Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/964bb620-4ea4-3c97-baba-e442c8ef1b06.roa
File:                     964bb620-4ea4-3c97-baba-e442c8ef1b06.roa (raw, json)
Hash identifier:          itluh1dM+XZwMTm4jwbVLlLc0L7u1xcJvQMernzNHCk=
Subject key identifier:   14:BC:5E:F5:2C:8D:8D:91:89:AF:D8:D4:27:87:DE:CE:F3:75:63:03
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6B75D13D9584E724C7395BC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/964bb620-4ea4-3c97-baba-e442c8ef1b06.roa
Signing time:             Tue 07 Jul 2026 12:37:24 +0000
ROA not before:           Tue 07 Jul 2026 12:37:24 +0000
ROA not after:            Mon 05 Oct 2026 12:37:24 +0000
asID:                     402215
IP address blocks:        64.204.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:75:d1:3d:95:84:e7:24:c7:39:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  7 12:37:24 2026 GMT
            Not After : Oct  5 12:37:24 2026 GMT
        Subject: CN=a9ff239d-c0ff-434f-8648-151c1c4e600f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:62:b3:4e:35:8b:05:39:0f:ad:a2:f6:2b:88:
                    9f:74:7e:17:b0:94:2c:7c:20:e1:b7:42:31:f5:bd:
                    a7:08:26:af:bc:1b:e8:ab:64:f8:80:a1:98:15:98:
                    c3:4f:6f:48:1c:5c:24:40:a0:d3:47:06:fb:ae:c1:
                    8c:a7:c4:d1:91:90:e8:2a:d1:38:98:8b:a7:fa:5e:
                    fb:5d:96:18:6c:38:73:41:33:54:69:87:09:40:18:
                    2f:d3:a7:d2:27:ce:c1:b8:ea:c8:18:67:47:cd:d7:
                    87:93:db:28:48:a0:b9:22:ae:d8:7a:5a:55:5b:c9:
                    ab:a8:f5:8d:28:be:17:1a:a8:64:22:e0:a2:a0:16:
                    1b:49:09:8f:86:bb:38:51:9f:be:4d:24:3b:58:ea:
                    0e:5e:09:e9:35:9e:32:e9:55:32:b7:aa:d9:1a:88:
                    2c:62:87:63:37:1a:e2:c8:43:6c:df:93:4e:9b:62:
                    5c:4d:ef:35:0b:e7:03:f3:cc:3c:09:81:8c:27:ca:
                    0b:8e:ae:08:1d:01:a3:41:52:1e:cf:44:f5:2f:33:
                    9c:4f:df:34:ec:2a:09:3f:6d:e4:c1:89:18:a3:8a:
                    01:a9:70:88:8e:e3:96:93:ea:53:d6:2c:44:f2:c2:
                    ec:fc:89:b1:20:58:92:de:b9:22:0c:fb:e1:af:d0:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BC:5E:F5:2C:8D:8D:91:89:AF:D8:D4:27:87:DE:CE:F3:75:63:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/964bb620-4ea4-3c97-baba-e442c8ef1b06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:0f:79:70:e7:09:c7:4b:64:7d:d5:e8:7b:0e:38:aa:91:
         f6:55:b7:06:92:f6:60:31:f6:49:bb:85:07:a6:7b:25:0c:a7:
         a3:77:e3:50:db:99:7f:3d:33:35:c5:28:73:ca:a9:44:4a:ed:
         e6:5f:4d:e5:63:29:7c:c7:ab:6c:a2:b9:20:12:5a:7d:07:b1:
         16:7a:64:fd:1e:0f:13:8e:a8:47:a5:c9:a1:89:e1:03:f7:11:
         a4:01:91:a9:a1:ef:b5:83:75:14:bf:f0:89:c2:57:b3:0f:47:
         86:b6:3a:51:8e:92:11:9e:b2:a7:bb:09:19:78:8f:17:33:1b:
         71:32:2d:32:d8:91:14:90:0f:af:17:70:7a:dc:16:60:e6:e5:
         5e:55:68:95:1e:b7:10:09:87:26:b7:0a:92:ba:6f:11:e5:8b:
         53:c2:d2:e3:6c:9a:e3:0c:b5:4b:12:e9:f1:bd:c5:a3:26:34:
         3c:a1:f4:be:30:11:93:c2:c7:59:a5:1c:c7:0b:dc:b3:bc:c6:
         d4:ab:e4:a0:ee:7e:30:43:ff:4b:a6:1d:fd:05:63:c7:ca:c5:
         28:ed:85:79:13:e6:3f:9c:8b:09:d6:35:9f:ee:39:cf:0e:61:
         0d:12:89:69:d0:48:ed:5c:ce:ec:ec:1f:fc:64:6f:04:99:6f:
         45:be:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:43 2026 by rpki-client