Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af3f9b53-0ed8-328f-a1a9-ef61216eb7b7.roa
File:                     af3f9b53-0ed8-328f-a1a9-ef61216eb7b7.roa (raw, json)
Hash identifier:          PkaizmkF11MNWPBGHGT5PvmFXTm2octQZ3g3/NVv754=
Subject key identifier:   DC:E1:85:7B:5E:3F:14:A4:49:89:35:C3:7F:ED:1F:0D:69:DD:D6:43
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5BB84B38BB226ED95F9F6D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af3f9b53-0ed8-328f-a1a9-ef61216eb7b7.roa
Signing time:             Thu 01 Oct 2026 14:05:20 +0000
ROA not before:           Thu 01 Oct 2026 14:05:20 +0000
ROA not after:            Wed 30 Dec 2026 15:05:20 +0000
asID:                     6079
IP address blocks:        64.205.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:b8:4b:38:bb:22:6e:d9:5f:9f:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  1 14:05:20 2026 GMT
            Not After : Dec 30 15:05:20 2026 GMT
        Subject: CN=0dc8c942-efc3-4bbf-9fbc-c1c3f7021183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:5d:1b:38:15:7b:b2:7c:64:2f:ea:32:1a:
                    90:58:09:4d:57:d0:01:76:51:68:ec:ce:60:c5:8a:
                    76:6e:84:a0:1e:e0:f2:eb:5e:32:72:10:66:63:df:
                    36:27:c3:6f:ff:72:5f:4c:f3:58:1b:62:bd:fe:4c:
                    90:fa:68:f7:83:a2:d0:d7:ab:99:ec:40:e8:0f:91:
                    e6:73:fc:8f:8e:2d:1c:12:9f:ee:fe:18:45:e6:32:
                    24:ab:37:bd:57:2d:63:57:dc:86:e6:01:2d:ee:57:
                    c5:c8:46:2b:5f:7d:71:31:d7:cb:d4:2d:d6:37:33:
                    0a:bb:65:00:e5:cc:70:0c:6e:34:64:70:28:36:09:
                    7a:e4:77:e3:1d:1e:fe:45:cc:4c:3b:d9:4a:ba:13:
                    5a:71:fc:93:fe:98:a4:15:a7:99:2a:5a:14:41:96:
                    95:e3:b0:a7:31:ab:29:96:54:00:7d:93:cc:df:f0:
                    22:86:c2:02:1f:99:be:60:6f:b2:a2:58:36:a6:11:
                    66:de:29:66:cc:c9:b0:e8:9d:ad:e5:29:89:ba:0f:
                    20:70:a6:a8:7a:1a:67:54:cd:58:5f:cd:f6:d3:68:
                    66:c9:aa:97:16:c9:38:f8:9d:8c:0b:8d:c5:9e:48:
                    66:7d:8a:ba:6e:2b:54:21:fb:0e:ef:75:e0:26:f1:
                    83:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:85:7B:5E:3F:14:A4:49:89:35:C3:7F:ED:1F:0D:69:DD:D6:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af3f9b53-0ed8-328f-a1a9-ef61216eb7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:02:7f:ce:15:f2:0e:99:ed:51:61:83:73:27:8e:4d:a1:
         2c:3a:56:f5:7a:7e:5b:f4:7d:30:d1:4c:58:c8:2c:e5:10:f7:
         91:71:71:5e:58:96:db:5d:b4:f4:7c:85:55:90:6c:51:24:53:
         84:6c:71:fd:20:9c:8a:aa:7f:8e:6b:b3:5a:71:79:39:51:3d:
         53:29:60:fa:36:63:42:4e:c0:32:04:f4:c9:ee:70:42:22:fc:
         37:00:67:b6:1f:eb:5e:27:98:92:af:50:6d:e9:2e:e4:9b:9a:
         b6:b5:9e:aa:39:2d:5b:92:2c:6f:6f:6a:72:56:b9:53:1f:81:
         db:90:d5:c5:28:54:95:63:c8:1f:4a:e6:c9:c5:01:37:12:6c:
         1e:d7:e5:81:eb:dd:68:75:9a:38:a3:49:f2:9e:1c:86:af:da:
         78:c8:4d:ac:51:85:be:ae:fe:5e:02:ac:a8:00:7a:ec:28:5a:
         6a:8d:b4:80:64:4d:a0:cf:ac:6f:88:06:d4:eb:bf:f9:dc:a6:
         ba:e3:23:84:23:f7:c6:5c:ea:1c:4d:f0:36:6d:44:e4:1a:17:
         23:49:cd:ae:b4:6a:1f:7b:9c:af:e7:1c:eb:b3:a5:f7:c8:07:
         37:44:92:fe:a8:86:b0:4f:d2:44:40:32:0c:dd:e9:1d:ea:fa:
         86:cb:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:38:13 2026 by rpki-client