Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c934ae9-4e49-3c61-bd8e-a6ac2caa36e7.roa
File:                     7c934ae9-4e49-3c61-bd8e-a6ac2caa36e7.roa (raw, json)
Hash identifier:          bb9mscMF3zOb2qrIkZ2Hj5EychWkeM1PNPqgdd4spQY=
Subject key identifier:   A3:88:4C:22:C9:95:17:20:4B:90:99:4B:88:EE:52:28:69:67:31:B8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E3FC479FE111C75ED00664EC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c934ae9-4e49-3c61-bd8e-a6ac2caa36e7.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     55201
IP address blocks:        64.204.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:79:fe:11:1c:75:ed:00:66:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=8016a5fa-31d3-41ac-b858-9d71d59aebf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:f0:72:18:cc:ae:00:bf:30:dd:fd:db:ed:
                    d5:61:26:76:28:38:0b:f6:1e:ea:4d:48:1e:68:65:
                    68:96:32:09:04:c3:73:b8:9e:7e:27:98:4d:3b:9c:
                    55:17:63:9f:59:bd:22:b8:09:97:2b:62:0b:e1:36:
                    75:2f:e2:59:2d:c9:77:fc:9e:32:09:1e:f8:52:1a:
                    27:a7:ad:db:32:76:52:e5:f2:18:8b:6b:8f:fb:4e:
                    30:9a:4a:9e:b3:c1:7e:c0:9f:e6:de:e0:42:34:6c:
                    a3:0d:c7:75:9a:a7:2d:5e:4e:14:fd:56:0b:3f:56:
                    7f:92:7d:b4:9f:b9:e5:9a:00:47:7b:d6:09:d6:e1:
                    68:4f:64:3f:df:1f:4b:ea:26:80:10:cb:96:4a:c3:
                    a8:bf:56:27:19:cc:3e:79:bf:41:1c:02:ec:50:04:
                    9b:14:e7:22:f5:90:51:6f:7b:aa:51:75:46:ec:ef:
                    a2:02:f4:aa:ae:54:27:be:7d:60:8a:e3:65:00:f5:
                    94:12:2b:f2:25:92:86:c9:88:3d:c9:50:13:6c:65:
                    20:aa:cf:33:c3:ba:11:4e:13:a0:59:88:75:b6:74:
                    5f:ec:2e:dc:63:b3:ab:b0:df:af:40:6e:a0:ad:88:
                    fe:3b:de:72:3b:0a:87:6f:26:a6:ec:51:eb:86:54:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:88:4C:22:C9:95:17:20:4B:90:99:4B:88:EE:52:28:69:67:31:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c934ae9-4e49-3c61-bd8e-a6ac2caa36e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e5:3f:ca:ac:97:2e:28:a2:69:31:5e:f2:1d:32:02:e7:92:
         a5:83:c3:83:91:df:62:1a:e2:ee:b1:dd:65:02:39:ef:44:71:
         1a:11:f0:ad:bd:53:b8:eb:43:1b:ff:a6:52:90:65:9b:ab:fc:
         66:f6:7e:d4:49:fa:9c:e5:0a:ad:29:76:80:40:88:b2:ef:23:
         c0:1e:f2:cb:05:94:91:00:09:8d:49:24:63:51:e8:70:88:aa:
         18:4b:dc:49:b3:16:c3:2a:a0:02:2c:45:c0:a8:be:53:b1:38:
         b7:0c:85:3b:5a:e4:6c:1d:89:d1:03:a8:69:28:df:a9:b5:e2:
         fc:03:b9:98:b2:56:2a:49:82:79:9d:80:1e:51:b3:4d:a2:95:
         24:c8:2b:c6:55:82:ee:b1:e4:22:bc:a7:97:58:c9:39:43:44:
         5b:fd:52:21:14:a7:f4:c1:cb:35:67:df:2b:ba:8d:30:4b:ef:
         03:b3:93:6b:d3:52:37:08:6b:15:d2:62:45:a1:34:dc:4a:65:
         eb:11:e1:cb:b5:4a:d2:70:29:ec:3e:af:d4:c6:48:f0:6a:e4:
         b9:ca:96:66:5f:7d:b7:d1:41:73:eb:4f:e2:62:53:5b:94:18:
         48:d6:49:b9:38:40:8d:fc:e5:94:2c:23:3f:51:97:a8:f9:a7:
         3a:3e:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:08:45 2026 by rpki-client