Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fec6c2bd-a1e4-39cb-9a60-6e46895401d8.roa
File:                     fec6c2bd-a1e4-39cb-9a60-6e46895401d8.roa (raw, json)
Hash identifier:          E43COvzD1ChrZcJYQ6OsODxlATwx6tTGHfSyiVwlEVY=
Subject key identifier:   C9:98:92:E5:02:A3:E5:8B:D9:A0:48:37:44:40:A3:FC:12:33:65:B1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EB6E1A35ED7ABA674FAAF7B40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fec6c2bd-a1e4-39cb-9a60-6e46895401d8.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     834
IP address blocks:        64.7.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a3:5e:d7:ab:a6:74:fa:af:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=acb6174b-6975-459a-bfc0-f63fcd6ae1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:56:e7:43:94:5e:dd:fd:b4:47:3a:62:47:69:
                    e4:f4:ae:0e:63:ed:14:c9:38:a2:f8:49:a7:19:f1:
                    ca:b1:44:f3:f6:96:5c:f7:01:90:7b:05:d7:48:c5:
                    1f:96:98:9e:0e:be:2b:b8:f7:d3:22:29:3d:6b:f8:
                    cc:62:53:08:df:f5:57:6b:0f:6b:a5:3a:18:9c:6e:
                    b1:68:e5:76:e7:f7:59:98:08:10:04:46:e1:66:95:
                    ca:a1:ff:c1:8f:52:df:42:77:16:50:d0:e7:66:eb:
                    c8:be:8d:1c:84:ae:0d:de:73:16:7a:56:48:80:f3:
                    c4:ec:3d:ab:80:51:64:20:5a:41:09:cc:50:30:bd:
                    23:a7:73:41:53:af:f6:b0:fe:8e:86:0d:31:55:35:
                    50:37:25:0f:fc:ed:49:0f:d9:21:d4:0c:9c:ef:eb:
                    d5:8b:96:38:4c:36:5b:19:dc:1b:8c:a3:9b:9c:37:
                    c0:12:60:27:07:3e:8d:b1:00:9b:bd:f9:69:0c:2f:
                    7a:16:d9:62:92:6a:f3:a2:d4:f5:26:78:b9:cc:d0:
                    46:be:03:42:5a:92:33:9e:36:db:c4:14:e2:7d:9b:
                    69:29:9d:21:47:eb:a6:69:69:96:4c:0c:35:2c:75:
                    34:85:d9:13:34:2e:4e:ee:5f:82:c3:d1:25:08:fd:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:98:92:E5:02:A3:E5:8B:D9:A0:48:37:44:40:A3:FC:12:33:65:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fec6c2bd-a1e4-39cb-9a60-6e46895401d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:1b:db:74:59:7c:71:b0:9d:13:3a:e3:89:06:9f:a5:21:63:
         9c:6a:a5:31:de:31:f8:db:7a:05:a4:ae:24:bb:94:36:de:0a:
         20:1a:c4:f9:91:20:96:62:e8:de:e4:92:ae:5b:0c:67:59:da:
         dc:67:f6:db:6f:c0:b3:77:d0:11:15:c7:2b:9c:3c:2c:eb:50:
         90:b0:0c:c6:b8:0f:8d:5e:fc:82:e2:63:01:4c:79:6a:9f:6d:
         b9:5d:97:f7:3b:e0:7f:d2:e8:2a:4b:87:4b:3e:18:11:7c:07:
         cb:8a:e5:eb:36:e7:b4:a3:70:32:70:cf:fe:2d:23:42:07:e7:
         49:73:81:17:a0:b2:d0:a0:25:9a:3d:a1:7d:bd:47:f7:6e:41:
         4b:27:38:4e:d2:b1:fc:80:72:fd:e8:c1:ad:77:7e:3d:ef:6e:
         51:e4:d8:6d:ec:f4:49:a5:d3:cd:28:e4:5d:20:9e:65:72:c9:
         de:29:ab:27:05:b6:ed:a2:e1:bb:e5:57:10:f9:31:c9:c5:c6:
         b6:54:ef:10:f3:94:44:5a:37:c7:23:cf:6f:bf:18:70:c7:57:
         49:2c:34:48:ab:a0:f6:ca:1b:d2:56:26:a8:4d:da:ca:20:a9:
         2f:e1:2e:30:15:1d:48:20:a9:b8:51:58:79:df:9f:c2:9c:df:
         2a:ce:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:45:21 2026 by rpki-client