Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60a6379a-9485-3531-8cf3-9435d02de644.roa
File:                     60a6379a-9485-3531-8cf3-9435d02de644.roa (raw, json)
Hash identifier:          4J3FlhINHYIN1Q0aHK7SA4O/WrLUS89iWfWl30LKpwo=
Subject key identifier:   99:45:E3:D8:9E:52:DD:87:05:52:66:05:12:B4:3A:D2:0D:49:FA:9F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F7A5032BEA2E464F20420FA00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60a6379a-9485-3531-8cf3-9435d02de644.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     212238
IP address blocks:        64.204.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:32:be:a2:e4:64:f2:04:20:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=f55c07a3-0d5e-4412-bbe1-1f00c7e4dcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:ea:4a:4a:ff:9a:0d:86:48:9c:77:8b:21:
                    0c:78:84:ce:91:3e:7f:6d:8d:01:a5:a2:f9:f8:3e:
                    3f:cb:4f:7b:57:74:df:0b:82:d0:85:36:fe:2a:5b:
                    56:79:8f:d1:1f:c9:16:08:c2:f2:79:b5:a8:e0:4c:
                    95:04:77:bd:2b:a7:8c:c2:74:c8:2b:af:db:f9:e9:
                    d4:30:e1:dd:49:59:b8:de:38:07:99:91:4a:87:22:
                    26:e0:49:dd:0e:c6:c7:87:59:4d:4a:6b:49:51:6a:
                    b2:0d:26:9e:2d:80:6e:83:fd:b4:52:ae:43:ef:ce:
                    2b:bc:00:6c:85:8e:2f:8c:d6:4a:ca:48:6f:ba:b5:
                    2a:93:2c:43:2d:1b:60:ba:63:cd:da:c1:14:58:00:
                    de:80:63:b0:8e:e4:f2:de:41:05:d5:4d:4d:10:4d:
                    f9:ee:b1:97:dc:47:ce:e0:8d:1f:8a:57:68:78:c3:
                    ec:fa:ae:8d:50:9c:10:86:01:77:b3:b0:fa:4a:1b:
                    e4:03:f8:2e:52:85:3b:73:9d:7a:5c:2d:5d:17:46:
                    f0:21:c5:52:2b:54:91:1f:a2:2a:ea:00:32:e4:69:
                    dc:0d:37:0a:5b:7f:50:26:20:50:51:3a:45:2b:57:
                    54:01:d5:a6:8a:cd:a8:69:b6:26:58:f3:d4:2e:d6:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:45:E3:D8:9E:52:DD:87:05:52:66:05:12:B4:3A:D2:0D:49:FA:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/60a6379a-9485-3531-8cf3-9435d02de644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:b2:cb:31:d6:19:7f:2a:74:85:9a:c7:ce:de:be:ab:3f:
         e9:ff:69:cf:86:4d:9d:a0:6e:b7:8f:5f:ab:b7:2f:fd:67:fa:
         af:62:96:53:2d:a8:3e:47:c3:a7:bc:c5:82:e3:b2:c1:81:0f:
         07:a6:67:8d:fe:58:b9:83:12:5b:6c:ee:29:da:f6:5b:66:34:
         43:0b:c9:b1:85:35:6c:eb:be:94:ea:ab:13:fe:07:5a:b5:61:
         6f:65:59:28:4d:52:18:e3:63:24:6f:8a:96:a8:51:19:d9:2b:
         09:ac:01:0f:c1:f8:68:b0:fb:9e:32:ea:02:16:cd:fd:d5:53:
         8a:3f:71:3c:df:84:f4:1a:46:1e:ba:78:bf:39:66:b8:2e:dc:
         b8:eb:88:da:44:be:65:b6:06:b8:6e:4b:56:35:be:7b:de:ae:
         22:19:0b:1f:d2:d4:64:4b:b3:43:5f:b1:33:f6:7f:6d:7c:7d:
         9a:53:e3:91:01:37:9d:06:c2:99:47:26:eb:bd:ba:f9:69:46:
         68:0b:f7:c6:23:d0:5c:26:32:27:ce:0b:f1:a8:c0:c4:d0:49:
         67:e5:1a:a7:4c:d6:85:d7:ac:0e:82:00:f2:c3:4c:bd:a3:9e:
         f4:73:eb:7f:6f:15:99:21:25:2f:72:3f:4a:96:57:b0:4d:e5:
         56:29:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:23:48 2026 by rpki-client