Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/937c7704-d12e-3d6b-8e9e-f748c0a3c7f3.roa
File:                     937c7704-d12e-3d6b-8e9e-f748c0a3c7f3.roa (raw, json)
Hash identifier:          sZ/1QAgtKFcnQ5OA5Du+J3CmOBNYfOtlUEp7fc2p2mY=
Subject key identifier:   1D:98:99:3F:34:B7:92:4F:97:45:69:97:44:22:AD:04:0F:7B:86:78
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7B6A9CE70FD8590A9D261F80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/937c7704-d12e-3d6b-8e9e-f748c0a3c7f3.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     6079
IP address blocks:        65.86.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:9c:e7:0f:d8:59:0a:9d:26:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=71927e52-a1c0-4c2d-a83c-ce554337eb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:80:ae:7f:14:d6:02:62:9b:d0:e4:17:75:
                    1b:99:85:16:1f:1d:d7:38:85:a0:69:fd:cd:68:4d:
                    50:45:86:84:40:b4:9f:13:26:47:3c:4c:36:da:15:
                    85:82:e3:21:1b:8e:7d:6c:a0:6f:a7:91:da:f8:77:
                    c0:7a:3a:0b:87:17:33:f1:db:cb:de:67:a2:78:0c:
                    65:13:32:91:a8:08:3c:17:e7:ba:f5:c2:71:51:35:
                    c7:04:d7:4b:cf:6b:db:e4:63:00:f1:12:47:af:67:
                    fb:ed:0a:06:95:89:65:a1:fd:35:d7:00:4b:2b:2b:
                    d8:cd:7c:da:e1:ee:dc:9b:ef:4d:88:96:d5:9a:d3:
                    52:e1:c2:ac:71:0e:2c:56:e3:4f:6b:ed:4c:a9:d1:
                    f6:36:2e:a5:a3:1b:5a:de:e0:22:1a:fa:38:31:05:
                    34:0f:10:be:96:06:be:3f:6c:c9:e6:e6:99:ab:d6:
                    47:68:46:c1:a9:e5:83:37:cd:e8:08:05:11:4e:b0:
                    2f:61:45:e6:54:87:fd:fd:8a:22:25:f0:69:37:19:
                    28:1c:30:6d:b2:cd:44:6f:7f:7c:83:29:1e:08:1e:
                    81:98:e1:62:3e:c8:c1:5a:34:85:9f:55:4f:cb:7d:
                    99:80:32:00:f4:ce:5e:2e:fb:f9:21:1d:af:de:d7:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:98:99:3F:34:B7:92:4F:97:45:69:97:44:22:AD:04:0F:7B:86:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/937c7704-d12e-3d6b-8e9e-f748c0a3c7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:dd:0f:c1:bf:d0:e8:a4:27:20:74:a5:b2:87:64:4c:ea:
         6c:d9:0b:ae:16:fc:6f:20:bc:f5:a7:ca:9d:79:ac:0b:83:c0:
         cd:64:c0:84:ca:21:3e:17:90:a1:a9:08:e5:5c:72:ae:53:75:
         46:11:0a:f1:3e:0f:08:a9:a7:a6:2b:79:20:93:d9:df:c0:5c:
         dd:8a:27:2e:38:04:1f:39:f4:0d:83:26:34:70:4b:b3:55:9f:
         8c:26:55:b4:62:6c:59:18:af:88:92:6d:a9:71:cc:16:87:87:
         d3:d6:a5:07:24:e7:87:8c:c8:af:8d:49:2b:02:a6:97:56:6a:
         87:0d:fd:1f:79:72:0d:29:cb:83:b3:cc:e7:5e:c7:d9:f1:83:
         e4:fa:18:26:38:f7:13:cd:f0:cc:03:ac:c9:7e:9c:ed:f8:33:
         9a:1f:8b:1d:99:59:f5:c3:e0:0c:7f:c2:85:0c:38:22:8b:88:
         f0:c7:0c:36:41:69:31:b4:3a:48:2c:c2:7d:18:fe:ca:98:6f:
         f3:b5:4e:a0:9d:0b:94:6c:a3:47:2b:1b:9e:c8:bf:e2:da:5a:
         85:54:ad:ae:78:3f:89:8b:a0:86:d9:0c:37:e7:70:f6:25:ee:
         fe:1c:b2:66:c2:67:4c:5e:3d:ae:b5:e7:e8:8c:65:ca:e6:87:
         79:3a:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:28 2026 by rpki-client