Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1d909dd-a63c-362d-9e94-25a442e1b913.roa
File:                     e1d909dd-a63c-362d-9e94-25a442e1b913.roa (raw, json)
Hash identifier:          HHQIunkA9oGPEtMltK0/xPmpHCu2Y0MhMhTHw03HUOE=
Subject key identifier:   C4:85:9A:39:A0:F7:94:22:CA:6D:5F:1A:62:F4:62:50:23:78:F8:B9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5FBFAF1C1B3E04E47397F100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1d909dd-a63c-362d-9e94-25a442e1b913.roa
Signing time:             Thu 02 Apr 2026 15:09:35 +0000
ROA not before:           Thu 02 Apr 2026 15:09:35 +0000
ROA not after:            Wed 01 Jul 2026 15:09:35 +0000
asID:                     402257
IP address blocks:        64.204.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:bf:af:1c:1b:3e:04:e4:73:97:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  2 15:09:35 2026 GMT
            Not After : Jul  1 15:09:35 2026 GMT
        Subject: CN=6dfd13dc-fe78-4a19-a80f-b51605255f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:6c:75:e5:42:40:18:74:96:08:85:eb:4f:
                    b6:5a:37:42:f2:eb:0c:4e:49:14:59:1c:f9:05:f9:
                    20:3a:00:d9:96:e1:04:f7:ce:4b:24:e0:b9:c7:8a:
                    7c:ae:bf:fe:0e:f2:a0:80:aa:6c:69:12:1b:bc:a7:
                    3d:3b:23:71:e4:1f:18:40:56:1c:08:1b:c5:b2:7c:
                    3e:7c:4c:d0:b1:87:e1:b1:71:6c:bd:8b:a2:5c:5a:
                    97:90:3b:fb:28:fc:a8:39:3c:5c:a5:c3:a8:c7:0b:
                    74:00:08:93:c1:96:da:d6:4e:84:2e:99:64:1d:26:
                    61:4a:99:20:d3:5b:5f:4d:d9:b6:b2:da:4a:f6:a8:
                    8a:7f:05:70:a8:23:b8:d4:df:54:09:a6:e4:72:2a:
                    96:e3:ee:54:d9:2d:f5:1b:c3:7b:2a:73:69:f5:0a:
                    94:95:a5:fa:05:9b:c2:9e:d8:aa:4b:38:12:2f:4e:
                    6f:c7:98:a4:b5:56:5c:15:69:4e:b2:97:81:46:36:
                    ed:99:1e:fc:7b:b1:ae:7f:7b:12:87:46:b8:4c:66:
                    0f:a1:35:4d:57:c4:56:b3:90:15:b3:cc:c6:da:6c:
                    da:c7:ef:79:ed:a7:e5:31:82:6b:4c:06:c8:24:b2:
                    43:23:07:d9:d8:f2:83:6c:13:29:ac:be:e0:50:7d:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:9A:39:A0:F7:94:22:CA:6D:5F:1A:62:F4:62:50:23:78:F8:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e1d909dd-a63c-362d-9e94-25a442e1b913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:4e:ef:39:7f:dc:e4:d7:90:44:05:1d:60:53:8f:8b:85:
         c1:92:51:24:f6:ad:47:2e:79:84:22:13:5a:5c:3c:a0:fa:4a:
         43:30:e6:27:11:72:bc:76:4a:f8:6e:bd:5c:3e:74:79:82:51:
         bb:a7:76:34:58:6b:7b:36:4e:ea:7b:82:db:02:f1:02:2c:8c:
         0a:6c:ad:ba:c0:a7:4a:19:9a:56:ea:0b:6e:67:9f:a6:da:0e:
         6b:78:19:00:ca:ad:7f:10:d5:f3:bf:c6:c3:1e:0b:e3:86:87:
         07:79:9d:cf:1e:d1:1e:89:b1:f0:5c:92:be:28:09:b7:30:23:
         f0:19:eb:d1:07:03:04:af:c5:41:be:cb:d6:31:1b:2d:44:2f:
         fa:61:be:f9:be:82:4e:e0:38:4e:03:11:4f:6c:f3:fd:c5:3d:
         5d:d3:45:5b:b2:89:8f:69:e0:9b:ff:3b:8b:ab:7e:07:bb:28:
         40:90:38:68:3a:f1:7a:46:ad:88:17:1a:14:39:bb:ee:d3:db:
         79:c0:0a:4f:dc:30:6f:43:a4:bb:69:f6:5a:fb:66:95:19:6e:
         89:52:b8:bc:1e:74:10:41:5b:29:2f:53:43:b6:b6:b3:57:fc:
         f1:22:92:fb:db:b9:24:00:49:c4:e2:61:e7:d0:7c:c4:fc:d4:
         b2:a1:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 16:59:06 2026 by rpki-client