Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5351a350-448a-36a9-8d00-9d85b2809e32.roa
File:                     5351a350-448a-36a9-8d00-9d85b2809e32.roa (raw, json)
Hash identifier:          5XQ+kzxBsyrt9vNChuMj4Kve7Qjjpt53hQ8mW0RdqMY=
Subject key identifier:   36:93:F0:8D:C2:A6:4D:3B:5C:0A:D3:0F:5A:93:F3:8C:9C:0F:C2:4B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E1AAA02FC3D9C8E14607A4500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5351a350-448a-36a9-8d00-9d85b2809e32.roa
Signing time:             Mon 08 Jun 2026 14:02:05 +0000
ROA not before:           Mon 08 Jun 2026 14:02:05 +0000
ROA not after:            Sun 06 Sep 2026 14:02:05 +0000
asID:                     834
IP address blocks:        64.204.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:aa:02:fc:3d:9c:8e:14:60:7a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  8 14:02:05 2026 GMT
            Not After : Sep  6 14:02:05 2026 GMT
        Subject: CN=98f8d58f-26f0-4db3-9429-1c951db26629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:b4:54:fa:d9:76:1e:ee:30:72:72:6f:ac:
                    15:ea:bf:2b:75:c8:3c:e6:34:2b:51:c4:95:56:53:
                    bf:59:ef:dc:9a:bb:0c:42:75:62:0d:c1:8d:65:ce:
                    50:0d:5c:be:a4:0c:3a:93:12:9f:9f:32:5b:52:73:
                    97:bb:fa:8a:a2:fd:51:d1:36:ff:5a:0c:1d:18:8d:
                    7e:17:5b:a5:d8:1e:54:38:74:2f:d8:3e:bf:cb:75:
                    49:85:33:38:1f:09:b2:a0:05:19:32:39:c9:6e:ad:
                    9e:67:cd:85:95:f8:a3:e5:92:b0:03:e2:80:f0:57:
                    d6:e4:00:1b:d6:16:e6:c0:dd:ef:db:e0:22:d1:8c:
                    96:d0:6c:3a:75:08:e1:bd:61:bc:a5:d2:2c:e2:65:
                    fd:98:34:b8:31:29:60:ed:45:4f:0a:d8:af:74:ca:
                    55:6d:86:f4:9b:5e:dc:31:c0:28:fa:f5:c8:64:23:
                    83:ca:3f:3b:0d:73:20:57:86:9f:4d:88:53:4d:e5:
                    da:c2:7c:57:5a:0e:28:34:b7:f9:8e:45:9f:7a:ea:
                    a8:92:17:5f:31:62:a9:5e:7c:8a:b6:3d:76:48:bc:
                    d9:97:2a:03:46:c9:92:05:af:d7:88:51:23:9a:fc:
                    a4:45:9a:5e:a2:1e:af:32:9b:03:97:c5:60:a0:8f:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:93:F0:8D:C2:A6:4D:3B:5C:0A:D3:0F:5A:93:F3:8C:9C:0F:C2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5351a350-448a-36a9-8d00-9d85b2809e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:4e:1c:aa:73:5b:86:89:83:b2:71:18:6e:c8:5a:7a:4e:
         a9:b0:b2:19:76:af:9e:0e:2d:a3:44:e3:47:cd:8c:93:50:17:
         b1:18:03:bf:9f:48:36:2e:40:c4:44:9a:3e:43:d2:2c:e7:79:
         14:65:94:95:d0:15:c1:fa:64:14:73:9d:dc:46:d3:3d:35:80:
         7c:d8:99:25:8e:0f:03:ab:d4:29:1d:73:e1:55:68:33:ca:03:
         c9:79:d1:3a:60:2b:e1:1e:07:53:cc:31:92:b4:fb:8f:77:62:
         26:2c:d7:a9:a8:e5:4f:2f:d5:c3:56:fc:0a:dc:b3:f1:1f:c2:
         a0:24:f1:32:17:26:d1:6b:e6:db:85:3a:03:45:12:f7:5c:65:
         72:ce:6d:ec:27:09:de:6b:9d:72:09:10:b3:5d:73:03:34:54:
         97:dc:32:3b:7b:53:09:d8:8d:5e:86:d6:82:2d:73:b1:24:b5:
         92:22:09:b0:d3:38:90:2d:1b:b0:15:0b:e6:c8:d1:71:6d:26:
         3d:3d:02:83:36:54:ad:6e:35:7a:cf:c1:0c:85:60:32:53:dc:
         6f:e0:91:be:df:32:c1:ba:16:5f:a6:44:d7:25:0b:5f:b6:ef:
         1c:7d:62:d9:d6:b0:01:cd:7c:fa:d3:19:7e:f5:c0:a8:4e:d1:
         16:87:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:49 2026 by rpki-client