Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/815564f7-7544-333b-8ec6-06e117105673.roa
File:                     815564f7-7544-333b-8ec6-06e117105673.roa (raw, json)
Hash identifier:          ELFYBx1jvhA63hVjHuva8lmjbbFlASgBlN6fvQ3JEHY=
Subject key identifier:   13:7B:7F:F3:C0:03:8E:A5:96:75:A8:43:5C:66:51:6D:FF:B0:43:BB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA769FEC4CA982A9E704583C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/815564f7-7544-333b-8ec6-06e117105673.roa
Signing time:             Wed 29 Jul 2026 00:02:04 +0000
ROA not before:           Wed 29 Jul 2026 00:02:04 +0000
ROA not after:            Tue 27 Oct 2026 00:02:04 +0000
asID:                     834
IP address blocks:        64.204.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:69:fe:c4:ca:98:2a:9e:70:45:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 00:02:04 2026 GMT
            Not After : Oct 27 00:02:04 2026 GMT
        Subject: CN=a58ca00f-d18e-4063-a14f-74bee155c53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:83:b3:c4:dd:82:ee:ab:13:3b:a2:ce:25:
                    ae:f6:f8:ac:74:8d:de:62:c4:8f:ba:db:b5:86:7d:
                    42:4e:e9:17:e5:d7:c2:c9:d3:72:c9:d2:c5:ac:ef:
                    69:78:96:3e:6b:d7:7b:43:5c:23:76:21:da:30:33:
                    ac:ec:4d:5a:77:46:cb:59:c9:92:64:6b:dd:4b:72:
                    6f:bd:08:31:be:b1:7c:30:c8:85:ab:3a:d8:a0:be:
                    71:fd:7d:e9:ca:74:4c:01:1d:9b:e1:10:80:7d:b5:
                    e8:dc:56:a5:ba:81:f5:a5:cf:d8:7d:de:bf:66:af:
                    fc:c9:c0:30:b7:a9:b8:61:9f:d3:54:27:74:33:eb:
                    c6:85:93:69:64:14:15:29:51:2a:a7:68:65:e4:82:
                    06:e3:64:15:d2:58:91:8a:67:17:60:11:a0:5d:79:
                    d5:48:5b:6a:f2:e0:5a:f3:1e:f9:09:1b:d9:44:d5:
                    1f:ca:82:e4:c8:7b:2f:65:34:0b:78:c3:a1:23:a4:
                    37:1d:33:78:f1:46:83:c3:9f:b4:ab:39:8b:2b:cf:
                    b2:f3:d8:8e:30:db:ac:a2:4e:39:0c:83:0f:d6:60:
                    0f:f2:69:58:72:92:de:c0:9c:d5:47:d5:86:1e:80:
                    47:8a:78:9a:42:d3:32:8a:b9:ae:8c:82:77:3f:8a:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:7F:F3:C0:03:8E:A5:96:75:A8:43:5C:66:51:6D:FF:B0:43:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/815564f7-7544-333b-8ec6-06e117105673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b9:3a:1d:79:d8:e1:63:d4:68:22:1b:81:3a:fc:13:0c:21:
         b7:9b:12:69:63:11:05:ef:24:25:47:61:7d:d0:af:c5:ad:df:
         b7:1b:c6:5f:4d:44:aa:a8:65:34:a9:59:ce:93:f7:cb:db:fb:
         5f:47:77:76:c0:0c:f1:c8:d9:24:2c:e3:b1:72:17:0a:43:e7:
         f9:31:d2:f7:dd:9b:46:97:26:73:fd:e3:87:90:99:3d:50:5a:
         93:69:da:68:dc:90:4f:fe:4b:9c:64:f7:52:94:81:9b:c3:f0:
         00:ba:09:0a:4a:64:71:33:62:3f:b1:a3:bc:22:cc:1e:13:eb:
         b6:a3:b6:4a:86:47:82:dc:6a:0a:a1:8d:47:cb:90:a7:57:59:
         b3:16:28:ac:59:4b:1a:e1:be:9d:23:b3:8c:4d:e3:5e:91:10:
         96:f1:4d:c6:6a:12:ba:e0:2a:ed:62:84:9a:41:d0:ed:ec:54:
         13:b3:98:67:7c:d3:9a:3d:6e:a6:9d:b3:67:59:4e:2a:e7:89:
         8f:fd:66:44:62:f5:ae:f2:46:a0:a8:d4:bf:70:51:f8:ce:30:
         de:d0:44:cf:74:b5:7d:73:5d:65:a2:07:ac:72:67:a4:03:2a:
         82:c5:5e:61:24:ee:6a:0c:5b:2d:04:75:05:1b:6e:09:35:e3:
         46:07:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:36:38 2026 by rpki-client