0e:2f:77:6a:a7:83:02:8a:
         2b:1c:70:ae:8b:71:ea:c9:30:8b:cb:d6:27:29:e5:02:5e:a5:
         5f:74:fa:ed:0c:e5:f9:1a:9b:6a:d4:e6:d5:68:ef:7c:ef:f7:
         9c:f9:28:9b:b7:77:23:1e:7d:8d:4f:97:8b:60:8a:f0:90:b7:
         6e:79:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:52:44 2026 by rpki-client