Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b37ee95a-54e9-3145-9acf-323270cc97ee.roa
File:                     b37ee95a-54e9-3145-9acf-323270cc97ee.roa (raw, json)
Hash identifier:          zlLciriZ4A2+N0CVBYdVM7abZXLGHwwRokjWu/Wo8iY=
Subject key identifier:   CC:D6:6D:CE:5D:2C:D2:28:4C:BC:5F:99:1C:AF:65:E2:E2:E2:FB:9A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D932563ADAC102FE783066D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b37ee95a-54e9-3145-9acf-323270cc97ee.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     147034
IP address blocks:        64.205.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:63:ad:ac:10:2f:e7:83:06:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=1e0119fc-3304-4104-865e-d6131eb0c477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:b8:fd:ec:5c:2c:68:da:d7:02:ea:89:26:
                    d3:16:03:14:3e:22:11:94:e8:29:c7:9b:9b:49:be:
                    aa:d8:9d:1d:a8:50:b3:70:a3:78:22:4f:7e:9d:3f:
                    35:72:4a:37:a5:c9:7e:30:51:45:61:63:3e:d6:21:
                    ef:97:aa:4c:32:69:ba:13:8e:5c:34:92:a0:6e:01:
                    be:8f:84:24:8f:a6:46:d0:8f:26:98:75:ac:a9:44:
                    ca:56:d2:23:23:09:c8:6a:6b:3c:79:4f:37:2a:ec:
                    ae:f6:1e:b8:00:85:7f:a3:06:f5:34:78:8e:de:bb:
                    ad:88:81:d2:39:5f:81:a5:b9:ee:eb:c0:16:b4:0f:
                    1b:ea:22:29:34:f9:f2:cc:36:25:a5:6a:33:92:7f:
                    7b:3d:bc:75:e7:33:19:7a:6f:b9:5f:bf:5e:1b:7f:
                    19:65:e2:07:ff:f8:44:dd:90:a5:2f:56:9b:62:d5:
                    61:da:91:9c:2b:70:b5:f8:a3:38:4c:5d:f5:15:eb:
                    94:1b:74:32:b0:1d:7a:f1:03:f2:a1:50:b1:a7:4d:
                    ec:a5:05:a2:72:c3:e0:71:ef:e1:af:bd:09:d6:c2:
                    bb:d7:25:32:31:a7:f3:70:05:46:19:3d:9c:9e:f6:
                    17:f0:22:1a:0f:ef:5c:bd:85:c9:40:0e:15:15:8a:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D6:6D:CE:5D:2C:D2:28:4C:BC:5F:99:1C:AF:65:E2:E2:E2:FB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b37ee95a-54e9-3145-9acf-323270cc97ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2a:e9:dd:56:58:c6:e9:06:d0:00:d9:ad:07:26:d5:20:c3:
         e3:0b:9d:1b:a0:ea:61:3c:80:19:2d:7b:62:8f:ea:c0:da:74:
         72:4c:61:16:56:47:b2:75:ba:2b:01:48:36:9b:c4:47:d7:62:
         f3:b2:47:94:5c:02:e4:f3:2f:5f:fe:e3:32:e4:3a:9a:a4:1f:
         92:1e:02:84:e3:d7:83:68:f6:84:9d:98:e3:65:f6:2f:2d:52:
         5d:92:eb:9d:e4:ba:a1:45:bc:01:9f:b1:68:bf:e7:ca:e0:7a:
         93:73:65:f7:23:a4:74:e8:c2:b1:f7:3f:62:74:09:38:e4:1a:
         0e:20:50:79:f2:9f:d6:d7:4d:5e:ea:69:0c:e9:5f:c2:16:b1:
         ed:f0:bb:f1:96:f3:09:54:ab:ce:c8:11:ce:dd:cb:1c:89:df:
         1e:99:5f:a2:97:17:9f:d2:27:28:c7:bc:00:e0:54:37:97:5c:
         a2:10:e6:37:d4:6d:0d:cd:8e:f1:4c:70:7a:f1:43:67:bc:58:
         2d:1c:c3:b8:a7:de:eb:9a:d4:b1:06:b5:e4:5f:dc:89:42:8d:
         5d:46:e6:d3:77:50:d7:7a:06:29:cc:1b:28:e6:e1:09:be:af:
         ad:65:f4:d7:29:df:09:e2:fb:1f:83:82:4b:bf:13:37:ca:ff:
         7d:a7:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:34:17 2026 by rpki-client