Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/edddfb26-75fd-3d06-85de-dd988ae0a35e.roa
File:                     edddfb26-75fd-3d06-85de-dd988ae0a35e.roa (raw, json)
Hash identifier:          sNJBWt7XTfdXMgCq4foShD7y45NEeHUMe7bAZMS6hlU=
Subject key identifier:   68:CA:17:2B:1E:97:41:26:F2:4B:13:5A:C6:F9:A1:9E:D0:64:06:B1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5CCE3DB81299DFD02CDAA080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/edddfb26-75fd-3d06-85de-dd988ae0a35e.roa
Signing time:             Thu 02 Jul 2026 06:38:26 +0000
ROA not before:           Thu 02 Jul 2026 06:38:26 +0000
ROA not after:            Wed 30 Sep 2026 06:38:26 +0000
asID:                     402215
IP address blocks:        65.86.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5c:ce:3d:b8:12:99:df:d0:2c:da:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  2 06:38:26 2026 GMT
            Not After : Sep 30 06:38:26 2026 GMT
        Subject: CN=72c79536-bbc4-4bde-9717-6956d288d4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:29:4e:59:3e:0b:df:cd:2a:79:24:44:63:
                    a6:b7:43:e7:9f:5b:f1:f8:5d:c9:2b:55:f0:c8:1a:
                    70:02:a2:d9:36:68:c6:6b:b2:7e:b6:2d:84:75:12:
                    90:1c:80:12:c2:de:91:92:88:5c:c0:84:b0:79:bd:
                    ae:68:4f:5f:6a:84:d1:1c:38:66:ba:b9:1b:94:f0:
                    f0:17:7b:cd:af:a2:c2:f5:b7:0f:10:9b:96:cd:1d:
                    8b:6f:68:8a:28:6f:1e:6a:af:60:cf:7a:00:7d:26:
                    d1:cd:91:7f:42:7e:96:62:c2:14:05:12:61:87:1c:
                    54:b9:20:b1:f7:25:84:82:90:cf:19:55:f7:7f:be:
                    1f:95:e4:9b:fc:c6:eb:35:63:d3:f8:ee:3c:e5:45:
                    81:17:4f:e2:bf:8d:dc:71:c7:18:6d:76:58:1b:a8:
                    f2:40:d9:c6:77:57:51:9b:dd:63:64:6f:9e:d3:23:
                    c2:4b:d5:82:67:7b:4a:15:ed:3d:ff:4f:03:e2:22:
                    57:86:f8:7a:37:51:7c:d2:0c:9b:1d:1d:b6:68:56:
                    30:0e:42:99:a5:25:e2:cf:d0:fa:f8:8d:5d:18:f6:
                    c0:5e:20:9b:f7:23:b4:1e:50:06:61:9c:14:77:a1:
                    5e:92:3a:4c:9a:6a:47:d5:ae:5e:39:3f:f9:1f:6f:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:17:2B:1E:97:41:26:F2:4B:13:5A:C6:F9:A1:9E:D0:64:06:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/edddfb26-75fd-3d06-85de-dd988ae0a35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:84:16:a8:e5:ac:63:0f:b3:49:6d:9e:0c:c0:34:d0:d7:
         eb:01:63:f1:00:b2:84:8f:09:fa:43:18:71:54:c7:6d:90:da:
         5e:40:b2:cc:88:1b:8b:39:3a:46:21:07:89:8b:f0:5f:5c:3c:
         1f:fc:ae:91:ec:78:ef:09:d5:c6:4f:d3:09:86:0f:a6:69:f6:
         59:5c:35:5f:dc:13:09:64:38:95:f2:2a:24:50:06:6b:38:95:
         6a:55:bc:59:34:38:1b:85:ca:00:b1:e1:e0:61:8c:2d:52:ed:
         cb:8c:6d:b9:5f:03:77:c1:45:a3:32:81:2d:8d:94:47:2e:0f:
         65:db:69:f6:5a:b4:8f:04:05:8a:ca:d8:5b:9a:44:a1:fd:74:
         65:36:38:d5:4a:c4:38:dc:ab:23:08:dc:31:48:62:de:2d:7d:
         ad:ce:19:2e:e5:7b:fc:ab:63:6f:0e:36:2d:dc:c0:d1:8e:d5:
         31:45:83:31:55:e3:d5:1e:6f:92:ce:b1:46:5c:17:8f:bf:b8:
         06:3e:e4:12:d4:f0:86:82:de:1c:9f:53:e1:f8:d9:68:21:5f:
         17:f2:01:51:8e:a2:03:4c:f8:c9:a1:2b:3e:e4:53:1b:75:9a:
         f7:7b:5e:61:71:70:e8:23:69:38:31:a4:6d:cf:ca:65:68:7d:
         bc:8d:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:38 2026 by rpki-client