Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7217e440-48a1-32b5-ab3e-85042b63f0d5.roa
File:                     7217e440-48a1-32b5-ab3e-85042b63f0d5.roa (raw, json)
Hash identifier:          MCZnbufFq4at7o7z50muN5xFEW3T1LAVR1q6wmGk4XY=
Subject key identifier:   64:9D:69:B9:BA:D5:BA:8F:40:22:B1:70:6A:E8:2E:0E:CC:7D:DE:83
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6C6F60C05ABA14BCA0619DC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7217e440-48a1-32b5-ab3e-85042b63f0d5.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     42960
IP address blocks:        64.204.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:60:c0:5a:ba:14:bc:a0:61:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=64a28121-ca37-416c-b533-b2cdd31b59b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:7f:5b:a6:91:ba:67:3a:ce:c1:4c:fb:d9:
                    5e:2b:44:19:35:e9:92:55:01:de:57:60:65:d9:85:
                    f7:42:16:bd:b3:f7:b4:47:bf:30:76:04:6f:e4:f3:
                    08:8e:cb:ef:9e:31:bc:bd:54:de:a7:c6:74:5f:a4:
                    fe:7c:d2:2b:28:4d:ad:3e:08:82:4e:49:68:da:52:
                    01:88:cf:16:05:12:3b:da:26:08:f9:b5:4e:d1:1f:
                    27:46:d8:82:ec:c2:77:c3:be:93:3b:6f:be:52:ee:
                    66:99:15:62:3b:ba:e7:a1:8e:82:d5:11:2e:39:7d:
                    6b:f1:29:34:29:56:c6:6b:1d:0b:be:bd:0a:09:d6:
                    e7:04:ad:5f:cf:d5:66:cb:a6:8c:74:f8:f1:7b:8f:
                    09:4d:71:5f:67:5f:11:43:6c:b6:2f:0a:40:ee:78:
                    a2:94:c3:1b:ec:10:e6:96:71:0e:90:9a:fe:6d:64:
                    c7:45:5b:4e:b0:83:9a:a8:a2:e7:4b:a9:fc:48:f4:
                    25:cf:5b:75:84:5f:36:4a:75:5f:89:1d:a9:15:01:
                    98:9f:48:d6:8a:cd:3f:8f:2b:c1:cb:91:3b:c9:4a:
                    2a:bb:eb:22:27:eb:91:e6:29:29:2b:02:2d:d2:9f:
                    8c:7c:7c:79:7a:7e:d3:92:da:1a:da:5f:32:a7:fc:
                    2d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:69:B9:BA:D5:BA:8F:40:22:B1:70:6A:E8:2E:0E:CC:7D:DE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7217e440-48a1-32b5-ab3e-85042b63f0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:79:d4:ef:d1:9f:4a:da:db:bf:1e:a6:28:63:3a:2c:97:
         ac:ff:3d:52:9f:19:22:0c:b7:75:79:6f:15:c7:b6:d7:a6:e0:
         80:05:40:e5:c0:2d:1c:8d:10:cd:38:fd:4f:b3:30:b3:fb:d5:
         3e:90:d2:c6:a3:af:5d:7f:b0:1b:d4:db:6d:e0:de:ec:20:95:
         31:3f:25:8b:d0:48:e9:1e:5e:03:68:3a:39:cb:e8:9d:0e:a2:
         23:30:0c:4a:90:47:62:81:cb:37:28:5e:c3:73:83:65:04:08:
         95:6b:fd:db:6b:85:f6:ac:69:fa:d0:d1:e0:f5:27:02:48:dc:
         51:7c:66:fa:74:c0:26:8c:99:05:ba:e9:7c:f4:8c:1f:a6:49:
         57:14:1e:52:ab:d9:78:51:e7:58:af:c6:34:a9:0c:bb:72:d3:
         c4:3e:46:61:fa:7c:6a:d2:29:91:cc:e7:d6:34:9d:02:1c:f0:
         36:e9:ff:83:14:14:69:08:55:9b:2f:1d:3b:39:de:ab:4c:a0:
         af:08:11:a7:39:18:b0:94:d8:90:fe:5b:ab:5a:bf:37:07:fc:
         a1:b0:51:b1:76:a5:0e:a8:44:00:12:66:c9:a5:1d:ba:bf:96:
         64:81:1f:b9:11:64:ac:de:5d:42:75:4c:e4:cb:e2:14:37:6a:
         22:65:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:42:19 2026 by rpki-client