Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa
File:                     c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa (raw, json)
Hash identifier:          ZvGHs7/sx/60pXs0YhfGad3uu2hw0wXKB0GlXNtISq8=
Subject key identifier:   0D:41:05:99:B7:FF:C0:56:F1:41:8B:D6:8E:39:B5:C4:5A:F5:3C:41
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF1822F31C72EA77F89CF7E80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     834
IP address blocks:        64.205.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:2f:31:c7:2e:a7:7f:89:cf:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=56daad9a-7bf5-4ae4-ba75-6a25f243747d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:44:92:48:74:cd:25:10:89:1c:06:4f:5f:
                    c4:d6:2a:1c:d4:21:f4:46:8e:74:49:05:a2:79:df:
                    73:1b:5e:40:b5:72:1f:4d:36:3d:e7:73:49:b9:5a:
                    19:32:d5:d6:12:01:68:47:74:dd:8b:78:81:c8:dc:
                    79:49:fa:89:f3:b5:69:df:99:24:2b:3a:4e:a4:37:
                    de:bc:92:d5:82:6c:7e:0b:a8:ef:67:dc:d8:4c:cf:
                    c9:22:9a:6f:5b:48:d6:27:5e:2f:e8:09:08:7f:29:
                    15:b6:d7:99:43:b8:44:73:7a:ed:82:eb:2e:49:c4:
                    8e:1d:43:50:dd:99:fa:3e:a3:07:34:1d:53:53:2e:
                    99:eb:1b:df:16:44:e9:4e:8b:91:b7:62:15:94:67:
                    f2:07:b8:54:37:7a:33:e4:aa:4d:91:e1:c1:14:50:
                    1b:7b:86:27:f0:fe:3d:b7:f2:48:80:38:eb:42:a6:
                    69:ee:d5:fe:95:54:60:b6:50:36:dc:35:21:fa:a0:
                    d7:66:f1:ee:67:db:01:74:3d:80:d6:f2:11:be:96:
                    d3:de:b0:4e:a6:9f:5a:4c:23:da:49:8b:bd:b8:11:
                    b5:50:4c:6d:2c:31:40:4f:33:a5:a7:b1:f1:a2:6c:
                    45:17:bd:f4:36:fb:11:7f:93:65:f3:39:c6:27:63:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:41:05:99:B7:FF:C0:56:F1:41:8B:D6:8E:39:B5:C4:5A:F5:3C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c9d56a6f-d6f6-36db-91b0-b136e7d9d445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:86:6c:e9:a5:2d:c4:83:e2:93:f8:51:ca:78:9b:00:f2:8f:
         94:9c:49:9f:69:ed:5a:c2:2a:db:fe:6e:8f:2e:c9:95:ac:40:
         12:ef:2f:5f:c6:f4:74:2b:ed:57:63:86:14:4e:ea:17:77:d9:
         ea:3d:e2:19:20:94:d6:c8:a3:3b:d3:5f:9a:55:a1:57:48:1a:
         df:8c:7f:37:e0:3f:b6:8b:64:0f:87:f0:6d:7a:16:5f:da:29:
         e8:77:a1:1e:b4:af:77:de:01:24:4b:cf:e1:50:e5:65:fb:8c:
         3e:e6:c7:36:4d:34:43:d6:aa:ad:38:64:c7:c7:12:1f:1f:48:
         a3:25:b0:a2:6d:2e:67:97:75:43:36:11:db:9d:fc:ed:67:c2:
         1f:d7:6f:78:76:7d:7c:5f:45:34:b1:82:a5:6e:3f:3d:32:6a:
         57:df:49:0d:05:ac:3c:77:f0:ad:91:67:ba:11:7c:f1:06:e6:
         3c:bd:ed:0a:b0:59:e2:4a:ba:e9:da:9c:99:84:0b:eb:77:2d:
         9c:ce:c7:fb:41:20:72:14:29:88:ef:ac:95:7a:fa:7f:ff:b4:
         62:11:8d:3a:07:90:c3:30:48:33:e3:2b:61:27:1e:8c:e7:36:
         de:4f:69:53:c4:95:3f:c2:e6:35:db:99:0f:ae:63:63:64:c2:
         a5:bb:06:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:04:51 2026 by rpki-client