Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/defe53a2-506f-3a94-a843-062bb34cfaa9.roa
File:                     defe53a2-506f-3a94-a843-062bb34cfaa9.roa (raw, json)
Hash identifier:          3yHQwUu9S2x4L/bsUFEcxeg/eJRSsaIVmuzvNNTvtDQ=
Subject key identifier:   05:15:42:9E:60:8B:5B:F5:40:F6:78:6A:FC:A4:7C:23:8D:93:87:6F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6DA0BE090D707DDD545E0C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/defe53a2-506f-3a94-a843-062bb34cfaa9.roa
Signing time:             Thu 08 Oct 2026 00:02:26 +0000
ROA not before:           Thu 08 Oct 2026 00:02:26 +0000
ROA not after:            Wed 06 Jan 2027 01:02:26 +0000
asID:                     834
IP address blocks:        64.204.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:a0:be:09:0d:70:7d:dd:54:5e:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  8 00:02:26 2026 GMT
            Not After : Jan  6 01:02:26 2027 GMT
        Subject: CN=61973779-3476-46c6-85e3-1af07adc1de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:a3:5e:7a:e7:a3:f8:ec:f2:75:72:5f:b2:
                    07:51:4d:4a:b9:f2:6b:ce:26:36:9a:23:ae:29:1e:
                    37:7b:34:12:e4:b3:1c:cf:7e:a6:f4:e4:5e:39:e7:
                    37:44:76:8d:5e:f7:a2:be:e8:51:4c:e8:58:14:0d:
                    ce:1a:c1:fe:a8:b2:26:95:38:5a:a0:1c:0a:6d:00:
                    64:d1:64:80:9e:d6:bb:e7:07:c7:a1:a9:bb:35:4a:
                    4b:5b:c5:1f:56:2c:d9:9a:4a:a2:e9:a2:27:42:56:
                    0b:72:df:59:91:83:d1:e0:31:df:2e:10:aa:70:db:
                    2d:45:96:5a:e5:3d:56:b3:5e:79:2a:69:1b:e6:a6:
                    bc:32:15:eb:33:bc:27:ca:45:fe:60:ef:a4:23:62:
                    91:01:11:a5:59:b5:35:c7:44:36:44:5f:c5:21:f9:
                    9e:f0:4c:76:8e:e7:55:e8:6d:82:c1:75:cb:16:88:
                    fe:27:7b:72:78:b2:41:ef:82:be:6c:df:9e:fd:05:
                    60:1f:aa:bd:94:65:95:5a:f9:7c:7e:f4:e7:6b:6c:
                    f4:8a:c0:b9:60:a9:e6:f1:5b:9b:77:2d:4e:f4:e8:
                    7f:ea:cc:54:3b:91:64:b6:fb:8e:dd:a8:34:2d:d6:
                    c9:2e:10:90:31:0d:2d:85:fe:29:8b:15:dc:88:c0:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:42:9E:60:8B:5B:F5:40:F6:78:6A:FC:A4:7C:23:8D:93:87:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/defe53a2-506f-3a94-a843-062bb34cfaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f0:e8:b5:53:a9:14:a8:ee:b5:10:17:46:ba:98:73:c8:13:
         be:e5:bc:f0:92:d8:09:fc:de:23:65:7a:1b:52:17:60:00:aa:
         59:7b:7e:8c:f1:21:06:31:80:e8:f3:ba:33:68:d2:9c:bd:3e:
         d3:8e:0e:cb:d2:1e:ae:9e:1e:e7:c1:38:95:da:9a:0f:d6:47:
         51:89:10:b7:f6:92:7a:2c:da:e9:71:63:17:a3:0b:0f:c6:ce:
         b9:4b:77:1f:43:40:52:b3:0b:07:f4:22:49:4e:6c:89:8e:e2:
         e8:b2:38:d4:1d:8f:3a:5e:1a:36:ee:86:18:36:7f:d2:18:5b:
         f9:f0:e7:71:f1:1b:51:b7:5c:84:71:90:76:19:32:24:b9:ef:
         9c:b0:d2:0f:9b:d3:0a:3c:fa:08:5b:47:99:69:e8:e6:6c:bd:
         fa:fb:65:e7:08:38:64:38:7a:35:18:ff:f7:fe:73:57:c6:19:
         29:20:97:29:aa:15:b4:c6:b8:80:7c:ef:2c:1f:05:27:28:a6:
         1a:c1:55:c9:50:a5:4f:96:3b:1a:5f:13:9b:e2:a7:2e:1f:d6:
         e3:51:c2:e2:5f:10:2d:b8:ab:9a:2b:47:75:5a:5a:81:8a:d8:
         53:a3:b3:d9:36:7f:1b:63:89:6a:d3:ff:5f:7a:91:74:1e:79:
         15:dd:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:27:42 2026 by rpki-client