Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e623ee19-d456-3672-a574-d34884404857.roa
File:                     e623ee19-d456-3672-a574-d34884404857.roa (raw, json)
Hash identifier:          ZkKh6wl0y1PsJPsGM2Xlh9dNnK/pLG8y5Ecc1Z2Ogbk=
Subject key identifier:   7B:A8:EC:62:93:57:1B:43:89:05:CA:1B:59:F9:F8:1B:CD:9A:7F:92
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D667A5B4702A7542014439580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e623ee19-d456-3672-a574-d34884404857.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     834
IP address blocks:        65.86.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:5b:47:02:a7:54:20:14:43:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=2ce2e13b-90a8-42bd-9c82-d63221a5d436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:43:7b:0b:f9:1f:b6:78:2e:fa:29:df:e3:
                    0a:93:44:47:df:2f:35:b1:2c:7c:a9:18:85:48:4e:
                    2d:0d:8c:32:db:43:4b:fd:2d:f5:1a:7d:55:30:fe:
                    c0:b2:0a:1f:b2:55:93:3c:61:cd:f9:09:d7:92:b5:
                    0c:30:22:28:2e:61:07:24:2a:d5:2a:c7:e5:95:af:
                    50:06:9a:88:24:90:c4:05:17:94:42:47:69:61:bb:
                    55:7a:ba:a6:e0:58:be:8c:82:33:cf:15:f2:c3:01:
                    17:23:ac:07:11:a0:c0:79:1d:2a:5a:3e:a7:5d:09:
                    d1:93:97:18:87:79:eb:ff:fb:ff:d3:6a:35:3e:a4:
                    c4:d2:c4:3c:15:ac:99:4c:db:ee:ff:2d:94:01:d7:
                    17:48:c7:6a:85:77:ed:52:73:12:bb:22:a1:1a:a3:
                    e5:1d:15:1c:fb:2c:56:91:42:25:f9:e8:b7:9d:99:
                    5d:fe:35:ea:43:b0:9d:0e:51:d2:db:f7:c7:2a:40:
                    56:e8:81:80:dc:26:f8:d0:e1:fd:c1:75:01:87:95:
                    25:a6:7f:e9:96:48:ba:bb:5c:79:8f:13:92:10:f4:
                    e5:f9:98:d6:26:e4:3f:76:3a:71:45:0f:8c:4f:27:
                    8f:3f:b0:fd:f6:b1:15:c8:e3:a0:f1:00:b6:94:af:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:EC:62:93:57:1B:43:89:05:CA:1B:59:F9:F8:1B:CD:9A:7F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e623ee19-d456-3672-a574-d34884404857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:cc:da:bc:ef:f8:22:a4:14:f7:60:a9:7f:3f:91:c3:2c:eb:
         25:ee:60:3b:b6:78:3e:78:a2:98:5a:cb:d1:25:25:5f:a4:7a:
         5e:41:7a:10:e2:d4:ec:52:3d:41:92:7e:d6:61:b9:08:93:f5:
         52:54:20:ba:0d:b5:03:f0:e8:b3:e1:1e:6c:94:7e:a1:3f:b2:
         78:39:ce:56:2f:ad:ab:76:fc:09:18:01:0e:7b:79:85:b5:86:
         c5:df:f8:eb:ab:44:a4:6a:e8:c0:b5:9b:f4:2a:49:08:74:ac:
         42:aa:4d:49:b0:60:fb:c4:e3:0b:ac:52:1a:a0:c6:2a:ab:28:
         b9:69:02:33:4d:41:6d:b2:0e:f9:9e:ce:20:97:5a:c3:a4:d9:
         d3:0a:d8:d9:37:29:4a:b3:20:93:05:d6:c8:6e:38:7e:d1:d6:
         7b:ec:c2:72:a7:d0:8c:92:a1:1d:1f:e0:be:3c:24:a3:5c:dd:
         27:69:8e:52:6d:aa:f0:73:1f:0b:ce:fd:b7:a4:d2:91:21:39:
         7f:c6:2a:a4:ef:90:ab:61:3e:d4:77:d6:8c:e6:5d:ba:17:f9:
         fc:2f:56:f6:77:8b:1e:bf:12:46:30:98:2f:aa:db:10:95:ef:
         51:06:04:14:61:a3:26:ee:e9:08:d2:ec:20:ed:0f:ff:62:8e:
         b2:79:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:11 2026 by rpki-client