Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/338707e2-6c13-3978-b993-894b20467fa6.roa
File:                     338707e2-6c13-3978-b993-894b20467fa6.roa (raw, json)
Hash identifier:          bqkiL61n4IGVKZXCpOk6Npuj0wg1CP/fi/IWPypelPs=
Subject key identifier:   C0:37:23:FF:87:81:8D:43:98:ED:8F:A1:A5:CE:E1:7C:3C:6B:1B:7C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7B2381467923FB99F9129580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/338707e2-6c13-3978-b993-894b20467fa6.roa
Signing time:             Sun 12 Apr 2026 10:37:32 +0000
ROA not before:           Sun 12 Apr 2026 10:37:32 +0000
ROA not after:            Sat 11 Jul 2026 10:37:32 +0000
asID:                     401856
IP address blocks:        64.204.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:23:81:46:79:23:fb:99:f9:12:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 12 10:37:32 2026 GMT
            Not After : Jul 11 10:37:32 2026 GMT
        Subject: CN=21ce4c7e-5062-471d-987a-de1f94d2a6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:0c:51:c1:20:62:e2:e4:c4:08:9a:e4:ab:
                    44:7c:76:7d:e9:44:54:9d:1c:1b:50:0e:c7:cd:5f:
                    5c:a6:1a:fd:fe:db:c0:58:f4:2e:07:cd:83:ca:e7:
                    41:28:bd:f9:10:11:50:1f:f1:65:c5:f5:39:f9:de:
                    cd:20:30:32:51:aa:44:7d:33:62:ad:09:5a:0a:64:
                    71:1b:c7:7f:eb:92:4c:67:32:ad:e6:8a:2f:67:1a:
                    52:d9:91:04:b1:3a:6a:48:cf:c1:10:ba:2e:e3:74:
                    27:da:5f:60:31:5b:e3:c0:83:a9:cc:55:a3:9f:65:
                    f1:74:68:7a:38:1e:b1:43:af:94:96:a3:43:db:af:
                    98:03:72:e4:63:20:7c:93:53:ee:80:2a:44:98:6c:
                    4d:5b:94:6c:6b:a1:1d:17:e4:29:75:5b:76:a9:f2:
                    cd:08:dc:4b:e8:03:ed:b8:06:6a:6d:34:3a:ce:fa:
                    6b:e3:50:67:16:13:e0:65:d2:4e:ac:3c:fc:af:1f:
                    42:a2:2a:b3:24:5f:0d:66:86:2d:4c:8b:61:e4:e0:
                    5b:13:23:7f:67:60:3d:ce:2e:ae:08:52:00:6d:fe:
                    1c:a4:73:79:f8:65:5b:16:1a:fb:18:c3:fd:34:2e:
                    9b:1f:56:bb:0f:13:2c:ac:8f:69:93:56:91:bc:1a:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:23:FF:87:81:8D:43:98:ED:8F:A1:A5:CE:E1:7C:3C:6B:1B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/338707e2-6c13-3978-b993-894b20467fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1a:53:65:4f:23:18:b4:b8:30:ca:ab:96:1a:d2:27:7c:0e:
         c1:d9:6d:15:91:c3:e0:9d:be:74:32:eb:78:17:3e:e0:ea:36:
         ad:f9:54:68:54:f7:c6:8f:07:3e:52:09:7c:de:da:4e:eb:2f:
         fe:f8:6e:aa:30:ea:7d:18:b5:7c:e3:f1:53:ec:ff:77:26:9f:
         f9:7e:fc:e3:3e:cc:1c:33:73:93:12:6c:ad:df:bc:8e:ee:1e:
         74:85:82:8c:73:ae:f0:31:a6:9b:9e:12:21:f5:68:6c:b7:9f:
         7b:6c:ae:aa:75:2b:94:4f:d9:64:d6:d1:f0:75:73:c9:bb:67:
         53:5d:a0:4e:b8:b3:f4:31:9a:8a:b8:ad:36:99:17:3e:0d:da:
         99:b1:d0:64:7f:34:43:37:8c:fe:53:62:34:5f:ae:5d:5b:de:
         02:ac:6a:bf:50:23:3d:24:31:db:f3:7d:f9:7f:a6:ce:03:e6:
         db:7a:72:a3:90:fc:99:2a:f1:6e:2c:1a:b0:21:87:da:96:c5:
         88:61:92:8c:dc:8a:7a:a0:aa:01:29:dd:57:b5:08:4c:a7:dd:
         07:30:bd:ab:95:b6:4c:78:9b:0f:5c:52:56:53:f0:ed:0b:c5:
         c3:ee:78:79:7e:ba:dc:05:93:3f:6e:f0:3a:7f:a7:70:66:42:
         9e:4e:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:05 2026 by rpki-client