Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d4bbc19-033e-3c9d-a195-a9f6223f8be6.roa
File:                     4d4bbc19-033e-3c9d-a195-a9f6223f8be6.roa (raw, json)
Hash identifier:          WVjeP6/BAElzRfICgD0enRndb2PScv/VpK5eAS4PRBM=
Subject key identifier:   2B:C1:42:39:1E:6F:78:B4:E9:42:0C:53:BB:32:44:0C:50:E8:42:70
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D8695815735E87986EA659900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d4bbc19-033e-3c9d-a195-a9f6223f8be6.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     25369
IP address blocks:        64.93.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:81:57:35:e8:79:86:ea:65:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=bd7fac3d-cf1d-43a2-9b35-3a25d1023e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:6b:42:f4:eb:7a:23:16:03:42:f3:34:cc:
                    a2:fd:a4:7f:eb:ee:cd:e7:f8:aa:44:02:2e:f5:9e:
                    17:28:42:71:cf:ba:2c:e1:d4:a0:d0:5b:cb:e7:c8:
                    49:04:7b:3c:a6:cd:30:7b:12:14:cb:e1:59:b6:94:
                    a2:d1:0c:50:f4:e3:f2:19:e0:45:90:66:32:2e:07:
                    fe:49:70:f5:97:f2:31:dc:8d:7a:5c:93:7f:ff:63:
                    47:de:f8:78:f0:0c:a5:a8:89:b3:43:dd:9f:c5:cb:
                    ae:7e:17:5d:1e:fe:10:ab:ae:f9:9d:88:68:74:0f:
                    86:35:cb:93:01:5b:91:ea:d0:d5:b2:c3:9d:62:cc:
                    14:c7:aa:00:a9:58:fe:cf:b4:ad:80:49:8e:cd:8d:
                    a6:19:a6:18:24:4c:78:d5:8f:39:5d:9e:6d:af:b1:
                    53:90:ad:d4:5a:e9:79:c4:17:96:3f:3b:14:e2:5f:
                    8e:2b:69:f1:0c:6f:6a:d6:5e:3a:b6:e8:3e:c1:7f:
                    55:8f:01:bd:dd:af:ce:4b:6a:5a:36:4d:36:c4:8c:
                    1d:35:60:70:34:5f:49:c5:c7:a9:37:ba:3c:46:c2:
                    1e:dd:cc:a8:bf:7e:81:e0:0d:e6:a5:a3:89:ab:a5:
                    f7:3a:52:1d:c6:20:27:57:63:7b:9c:ee:36:cb:5d:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C1:42:39:1E:6F:78:B4:E9:42:0C:53:BB:32:44:0C:50:E8:42:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d4bbc19-033e-3c9d-a195-a9f6223f8be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:5d:32:94:2f:18:3b:10:ea:3c:b2:f2:b3:2f:36:ce:17:
         49:f5:84:bd:d7:ae:d1:06:b7:49:41:1f:dc:ad:a1:99:3c:97:
         91:01:58:d9:9b:37:21:8b:2e:5c:c2:4d:e1:23:c3:8f:59:aa:
         0a:4c:8c:7d:a9:2d:d2:d0:de:6d:f6:2f:2c:1e:b1:00:7f:e3:
         b0:b1:01:77:56:8a:79:44:fc:38:0b:61:e1:4b:4e:ed:be:0b:
         9c:b6:1f:b4:85:a5:da:da:43:0e:c9:25:09:b2:eb:1c:29:d0:
         3a:0a:51:ca:e6:6d:ad:d3:0a:89:9f:62:7e:29:41:94:bb:a3:
         6e:df:be:2f:8f:dc:68:d8:b2:4e:b7:63:c0:f8:e8:48:00:1e:
         a4:96:17:a7:3b:ea:ae:80:7d:ac:c2:52:27:3b:00:75:78:23:
         7f:98:c3:a7:55:80:37:f0:fb:a8:f7:5f:77:18:61:4c:8b:d0:
         95:bf:f2:3e:e9:00:92:7e:40:d2:d6:e0:82:78:30:b8:45:21:
         b2:9d:c0:9c:80:73:31:36:5c:d5:a6:c7:65:f6:aa:22:85:96:
         86:99:18:ad:8c:2f:7d:ff:e5:56:95:5e:3e:4b:08:66:6f:b5:
         f8:f2:1a:ae:b8:6f:2c:fe:ba:e1:66:de:e3:5d:78:0b:b7:75:
         45:0f:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:40 2026 by rpki-client