Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9a562c8-535c-3e46-b327-a200951234bb.roa
File:                     d9a562c8-535c-3e46-b327-a200951234bb.roa (raw, json)
Hash identifier:          5EWfvI9DTNlsuf+lT1E7M0+2bXlQzzA+Sz91lnqJZGM=
Subject key identifier:   6E:7A:2E:1A:78:06:5E:77:5B:F2:8C:58:38:8E:A8:65:44:DB:31:69
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E9CF863F16984DC08FB05ED00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9a562c8-535c-3e46-b327-a200951234bb.roa
Signing time:             Sat 25 Jul 2026 06:15:05 +0000
ROA not before:           Sat 25 Jul 2026 06:15:05 +0000
ROA not after:            Fri 23 Oct 2026 06:15:05 +0000
asID:                     7029
IP address blocks:        64.204.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9c:f8:63:f1:69:84:dc:08:fb:05:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 25 06:15:05 2026 GMT
            Not After : Oct 23 06:15:05 2026 GMT
        Subject: CN=6289b1cf-c7b8-4491-a65d-03a7ef8781ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:aa:a3:73:d4:d0:9f:28:f8:3f:d6:8c:1b:
                    fa:5f:85:c8:74:66:04:53:ec:e5:f3:97:08:84:2c:
                    58:3e:19:12:be:cd:37:32:05:14:d4:e2:06:55:70:
                    fd:fc:e5:7b:62:09:7e:30:bd:dd:a1:f4:77:4e:6c:
                    fd:46:2b:13:39:8c:4a:0a:06:94:eb:62:2d:10:15:
                    63:fe:df:71:46:84:1a:88:c0:cb:37:63:76:69:b2:
                    f5:6c:dd:48:62:f9:95:0a:cd:fa:94:f2:1e:ed:93:
                    c6:7e:62:6e:0e:31:8e:9f:1e:24:02:15:b1:02:d8:
                    06:43:c9:9a:ee:15:08:4a:4a:e9:5b:6c:92:c2:02:
                    73:7b:4e:7f:92:a2:30:ad:64:9b:fa:25:4f:09:dd:
                    97:db:c3:e8:a8:b2:2e:33:5e:d6:f3:c5:ff:dc:06:
                    01:a0:45:cd:16:1c:9c:c1:11:92:bb:f3:07:18:9e:
                    02:91:1d:35:b9:dd:11:2d:89:18:1d:6c:db:03:23:
                    f2:ac:d9:56:6f:2b:ff:46:6e:fe:b2:82:0b:11:0e:
                    39:bb:ba:74:5c:be:fd:b3:e0:91:a7:ea:06:8d:df:
                    27:92:93:8b:56:5c:22:23:f0:16:5d:2b:f1:49:5a:
                    49:f9:0e:1c:12:c8:7d:cb:c1:04:48:c6:72:ec:04:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:2E:1A:78:06:5E:77:5B:F2:8C:58:38:8E:A8:65:44:DB:31:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d9a562c8-535c-3e46-b327-a200951234bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:10:be:7d:8c:2c:64:57:6e:ec:49:e8:e1:9e:d0:64:0f:
         96:08:56:58:2f:88:c1:f6:fc:83:c7:3d:87:d3:05:4f:ae:c8:
         97:8b:80:ac:c3:32:c0:b6:c4:35:7f:26:e1:d5:d1:23:3a:97:
         ed:1a:64:e6:4b:c8:74:48:46:d7:78:46:65:0c:e5:7e:7a:14:
         47:4a:76:55:88:50:4f:72:c5:ef:52:03:3e:58:e1:09:4e:e5:
         da:7f:67:b5:07:a2:fa:c9:8f:c2:15:a9:95:a0:88:dc:9f:b6:
         99:cf:08:48:08:96:6f:ce:0c:72:9b:3f:5a:67:10:ef:bb:00:
         71:7a:ed:5a:b7:45:3b:50:e3:b4:94:71:a7:4e:85:1d:b9:07:
         f2:9f:18:9c:aa:3f:1f:2f:ac:41:90:82:00:11:fc:03:e9:2c:
         2e:c2:9d:48:39:e4:45:dd:2d:89:98:18:d9:f5:8b:68:c2:d5:
         d7:e7:9a:a6:e3:96:1c:8e:c0:b7:44:e1:6d:ce:2a:62:07:29:
         8f:b8:96:c5:f2:a0:38:14:6b:8f:dc:eb:ca:bf:f3:8f:86:0e:
         f5:f8:e9:99:07:2c:00:12:60:b8:4d:91:f2:a6:b7:7d:2b:d6:
         4c:1b:28:8f:58:be:0f:3b:6b:bb:e6:11:92:f1:22:ef:ec:d2:
         95:12:7f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:08:36 2026 by rpki-client