Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa
File:                     b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa (raw, json)
Hash identifier:          cwCvLdaRkJz7+gA+6a95JydgyFuJT2+mJ7DpoYvPTcI=
Subject key identifier:   FE:20:22:01:8A:BE:EE:40:46:0A:29:EA:15:ED:60:32:75:D1:42:03
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF0AB4727E7D48CFAD1D06160
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     834
IP address blocks:        65.86.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:47:27:e7:d4:8c:fa:d1:d0:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=bafec8cc-0f2d-4b2e-9def-ed2b1bdba772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:02:35:58:57:b0:07:4b:79:a5:87:c3:5f:
                    56:4e:4c:c7:01:92:3b:01:6c:5f:f6:35:19:89:df:
                    49:28:d1:ed:e4:dc:50:8d:bf:e1:36:e3:a6:9c:53:
                    8e:ed:00:dd:c3:22:d8:c6:9c:d6:6b:b4:f7:67:ee:
                    3a:ea:f2:d4:9c:19:14:75:e5:e1:22:62:d4:ea:97:
                    c1:cb:03:29:c3:9d:ef:50:2f:73:8d:dc:f7:c7:49:
                    aa:a3:26:85:33:04:f0:ca:7a:97:c8:fc:1b:b7:f8:
                    92:6e:fd:a5:62:0a:53:8b:2f:94:10:cb:03:27:3b:
                    65:a6:4c:16:2a:2a:95:37:c2:21:40:50:61:13:8e:
                    2e:32:28:21:6d:a3:df:4a:30:de:60:80:c7:34:97:
                    a0:35:46:8c:e1:e7:9d:7e:4f:a1:af:eb:63:ae:64:
                    77:59:c0:aa:1b:59:f1:3b:1f:ee:c0:8f:8d:5e:cc:
                    5e:36:94:ec:0e:3a:e5:e1:a2:89:15:3c:66:c9:c5:
                    f4:27:f2:25:a2:3c:c9:76:a4:f1:11:17:06:bf:47:
                    94:96:c5:1b:9f:3c:a4:e9:c4:71:b0:2a:a4:c9:40:
                    a8:a5:ec:22:b6:05:59:0f:8d:32:41:c6:cb:41:38:
                    f5:81:da:09:26:1c:2a:68:c9:fb:2a:93:8e:87:8f:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:22:01:8A:BE:EE:40:46:0A:29:EA:15:ED:60:32:75:D1:42:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5a16fd3-6d64-3f02-97c0-af176b0e49ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:e5:06:4f:16:9b:ac:3c:a2:7d:7b:12:f5:a2:19:2e:1e:
         a1:d1:d6:8f:8a:f5:b6:2a:2f:9e:39:2c:fe:ed:46:f9:8e:4a:
         a5:01:79:74:e2:f6:e8:d9:32:30:2d:45:20:1b:f9:ee:3b:45:
         74:5a:f0:0d:5d:f0:35:03:09:f4:8a:1b:95:ca:d9:b3:1f:03:
         e7:93:5e:be:5e:27:f6:54:cf:d4:46:3e:53:1c:a3:71:9d:24:
         43:02:34:eb:90:95:3c:dc:a7:fc:12:a8:38:0c:6a:95:15:1a:
         c2:9d:30:0f:59:46:21:01:52:d7:54:c6:33:13:ec:25:70:d3:
         04:39:6d:ca:4e:ce:44:b0:f1:d9:b8:a6:40:62:f6:c4:96:7a:
         de:67:65:3c:1f:eb:82:1a:19:6a:f1:9b:0f:b8:fc:3d:19:70:
         a6:45:54:46:85:b8:35:65:98:a0:73:f6:b2:2c:5f:7f:8b:a2:
         4a:8d:c1:cb:04:35:28:9d:e2:1c:9d:0c:3c:66:df:e8:b8:b4:
         42:b6:f2:cc:b7:3a:57:9b:47:fe:e3:a2:39:08:c2:35:8c:bf:
         8b:66:3d:b7:6d:4e:fd:39:af:f2:1b:3a:e7:6a:93:e6:d3:e1:
         9c:42:55:c4:99:5d:a0:13:2c:26:d6:a7:39:47:29:ee:30:d2:
         b0:4a:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 02:32:07 2026 by rpki-client