Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d72d88cb-457e-3121-95d3-1b016b60e13e.roa
File:                     d72d88cb-457e-3121-95d3-1b016b60e13e.roa (raw, json)
Hash identifier:          yNiYKIVLBL/kfJYs7wqWY+ebOB2KQImhvNi9NPe7CGY=
Subject key identifier:   5E:A3:86:C8:F4:F2:FE:FA:89:D9:3A:97:F4:0E:83:D6:5A:96:41:F4
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E23D996CBDEB0E9790F7D9140
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d72d88cb-457e-3121-95d3-1b016b60e13e.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     834
IP address blocks:        64.205.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:96:cb:de:b0:e9:79:0f:7d:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=7a3f9b70-9397-4d85-8e19-158358bd5cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:8c:98:0d:a5:0b:f0:58:c8:20:3b:52:a7:
                    c7:42:c7:9e:55:7d:3b:5b:d4:28:47:02:fa:79:20:
                    96:ad:ba:51:43:bb:ee:37:ca:df:9e:b2:0c:51:37:
                    5b:d8:6e:1b:bd:a9:f5:5e:bd:83:86:c9:88:50:70:
                    c7:f5:e9:76:ac:fb:11:7f:70:ef:9a:59:93:4a:64:
                    01:31:f6:d6:8f:f9:6f:29:08:c9:7e:57:90:7e:6f:
                    b3:3d:b0:74:f0:a6:96:2a:17:7f:f2:df:17:42:61:
                    d4:c4:6b:0c:4c:fa:0b:3c:73:7b:8f:b3:96:07:06:
                    2b:68:e6:4c:0d:fd:d6:91:90:a6:3c:ef:a0:12:14:
                    cb:23:76:e5:d4:22:6b:58:75:de:ad:d5:33:72:94:
                    0e:79:aa:b7:62:7e:66:90:82:7a:6f:39:28:49:58:
                    30:7b:95:de:50:ed:4b:c7:a7:ac:20:e9:b9:cd:3c:
                    12:af:dc:79:15:63:58:b6:30:27:3e:b8:ac:c0:e9:
                    fd:f7:99:b1:21:41:80:d3:27:e0:8f:43:d6:4e:a3:
                    81:d5:31:b1:e5:a3:bc:e3:2d:56:2b:4e:67:40:48:
                    e8:37:4d:e5:b1:bf:49:98:e6:8c:d5:d6:57:be:e2:
                    58:d2:92:52:f8:d5:33:0c:52:1e:6c:f0:b5:f7:c8:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:86:C8:F4:F2:FE:FA:89:D9:3A:97:F4:0E:83:D6:5A:96:41:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d72d88cb-457e-3121-95d3-1b016b60e13e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:63:1c:b4:a5:24:9b:5a:47:b6:41:0a:07:ac:5d:8d:42:
         33:eb:66:ae:07:6a:c4:12:1c:58:9a:94:31:c8:dd:d3:6e:0b:
         60:e2:f8:81:27:ca:dd:21:18:15:b8:a3:72:15:cf:d8:ae:7e:
         0b:1a:af:9d:f8:6e:01:a2:76:f9:fe:0d:c2:ac:6e:1e:1c:61:
         a7:2a:44:3b:de:ef:ce:35:64:e6:3d:03:cb:5b:26:d2:2c:67:
         2f:85:98:55:57:ad:de:3a:4e:12:40:0e:f5:3b:10:24:8f:18:
         40:04:c8:33:18:ed:d7:a4:72:6f:cd:24:a0:65:2d:03:5e:84:
         17:24:52:d9:25:39:d7:11:26:79:d5:90:d2:ad:16:b8:94:05:
         2f:44:b0:3d:6a:ce:38:ba:58:5c:e5:77:77:5a:23:fe:b0:e2:
         9e:f3:59:85:24:81:47:11:c5:91:76:9f:fa:b4:c6:39:15:d7:
         31:40:09:23:f3:07:c2:dc:c4:15:c2:32:e0:bd:5b:c5:f0:76:
         d0:f5:63:5f:b2:87:15:4e:5f:58:fc:09:33:74:cf:3f:eb:49:
         2e:f5:3c:4b:f7:32:9f:3a:18:0d:9d:35:f5:67:67:2c:71:e7:
         74:fb:aa:9b:dd:90:80:be:cd:c2:fc:e0:14:bb:67:5a:8e:25:
         63:dc:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:56 2026 by rpki-client