Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa
File:                     4894f3df-aa63-3248-9184-fd1db1926b55.roa (raw, json)
Hash identifier:          AmRSnawyyvNhCANePkQT9oJyF78nGQTqhzxrJcfX+M8=
Subject key identifier:   1D:98:91:1C:31:EE:AF:CF:18:99:A0:26:C3:65:1C:73:5A:CF:9D:F9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E2809BB237F9FB5D4018C4080
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     199527
IP address blocks:        209.213.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:bb:23:7f:9f:b5:d4:01:8c:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=0b42406d-5848-4665-94a3-1346e7b3694f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:22:0f:62:38:17:ae:c4:20:69:96:5d:69:7d:
                    9e:d1:bf:75:ce:fd:14:26:06:93:47:a4:21:d5:47:
                    6b:80:04:a1:be:26:72:50:3a:cd:8a:bc:d8:82:a6:
                    c0:51:e9:f5:d2:8c:5a:f6:da:c0:8c:3b:db:94:1b:
                    3c:9e:d5:86:09:a7:25:c1:ae:d2:16:dc:69:8f:aa:
                    1f:9e:82:0e:fa:83:7a:19:c9:25:ad:94:24:4b:7a:
                    d5:d6:0b:34:95:88:3a:ca:67:86:ca:6c:78:9e:93:
                    f1:57:ad:0e:6b:f3:06:3e:27:73:dc:b0:1b:4e:c5:
                    09:09:68:9d:7a:22:00:8c:c8:1b:49:20:0f:2a:4e:
                    fd:75:e9:e9:5d:b3:68:7d:f3:c0:d0:65:40:46:42:
                    65:72:af:0f:cb:3b:0b:bd:5b:ee:76:de:32:d8:5e:
                    b9:39:79:75:e9:9b:b4:47:f9:87:50:22:d1:f1:75:
                    b3:7e:df:8f:5d:77:69:e1:38:23:b8:12:f4:f6:e8:
                    07:f9:0f:78:d7:db:ab:4a:6d:58:6a:9c:c4:a0:b3:
                    10:fd:2d:f3:3d:82:45:53:98:76:47:13:41:b2:38:
                    2b:b5:c9:df:03:82:54:75:78:45:e2:32:10:2d:40:
                    8d:54:17:da:ec:4d:fa:85:35:64:2e:8b:87:51:2e:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:91:1C:31:EE:AF:CF:18:99:A0:26:C3:65:1C:73:5A:CF:9D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:5d:43:c6:ae:0d:9e:25:c7:ac:0c:f0:ee:5c:33:ba:92:
         f2:36:8f:22:e4:d7:87:ee:52:45:d6:0e:65:6a:7c:26:18:b1:
         87:ab:04:c2:fa:16:fa:53:f9:5b:e9:22:04:f1:2d:74:54:d8:
         11:7e:ba:c9:a9:45:a4:b0:c6:b4:d1:cb:b7:02:f1:be:96:16:
         12:21:36:1b:bc:08:30:fc:7d:7d:1d:4d:c8:62:cb:47:dc:f8:
         46:e9:88:dd:cf:01:7f:e6:d5:5f:9d:da:4d:df:45:b7:1e:90:
         ea:93:45:e2:ea:b8:ff:fd:07:ec:26:da:0a:ae:9c:d6:0b:e8:
         ae:7f:48:7c:8e:32:13:a4:97:01:00:05:46:d9:ad:bd:a9:bd:
         ee:e9:3f:d1:c8:80:e8:a4:08:56:54:bb:f1:ef:f5:9f:84:cf:
         3f:11:ac:bf:c9:67:80:76:36:df:bd:82:62:72:cb:54:15:ef:
         5c:39:7d:2f:31:0b:ad:81:84:c0:25:50:b1:25:29:d3:17:40:
         af:4a:7b:58:54:e5:b3:89:7b:7d:5b:11:6e:e6:d8:9d:49:5c:
         fb:47:45:a9:01:44:5f:3e:23:c9:4a:60:5c:30:b1:14:21:4b:
         9d:06:13:da:1f:a4:a7:b2:96:7d:75:14:73:18:84:8b:8d:ca:
         a7:3c:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:38 2026 by rpki-client