Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b384de5d-6b03-3c5b-a596-de98b37120d0.roa
File:                     b384de5d-6b03-3c5b-a596-de98b37120d0.roa (raw, json)
Hash identifier:          tTCs7G+xTqLGOOOFFi4Hd3gu1oBXcXdhd5q9AtVp5bo=
Subject key identifier:   41:E8:57:DD:AC:F7:95:5D:1A:AE:6A:E0:C2:3A:73:96:AE:91:33:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DFA70A57A72F935A4B8BF3510
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b384de5d-6b03-3c5b-a596-de98b37120d0.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     5065
IP address blocks:        64.145.12.0/24 maxlen: 24
                          64.145.13.0/24 maxlen: 24
                          64.145.14.0/24 maxlen: 24
                          64.145.15.0/24 maxlen: 24
                          66.80.0.0/24 maxlen: 24
                          66.80.1.0/24 maxlen: 24
                          66.80.2.0/24 maxlen: 24
                          66.80.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a5:7a:72:f9:35:a4:b8:bf:35:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=d7a235d0-10fd-48a7-af48-9e7b9e24fb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:57:22:09:22:f0:7b:18:3d:2e:fb:4f:23:
                    a9:5f:a1:c3:ae:70:8c:76:6c:1a:ca:4d:24:38:f2:
                    35:8a:36:b8:c3:6a:74:e2:17:ad:34:15:b3:f0:18:
                    dc:fc:a6:55:44:9c:90:90:f9:18:c1:e7:f2:e9:0e:
                    95:d7:a1:53:7f:e8:d7:9d:8e:88:2d:8a:02:45:34:
                    b6:70:27:87:46:64:e3:7c:c2:2d:70:5f:f6:da:a5:
                    0c:25:ad:9e:66:cc:38:d5:c8:d6:57:50:d2:c9:4d:
                    df:5f:fc:a9:88:58:ca:3a:01:d6:26:01:17:d8:0f:
                    e2:e5:85:f6:53:56:7e:21:e1:e7:b4:f4:05:b8:10:
                    07:7a:24:0e:ac:54:3f:7d:1e:3d:75:8c:37:48:1a:
                    84:5d:01:ee:ed:0b:b6:fc:ba:39:b2:53:58:b9:97:
                    02:88:df:99:86:13:64:dd:04:94:71:6e:a5:33:95:
                    17:e3:b0:bd:62:f7:25:e0:1d:0a:7a:c8:7d:d1:4f:
                    f5:75:cb:dc:2b:c3:55:8e:d5:c8:8d:d0:19:fd:6b:
                    f1:f5:92:02:15:a3:95:8f:60:7b:1f:1a:48:31:0f:
                    eb:3d:2a:1d:ed:69:bf:46:e7:dc:25:c4:31:cc:b5:
                    3e:d5:b1:e0:18:34:1f:ed:1f:f3:65:4d:23:28:7d:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E8:57:DD:AC:F7:95:5D:1A:AE:6A:E0:C2:3A:73:96:AE:91:33:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b384de5d-6b03-3c5b-a596-de98b37120d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.12.0/22
                  66.80.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bf:f1:80:50:34:62:26:0c:09:f3:d8:7d:6e:b5:0d:9a:b5:
         8a:3e:71:3a:7e:de:94:9b:a0:c4:08:84:7e:25:a8:ad:ab:0d:
         a7:0a:d9:1d:33:6b:66:70:5d:aa:c4:2b:20:3e:6c:3c:b7:8e:
         b7:4f:90:d8:1d:9a:c9:ff:e6:11:db:73:38:c9:55:a3:cd:1b:
         45:ef:b8:ab:d9:f1:a5:f3:15:98:1a:a0:60:24:95:0a:55:a4:
         5f:a2:30:f6:d9:f0:f8:49:14:38:2c:a0:85:45:3d:33:89:bb:
         00:a3:68:1c:dc:12:82:38:2b:80:09:eb:58:33:67:81:12:ea:
         24:41:c1:3f:1b:f9:df:d3:43:b6:ba:64:fd:d5:43:af:af:11:
         55:da:b9:47:49:3b:e1:df:6f:4d:57:96:14:e1:e8:cd:97:8a:
         12:bd:4d:7a:60:fd:10:3d:43:00:73:e5:b7:28:44:f9:b5:c8:
         2f:72:db:95:e8:16:e7:4f:ee:10:5d:cf:7f:e2:5c:3c:e0:c0:
         2a:6f:c7:02:d8:1c:a6:23:07:eb:ea:30:0b:0b:0f:80:46:7b:
         1b:35:a2:09:4f:6b:4b:9b:2d:6e:fb:47:a4:c2:f3:d4:5b:eb:
         4e:0c:07:bc:e5:f5:f1:74:ed:d4:95:7b:e0:9c:09:c3:79:20:
         50:a5:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:17:25 2026 by rpki-client