Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6ddd97e9-aa08-331c-a7c9-1c043fab02be.roa
File:                     6ddd97e9-aa08-331c-a7c9-1c043fab02be.roa (raw, json)
Hash identifier:          hiRplIdey9Tp5Y5qqho6T388+R7Nwo5O/+xPnqJS6F8=
Subject key identifier:   FE:83:5D:A9:CE:7B:1A:88:40:CE:BD:CF:45:AB:ED:D4:64:BB:88:96
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5F7FB32465D870F4251D2C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6ddd97e9-aa08-331c-a7c9-1c043fab02be.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     55201
IP address blocks:        64.204.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:b3:24:65:d8:70:f4:25:1d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=11836afb-9851-469b-8361-dea7a26c5af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:8c:c4:cb:35:79:eb:7f:42:7a:7e:fa:5b:48:
                    b5:1e:31:c0:db:ee:de:73:d2:94:8b:23:64:b8:76:
                    66:26:e8:97:0a:e2:7d:c8:ce:eb:85:a1:7b:65:91:
                    c9:27:45:49:6e:cf:c8:39:e1:c2:ef:b6:0e:94:f9:
                    76:c6:62:bc:45:b7:26:d7:76:47:52:c5:a1:0f:9c:
                    7c:4b:f9:46:7f:0d:35:bb:e0:10:61:8e:24:d7:60:
                    e4:ed:44:ef:4e:b0:94:35:2d:08:81:a1:de:27:69:
                    0c:c1:84:d3:1a:34:8a:0c:20:4b:8f:7f:3c:23:31:
                    00:72:63:cd:7b:55:7d:76:c0:df:6c:df:5f:3c:c6:
                    e3:3b:54:48:db:cd:09:98:64:e5:df:45:cb:8d:ea:
                    48:7f:73:16:45:41:4f:fb:7d:a4:b2:0a:69:3f:e4:
                    a8:a3:4c:bf:10:4b:d1:df:c5:05:fd:02:c6:ed:ff:
                    81:ce:d5:ec:4f:bb:18:7f:59:6b:e9:cf:2e:bf:9c:
                    c1:19:45:d3:7f:98:7c:d7:38:fe:84:ea:31:f8:15:
                    13:a4:bf:3b:37:e4:b5:c9:46:f4:e6:39:b5:bc:aa:
                    43:7c:d9:de:64:a6:37:df:95:5c:2b:95:a7:23:ec:
                    32:ab:c4:7d:e2:5b:f4:1e:0a:d8:6a:bf:b2:32:e7:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:83:5D:A9:CE:7B:1A:88:40:CE:BD:CF:45:AB:ED:D4:64:BB:88:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6ddd97e9-aa08-331c-a7c9-1c043fab02be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:72:6c:92:42:b6:4e:59:70:7c:b0:8d:7d:f2:d9:eb:6f:
         67:98:de:53:5f:33:83:ac:af:bf:b2:e3:7f:e5:45:44:8a:31:
         77:0a:74:4b:b7:67:0b:a2:f4:ed:60:de:ef:cd:c6:c8:cc:e8:
         d2:9e:d7:95:6c:30:db:a7:a2:bd:06:78:11:5c:02:77:25:cb:
         f3:de:f9:45:ce:32:e9:3e:96:c8:fc:7c:07:ac:bf:04:76:9c:
         e6:74:5b:b2:a4:62:e3:2a:22:99:5d:ad:9d:4b:c2:5d:0f:ad:
         ec:13:4f:0a:9e:71:b3:12:91:a2:15:3f:e3:9b:61:d1:47:6d:
         b2:98:19:a8:49:cb:cb:c6:b6:3d:75:bd:24:76:06:4a:71:af:
         76:d7:58:06:58:54:f4:aa:18:21:49:da:15:2e:b6:0d:97:17:
         33:97:a2:42:17:f0:36:d7:20:db:cf:2f:f4:84:79:c2:ca:c4:
         06:44:93:a5:d5:db:be:ff:fd:64:41:15:ca:a0:59:e1:89:13:
         31:98:3f:d8:a0:e7:6b:1b:dc:c6:ca:1d:38:00:a6:40:ee:38:
         07:bc:3b:6d:11:9d:44:5d:f1:fb:da:e3:d6:aa:fd:22:00:df:
         8c:a7:e4:a5:82:bd:75:99:8e:7e:ab:40:1f:14:8a:83:c9:55:
         24:41:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:53 2026 by rpki-client