Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3836ed44-baae-3307-9aa9-afc7099ad287.roa
File:                     3836ed44-baae-3307-9aa9-afc7099ad287.roa (raw, json)
Hash identifier:          EO1QWhRvmdmDWfB6Hf/kWQN1ZgRPTHqmhfRjuc5AmlY=
Subject key identifier:   B2:7C:3F:91:43:93:06:19:0A:DA:D6:15:08:F2:A4:2F:48:67:12:84
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BAB88F2DD3F1CF74AC32CCD60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3836ed44-baae-3307-9aa9-afc7099ad287.roa
Signing time:             Tue 28 Oct 2025 09:06:52 +0000
ROA not before:           Tue 28 Oct 2025 09:06:52 +0000
ROA not after:            Mon 26 Jan 2026 10:06:52 +0000
asID:                     401776
IP address blocks:        64.204.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:88:f2:dd:3f:1c:f7:4a:c3:2c:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 28 09:06:52 2025 GMT
            Not After : Jan 26 10:06:52 2026 GMT
        Subject: CN=54604e32-9105-4757-abf9-f0fa1a1f1472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:72:3e:ca:5f:6a:ac:c0:fe:45:aa:f3:57:
                    4c:28:90:a6:6f:1a:c4:ec:19:1c:53:f2:19:32:d8:
                    25:73:00:ee:e1:28:f6:df:08:9f:88:a2:24:c8:20:
                    a8:67:2d:30:e8:3c:3c:2b:69:1f:4d:71:8c:fa:72:
                    66:25:cf:24:73:0b:e5:e5:db:f6:de:b7:1e:c4:92:
                    e5:10:7f:14:ec:fb:4c:51:08:08:f9:c9:b9:8e:2a:
                    b4:f8:35:46:08:e8:05:2c:5c:da:00:56:1e:57:17:
                    e7:a8:81:35:46:f5:6f:d9:8a:4c:57:b9:7a:a9:f9:
                    6b:25:92:88:3e:0d:86:b1:40:fe:55:6d:d2:0e:ea:
                    70:35:93:54:59:c1:87:1d:ed:fa:77:10:2a:ee:ba:
                    f9:1b:02:d0:e6:a0:f4:91:10:4f:28:8d:cb:d9:eb:
                    d6:21:a3:d6:95:87:a8:77:1e:89:b6:2c:15:5e:56:
                    7a:ea:d0:09:41:84:95:be:8d:a7:24:50:4f:dc:81:
                    ee:9b:a1:5e:4d:fa:b2:17:98:7e:b8:c8:13:a8:c5:
                    a8:49:f7:3a:08:36:e3:74:39:2f:e9:09:ac:8f:57:
                    89:9e:bc:85:4a:e7:50:71:bf:fb:d5:3c:51:5a:5a:
                    5c:c7:ce:c7:19:48:b3:61:87:b9:de:e1:33:82:73:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:3F:91:43:93:06:19:0A:DA:D6:15:08:F2:A4:2F:48:67:12:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3836ed44-baae-3307-9aa9-afc7099ad287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2c:8f:53:9d:3f:59:d9:18:ad:18:ba:30:af:f5:5a:08:5d:
         0b:04:be:f8:66:0f:a5:fa:14:42:c0:54:4b:aa:78:38:47:25:
         c0:b3:c0:12:d8:46:62:59:8f:b2:89:69:bb:ed:08:0e:9b:d3:
         03:4b:18:4a:e2:24:6e:97:49:9e:e7:02:22:a5:3c:a8:8b:8c:
         08:03:5c:86:e5:fa:ad:f7:cf:ce:3f:b5:ef:6c:12:cd:9d:a4:
         44:d4:12:4c:4e:c5:f4:4f:63:10:3c:45:d2:c3:fb:87:07:ea:
         4d:b3:24:51:95:24:82:ae:1c:02:3f:8c:37:cb:0e:87:7d:d0:
         95:6d:f0:0c:9d:46:da:3f:77:57:80:4d:69:4a:84:48:5e:7e:
         9c:6d:2d:69:1a:f7:13:f5:a0:c5:d0:81:c2:a2:ba:8b:c3:53:
         49:6b:81:37:2a:90:73:ca:f5:4f:ba:43:6f:cd:79:19:d5:d2:
         e5:21:4a:24:3c:6e:33:bf:1b:16:0c:c9:36:dc:77:91:7c:c5:
         6f:ab:34:16:b6:00:76:84:36:cc:0c:f4:d7:d5:99:90:6c:5d:
         49:b3:1a:3b:df:9e:05:cf:ba:77:05:2e:99:ca:bd:63:b3:5e:
         60:80:f6:c7:ca:cb:1c:54:8b:4f:e3:34:e3:31:5a:30:40:cf:
         09:79:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:46:47 2025 by rpki-client