Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86318254-4dbe-319a-9109-6f09d8f67a72.roa
File:                     86318254-4dbe-319a-9109-6f09d8f67a72.roa (raw, json)
Hash identifier:          zM3fcqQRhJGi/KCVEMJ91w5xIxImVFX4FpYDfbTaqMI=
Subject key identifier:   8D:03:AA:BF:FE:85:1F:55:A8:2E:6A:97:60:DE:C9:D7:66:E0:4A:B4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF4F6937FBE8EA6D04856FD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86318254-4dbe-319a-9109-6f09d8f67a72.roa
Signing time:             Tue 25 Aug 2026 18:42:34 +0000
ROA not before:           Tue 25 Aug 2026 18:42:34 +0000
ROA not after:            Mon 23 Nov 2026 19:42:34 +0000
asID:                     402265
IP address blocks:        64.204.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:f6:93:7f:be:8e:a6:d0:48:56:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 25 18:42:34 2026 GMT
            Not After : Nov 23 19:42:34 2026 GMT
        Subject: CN=12426c78-dd79-4ed3-8b28-6762056051ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:92:09:ba:39:24:0b:b2:47:b5:8c:29:cb:
                    47:e3:ef:57:af:9f:c2:7b:e5:64:1b:6b:2b:41:d5:
                    95:12:a1:c9:f7:6f:87:a3:28:5e:e8:10:32:aa:fa:
                    05:6c:07:f8:d9:f5:fd:30:f7:7d:63:41:a3:62:97:
                    78:53:dc:f7:e0:42:76:12:bf:f5:b8:1d:c9:6f:59:
                    6e:19:b5:49:19:58:36:01:12:ba:7b:60:f2:dd:c1:
                    53:32:01:21:ab:e2:e2:f5:1e:6e:33:e5:a2:04:2f:
                    bd:a2:56:78:4a:76:26:db:8e:47:78:5d:57:14:14:
                    9c:ca:0b:e2:a8:4c:c0:ab:55:02:a6:38:bd:84:0a:
                    41:fc:3d:22:dc:86:73:e8:cd:20:86:1b:f3:ff:61:
                    dd:2f:e6:03:23:d2:52:56:04:07:32:88:05:da:de:
                    4e:45:b6:fa:bf:15:f3:38:65:51:94:9a:10:9f:c7:
                    10:e3:1a:6e:99:8c:61:a9:8b:86:43:89:98:d8:bf:
                    55:a2:d8:67:7d:22:68:41:88:1b:c7:a8:d2:27:6f:
                    3e:45:47:b5:08:a6:a1:09:6c:8e:b3:62:60:8b:ff:
                    f1:16:92:82:59:8f:98:91:bd:b7:94:89:48:1a:36:
                    c6:64:9f:9b:61:38:6f:e4:1b:25:ce:a2:ae:3e:79:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:AA:BF:FE:85:1F:55:A8:2E:6A:97:60:DE:C9:D7:66:E0:4A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/86318254-4dbe-319a-9109-6f09d8f67a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:84:eb:7a:98:f1:88:e9:71:b7:f1:0b:de:b1:04:fc:52:
         29:ad:09:d3:7e:47:e0:a8:aa:43:9b:1d:68:11:63:a8:01:5f:
         02:95:7a:70:9e:45:f5:7d:c9:ab:a3:83:d1:df:bf:a9:67:ff:
         90:40:da:4c:69:75:f7:01:5a:9c:34:f9:a6:79:d4:4d:d2:d0:
         b0:e1:d8:d7:ab:97:f6:14:82:18:c1:76:af:4e:a3:a8:d4:6f:
         fc:01:f0:ea:fc:64:31:35:53:9e:6f:7b:9e:76:91:5c:81:3c:
         9c:00:b5:b5:a2:2d:61:d9:69:41:22:3c:5f:8b:45:e5:1c:b0:
         a1:fa:71:6c:65:fc:a5:35:e4:c0:df:83:4d:a2:78:99:a4:b9:
         db:45:44:dd:8f:b1:32:7d:44:ff:fa:26:4b:fb:77:5d:70:5d:
         2b:af:90:a1:03:68:55:24:a5:27:d5:e7:ed:5a:14:4d:3a:1b:
         17:96:bc:6a:8b:25:85:e5:ab:f6:ce:ac:d9:d3:ae:e0:75:77:
         7a:41:6f:bd:97:63:e4:fa:08:12:66:24:ec:e1:99:7c:01:0a:
         20:d6:51:c2:21:2c:4e:fc:a4:23:8b:61:e5:ac:65:80:cf:11:
         0d:a0:bc:59:13:04:09:d8:42:15:16:62:48:12:eb:b4:52:7e:
         71:bd:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:05:50 2026 by rpki-client