Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa
File:                     c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa (raw, json)
Hash identifier:          51EboWlJitqzrMKK2G6wknYti1J8MeL+hMyf7UhY7pc=
Subject key identifier:   F5:4F:D5:DD:E9:25:01:E4:15:D9:4F:89:76:96:BB:79:71:ED:AD:D7
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D6EBF35CE813997C3D7E08140
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa
Signing time:             Wed 08 Apr 2026 00:05:45 +0000
ROA not before:           Wed 08 Apr 2026 00:05:45 +0000
ROA not after:            Tue 07 Jul 2026 00:05:45 +0000
asID:                     834
IP address blocks:        64.205.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:bf:35:ce:81:39:97:c3:d7:e0:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  8 00:05:45 2026 GMT
            Not After : Jul  7 00:05:45 2026 GMT
        Subject: CN=909bba87-3d86-4342-ab04-968329413d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:0f:64:d6:6e:d3:4b:2e:a5:68:4d:0e:f8:
                    32:ef:2b:36:53:47:fc:6a:67:d5:7c:0b:58:e2:05:
                    59:21:4d:9b:0c:3d:44:c9:0a:99:c1:d9:86:11:29:
                    bd:8f:04:fa:0b:90:9f:2f:36:e0:fe:8c:f6:f0:27:
                    b7:4a:db:50:f5:4a:e9:08:ce:26:59:3a:f3:87:98:
                    af:ab:7a:44:90:61:d4:c2:99:d7:1e:18:fe:9a:49:
                    f3:d3:c8:df:84:13:7f:59:d8:18:bc:4d:a2:87:06:
                    c1:1b:d2:13:81:43:8b:cf:1d:f8:53:8d:0c:0e:17:
                    9f:63:05:48:11:18:36:47:86:35:60:39:9f:b3:24:
                    5c:ee:0e:e8:54:a9:ac:30:b1:46:1e:fa:83:69:2a:
                    de:69:97:31:38:3a:46:3b:1c:91:fe:cf:2c:c9:58:
                    26:13:f0:27:c7:e6:b3:1f:eb:56:dd:c5:5a:b9:f1:
                    1c:9d:70:9a:5f:49:36:b2:dc:a9:93:11:dd:4f:1d:
                    ed:0b:3e:77:ce:b4:fc:9c:03:52:c5:c9:3b:2f:85:
                    19:da:37:33:47:18:a6:aa:d1:f5:4a:3f:7f:91:9d:
                    fa:10:46:6e:c7:31:06:c2:b0:1c:47:50:bf:b4:4b:
                    88:66:d0:1c:56:ed:21:b4:7b:31:12:b0:61:dd:21:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4F:D5:DD:E9:25:01:E4:15:D9:4F:89:76:96:BB:79:71:ED:AD:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:4c:6f:0b:d0:29:3d:89:4b:f1:d7:be:84:74:96:76:52:
         55:9d:16:80:79:ae:17:b1:be:d1:f1:17:4f:0f:6c:6f:23:05:
         cc:0a:7a:3b:f2:61:85:14:0b:9e:44:58:a8:57:db:7f:f3:a6:
         00:ed:e2:dd:9e:6d:fb:0e:4e:7f:bb:22:72:c6:52:51:26:a3:
         7a:d6:7a:f4:d7:0e:1c:97:a1:80:7b:b8:ae:0d:40:42:10:97:
         d4:5d:94:16:a1:37:d2:67:53:4c:33:8c:74:c5:3c:bb:9f:3c:
         35:a8:5d:8f:ca:35:36:65:38:a5:c1:3c:8c:08:5a:40:d4:d8:
         85:b9:93:a3:4b:57:61:6b:8a:e5:58:50:70:be:6c:59:4b:ad:
         30:30:08:4c:8f:86:e5:c9:82:df:fd:31:1d:ef:92:8a:51:40:
         d6:28:80:4e:b3:ab:11:96:a3:32:ed:67:6e:97:83:4e:88:ec:
         d8:b4:92:62:4e:c0:c3:18:02:94:71:0b:0b:97:7d:72:1e:76:
         48:b4:da:1f:e4:32:3d:a9:92:d5:86:2f:52:8e:e0:96:46:c2:
         7a:51:06:8b:e7:60:3c:0d:d3:bb:2a:98:b5:86:7f:09:d2:2c:
         11:f2:70:67:ea:30:52:e3:31:99:a5:a6:6b:22:c8:84:a1:a6:
         6b:2c:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:12:56 2026 by rpki-client