Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52ec2c28-0c7b-3f53-9b0d-f7ce07e31947.roa
File:                     52ec2c28-0c7b-3f53-9b0d-f7ce07e31947.roa (raw, json)
Hash identifier:          qWTOIw5kOFl9Y/WOHsiwKa4JYdqHe88Dwx3VCVMD7hA=
Subject key identifier:   30:F0:27:51:D4:FA:F4:DA:23:3F:3B:07:BF:56:3D:45:C4:86:8C:0E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5F7FB3997E42BE9F394C9E00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52ec2c28-0c7b-3f53-9b0d-f7ce07e31947.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     21840
IP address blocks:        64.81.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:b3:99:7e:42:be:9f:39:4c:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=62ad919c-7cc7-44c4-b59a-528a6d057608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:eb:b1:99:a2:10:7e:c7:ea:e4:d4:fa:8e:
                    51:57:a8:5f:93:4d:f4:6c:71:ff:96:20:4e:d4:66:
                    61:dc:50:ba:a5:e5:2f:6a:57:40:8a:bf:6d:b8:f6:
                    57:31:28:a0:ae:79:c3:a6:e6:25:1c:72:b5:77:5e:
                    c4:54:02:ae:c6:ff:72:b4:48:2f:7f:ec:1e:e1:77:
                    29:0a:c8:09:46:48:a7:f5:f9:b6:1f:e8:c5:6b:1e:
                    9f:ba:7a:83:29:e5:80:f7:79:fa:48:ea:e4:83:67:
                    13:7c:e1:16:8c:dd:33:6d:03:06:ef:0c:af:42:54:
                    d0:73:dc:d1:b9:67:09:2b:14:4d:3a:fe:7a:83:c7:
                    b9:77:71:df:3e:44:05:8f:c9:e1:33:9b:4c:fb:fe:
                    51:81:60:12:8c:ea:39:d3:67:d1:9c:1c:44:c7:f0:
                    52:fb:76:33:56:6c:4b:cc:4b:e1:8e:3d:c4:10:d1:
                    cf:21:68:96:30:a2:9b:cc:bf:0e:eb:32:a7:19:db:
                    81:91:ee:65:5c:44:fa:80:51:b0:91:de:ac:e2:2a:
                    12:fd:a0:ea:36:98:14:99:47:af:81:be:52:bc:75:
                    6f:45:cf:21:3a:65:41:a2:b7:f1:5a:8d:d6:6b:a5:
                    03:4f:55:a5:4b:d7:a7:6d:04:0a:fd:78:d8:d7:e5:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F0:27:51:D4:FA:F4:DA:23:3F:3B:07:BF:56:3D:45:C4:86:8C:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/52ec2c28-0c7b-3f53-9b0d-f7ce07e31947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:c4:19:4c:cf:39:7f:b5:61:69:3e:9d:d7:d9:89:ea:85:
         6f:b1:a5:91:f0:0c:9b:f3:da:1b:c4:d4:57:70:a0:c6:07:b9:
         70:f4:40:7d:9c:00:a0:df:9a:2e:7a:40:41:01:89:41:18:51:
         9d:db:13:e9:a6:bc:4d:57:26:ed:1d:17:62:38:dd:02:c8:c0:
         31:73:82:8b:27:50:1c:72:46:3a:af:02:0d:96:32:42:eb:e0:
         37:54:06:9e:14:53:74:8d:7e:f5:72:0f:1b:5b:02:72:d0:0e:
         d5:43:30:3a:58:8b:1e:30:92:7e:19:80:7a:62:09:26:05:37:
         c9:f8:49:bd:cb:8a:1e:d6:e3:9b:88:d6:66:66:03:7b:cb:f0:
         c9:40:15:44:63:0f:7e:32:1b:65:a5:4c:5d:cb:dc:d7:81:98:
         bb:24:22:49:6f:a1:58:45:8d:49:a2:b1:19:f2:18:09:59:91:
         88:1d:42:90:b0:d5:6e:4d:0c:bd:ce:d5:4f:20:23:d1:b4:7d:
         20:b8:d2:98:57:87:2f:e1:0a:a0:b6:16:fe:69:28:8f:74:d5:
         83:44:bf:64:12:6d:53:87:37:66:7f:bf:56:df:57:30:a7:0a:
         ba:c1:0e:9d:29:e8:01:98:1f:75:75:34:71:9a:e9:be:8f:67:
         15:00:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:56 2026 by rpki-client