Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/79569e74-4d91-3462-b8ff-529fd4a97208.roa
File:                     79569e74-4d91-3462-b8ff-529fd4a97208.roa (raw, json)
Hash identifier:          7Mh17y8LHuWTxfnnvRfkpOoXOGLXACQIT5fS0Mz6xww=
Subject key identifier:   AE:65:18:9F:44:54:CA:A6:2F:B4:AA:78:B4:C3:10:38:E4:08:6F:DD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D85DF4F8C2819F17627152AA0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/79569e74-4d91-3462-b8ff-529fd4a97208.roa
Signing time:             Thu 16 Apr 2026 06:54:02 +0000
ROA not before:           Thu 16 Apr 2026 06:54:02 +0000
ROA not after:            Wed 15 Jul 2026 06:54:02 +0000
asID:                     402215
IP address blocks:        64.204.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:df:4f:8c:28:19:f1:76:27:15:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 16 06:54:02 2026 GMT
            Not After : Jul 15 06:54:02 2026 GMT
        Subject: CN=d70c5039-1445-4eb1-8f9e-755f49fc97e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:65:7c:75:24:4c:33:26:f9:b6:de:e9:89:
                    df:43:ad:e3:05:5b:93:f1:53:23:7c:9e:fc:c9:cd:
                    61:35:c1:4c:f7:8e:c8:58:37:03:3e:15:d0:bc:03:
                    31:e4:44:57:8d:a6:03:16:45:4b:64:65:a5:95:65:
                    66:09:ae:09:b8:1f:ce:a2:6d:73:5b:68:72:96:12:
                    55:15:0c:9b:ea:44:5e:bc:77:c7:5f:d0:42:57:d5:
                    8f:90:b2:cd:2a:af:07:b1:e6:25:a6:5d:29:8a:93:
                    5f:a5:d8:e4:12:26:5a:60:38:be:55:d0:67:2a:b3:
                    3b:85:74:f3:fc:d2:fb:e3:5d:e9:b4:3d:7a:e3:9f:
                    f3:fe:2d:8c:d5:51:ae:cb:65:46:ac:96:66:ec:81:
                    9d:7e:52:b0:6f:5f:28:28:20:77:1f:0f:fd:9b:d5:
                    d7:c1:f1:b7:fe:c3:f5:3a:5a:74:ab:39:6c:01:38:
                    a1:90:c6:27:bf:26:80:8b:7d:05:97:41:40:9c:2e:
                    e3:36:95:a5:0a:7a:ba:0b:7d:95:a9:02:aa:03:10:
                    13:52:63:a5:69:82:e4:df:ba:d9:ab:73:46:ec:91:
                    c9:16:c9:6a:90:f5:42:be:2c:98:83:53:be:70:df:
                    19:bf:eb:b0:ce:47:8f:22:a7:de:bf:c1:ac:0b:20:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:18:9F:44:54:CA:A6:2F:B4:AA:78:B4:C3:10:38:E4:08:6F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/79569e74-4d91-3462-b8ff-529fd4a97208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:98:96:fd:6c:33:73:fc:da:f1:c4:2c:13:d9:d5:b7:12:99:
         a8:92:12:a2:57:7e:30:da:49:06:3c:a5:d2:03:36:81:fd:86:
         d9:62:59:15:2e:64:31:c9:3b:b2:1a:05:d4:6f:a4:37:e8:f4:
         8a:93:06:92:09:4b:30:d8:5f:8e:25:1f:e6:a2:62:df:8e:5f:
         51:ed:57:60:0c:27:0d:86:a3:26:a5:37:80:a6:2b:a7:8b:70:
         ea:8c:0e:a4:7a:54:db:6f:bd:a3:e5:d3:be:c6:8b:ab:af:3f:
         98:a9:57:3a:f4:29:d2:ce:df:ff:c4:33:90:43:db:c0:ac:2d:
         ca:46:a5:0b:6f:d1:e1:e5:89:a4:cd:df:e9:ca:6d:92:60:ee:
         af:4c:f7:0d:98:43:ec:65:c7:50:a7:bd:81:a8:d7:da:d4:9a:
         8c:05:cf:5b:f0:02:f3:c5:06:c0:e5:ec:59:13:ea:7c:6d:37:
         b2:2d:42:5e:9a:41:03:70:f7:16:91:af:ab:b1:bf:6a:ab:49:
         7a:4b:4b:b8:7e:3c:d0:42:41:26:ad:46:1f:9e:92:14:a8:29:
         ee:36:e8:70:70:26:c9:e9:d2:14:3c:55:6a:97:e9:8a:cf:66:
         82:c8:f2:d0:5e:9d:1a:5b:16:4a:18:87:d3:0e:fd:dd:a1:57:
         3e:62:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:44 2026 by rpki-client