Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89eea09d-f9d7-3a99-b7e6-eb89d55ebd80.roa
File:                     89eea09d-f9d7-3a99-b7e6-eb89d55ebd80.roa (raw, json)
Hash identifier:          oQr6zxqu/b3WZvTYpI8/XamL7n7tK0IKqCLVQuPo9c4=
Subject key identifier:   D2:66:1B:20:03:C5:61:CC:3A:D1:35:45:30:16:F7:7B:B3:BF:BF:6F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D50858163D71D3E730906AAC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89eea09d-f9d7-3a99-b7e6-eb89d55ebd80.roa
Signing time:             Sat 28 Mar 2026 04:15:14 +0000
ROA not before:           Sat 28 Mar 2026 04:15:14 +0000
ROA not after:            Fri 26 Jun 2026 04:15:14 +0000
asID:                     139659
IP address blocks:        64.204.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:85:81:63:d7:1d:3e:73:09:06:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 28 04:15:14 2026 GMT
            Not After : Jun 26 04:15:14 2026 GMT
        Subject: CN=db3f67cd-6fc1-4393-a00f-cc1be8ddd922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:68:1e:6e:cd:1e:ad:67:53:8a:e1:20:18:
                    a7:fe:f2:13:48:ee:0e:12:3c:2b:cf:2d:93:90:1d:
                    8d:04:65:97:e0:e1:c0:2f:26:b6:38:1d:42:d6:98:
                    7b:c1:46:c7:f7:f4:94:75:b1:e5:ef:70:25:8c:f4:
                    a3:79:64:f6:ce:3f:e2:5f:f4:25:b8:46:d3:84:5f:
                    6d:86:86:e1:af:2a:15:ac:e0:eb:09:98:c6:b6:04:
                    1f:9d:ae:e9:a0:8d:fe:57:6e:7d:65:9a:1b:df:21:
                    8f:19:a1:1b:83:fb:e7:fa:30:4d:2f:b4:e7:c5:43:
                    d1:e9:6f:c8:6e:d4:a6:92:c2:b5:8c:3b:7a:0c:d7:
                    4b:b2:fd:92:9c:37:ab:d7:bb:e7:2a:db:48:e0:44:
                    cd:9b:e0:30:16:5c:24:ae:3b:2e:56:64:5a:48:0a:
                    61:1d:8c:86:34:31:f8:20:b6:6a:f1:5d:d0:10:14:
                    71:c3:f8:24:0f:98:85:16:da:a8:b9:3e:15:bd:c4:
                    94:e4:47:80:e4:69:8e:02:18:48:98:77:75:a5:ee:
                    6e:62:ac:ab:63:c2:d1:c1:4e:b7:0d:66:d8:2f:ac:
                    55:fa:c1:0f:90:61:a6:1c:23:24:dc:da:89:15:6c:
                    27:03:a1:bf:96:4c:ea:ba:bd:2e:d8:db:e7:e4:f9:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:1B:20:03:C5:61:CC:3A:D1:35:45:30:16:F7:7B:B3:BF:BF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/89eea09d-f9d7-3a99-b7e6-eb89d55ebd80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:ae:01:bd:0c:76:b2:59:78:5b:7c:b2:a9:5c:04:2b:f6:
         bc:89:51:85:be:56:2a:bd:4a:4e:7f:b2:cb:63:95:19:34:dc:
         b2:1b:ae:cc:05:93:08:84:a2:47:23:ab:f8:98:98:04:a5:5a:
         57:1e:01:d0:6a:94:45:19:d7:ae:5b:54:a6:6e:95:22:62:ec:
         18:64:94:0f:67:3e:58:e5:93:0f:67:11:bb:55:c2:c4:97:3d:
         6e:ac:95:87:1a:43:59:9a:01:6c:51:68:9f:66:7a:4b:f9:80:
         ed:cc:08:cd:88:ba:75:d4:a4:5c:2f:69:30:77:9c:9e:ba:78:
         c4:73:34:55:05:60:d6:b6:59:e3:0d:d7:e3:33:74:09:75:d5:
         2c:17:b0:d4:d0:a6:00:a5:dd:72:f0:f9:10:e9:46:d1:80:c5:
         b9:55:82:f1:a6:d8:7f:8c:e8:7d:bd:61:3a:bf:3c:82:ac:d6:
         7b:a2:7a:b0:7a:46:4a:d8:4c:3b:05:d9:29:d2:fb:24:85:f3:
         c4:9f:43:77:f5:0f:93:a8:bd:4b:f8:fd:c8:3d:b7:c0:7e:74:
         ae:cd:19:82:26:c5:e7:2d:a0:2e:b8:dd:26:29:15:06:fd:3e:
         5e:68:57:c2:d3:96:e6:11:21:69:72:7c:9e:bb:36:2c:f8:36:
         ba:0c:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:34 2026 by rpki-client