Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b78904d6-d147-38d7-b426-11e9c8892e7c.roa
File:                     b78904d6-d147-38d7-b426-11e9c8892e7c.roa (raw, json)
Hash identifier:          05yknta96HG3cxXH96KbDJ4OyfSLJrHlCzmRhUMSILU=
Subject key identifier:   FC:EE:DE:C9:84:B8:01:6F:A9:15:90:42:A9:ED:5B:26:BC:C9:88:9C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F7FA0B8895FF74D5B722E6960
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b78904d6-d147-38d7-b426-11e9c8892e7c.roa
Signing time:             Wed 14 Oct 2026 10:46:57 +0000
ROA not before:           Wed 14 Oct 2026 10:46:57 +0000
ROA not after:            Tue 12 Jan 2027 11:46:57 +0000
asID:                     40676
IP address blocks:        64.204.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:a0:b8:89:5f:f7:4d:5b:72:2e:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 14 10:46:57 2026 GMT
            Not After : Jan 12 11:46:57 2027 GMT
        Subject: CN=ed1b9586-8000-47f0-8258-dcffdc850b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:3b:52:25:0f:0b:a0:cd:b4:e6:e4:92:84:
                    03:17:0f:1e:2d:bb:09:7c:7d:db:c1:d7:dd:59:1f:
                    6b:74:25:17:01:11:ef:da:50:28:4c:43:eb:8a:fc:
                    49:4f:34:9e:e4:47:21:12:4d:99:fb:0e:0f:b2:55:
                    ec:05:0e:69:60:8a:be:8f:bc:0e:2f:52:8e:37:fd:
                    a7:e0:1c:d4:c4:11:38:8a:b6:6c:1a:c2:89:be:c6:
                    75:4b:99:e4:69:58:f3:4f:b4:36:10:30:58:b5:e1:
                    a1:2b:46:fb:7d:76:6e:9c:f5:54:66:dd:19:03:2f:
                    96:3f:68:9a:96:73:bc:ec:2f:23:ac:f9:a4:dd:82:
                    49:65:af:a9:c9:89:80:8a:cf:68:21:b6:bd:68:08:
                    62:7c:11:c3:cc:f7:50:b8:bb:a4:3a:26:ba:07:f3:
                    65:c1:cf:e3:13:87:97:86:c3:e6:5a:10:01:91:c6:
                    8d:06:34:d3:e2:29:f0:f2:bc:c1:2f:0d:e8:21:d3:
                    39:df:01:a8:2e:d2:3c:cc:5c:65:5e:ef:bb:d4:72:
                    68:f8:79:fe:f2:6e:cf:f2:1f:5b:2f:4c:bd:7d:56:
                    ac:73:bd:f5:f3:46:23:43:ad:04:f7:3f:58:6e:5e:
                    1f:b7:43:59:c2:3a:93:94:a5:9d:08:f6:f0:20:32:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:DE:C9:84:B8:01:6F:A9:15:90:42:A9:ED:5B:26:BC:C9:88:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b78904d6-d147-38d7-b426-11e9c8892e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:14:d6:50:a9:d0:c4:08:ef:b0:c0:6f:12:e4:d3:86:6b:c3:
         25:25:34:35:e2:08:34:bd:d8:00:73:22:54:ba:d3:19:16:39:
         20:7f:e1:c3:6e:35:d2:be:31:ef:53:13:09:5e:69:57:af:3a:
         bc:32:9f:6c:3d:58:3d:fa:10:43:0e:d0:62:67:b4:9f:d3:13:
         83:a9:16:5b:26:f2:9c:d3:5d:ae:51:04:7c:ce:20:10:80:d2:
         9b:0f:bb:f8:39:67:8d:8f:d2:e2:c0:0a:95:e4:d4:2f:35:a9:
         bf:fa:95:12:1b:92:81:55:7f:95:1d:f9:a8:29:a9:f9:c7:ea:
         3f:2d:a4:c4:98:82:c4:4a:30:9a:7a:df:90:8a:2f:9e:8b:e7:
         a3:36:9b:02:4e:c5:e5:6c:71:99:97:3c:2f:bf:f7:aa:60:40:
         b5:c1:5d:eb:8e:f8:5e:84:42:69:70:da:62:79:08:f1:ca:d9:
         68:a7:dd:c7:e4:63:aa:b9:8e:31:88:34:f8:88:73:df:0e:c5:
         3a:49:72:39:03:55:62:fa:53:88:4f:74:b8:71:1b:68:c2:44:
         44:97:48:4b:6e:d5:c5:5c:55:0f:66:dc:76:19:d1:2e:94:52:
         a1:70:e1:ac:3d:e1:10:9f:92:ce:0f:bc:a3:ba:55:0c:bc:ba:
         b3:66:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:09:19 2026 by rpki-client