Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4353bb7-9c4d-3d35-8302-ad289dea4797.roa
File:                     e4353bb7-9c4d-3d35-8302-ad289dea4797.roa (raw, json)
Hash identifier:          kv9RgCl4oQXNtH39Aj+oc7RIJyjEeTpTBdPrm+IX/Ks=
Subject key identifier:   18:C8:A6:C3:2B:31:06:EF:50:D3:AD:0B:B1:7A:50:B1:5F:F7:A2:5B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3A211B8467F99FBF3DE83BC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4353bb7-9c4d-3d35-8302-ad289dea4797.roa
Signing time:             Sat 19 Sep 2026 13:19:02 +0000
ROA not before:           Sat 19 Sep 2026 13:19:02 +0000
ROA not after:            Fri 18 Dec 2026 14:19:02 +0000
asID:                     834
IP address blocks:        64.204.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:21:1b:84:67:f9:9f:bf:3d:e8:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 19 13:19:02 2026 GMT
            Not After : Dec 18 14:19:02 2026 GMT
        Subject: CN=38a19e0d-47d0-488a-9bc9-0241b7ebf688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:7f:86:28:68:28:f3:54:dd:83:58:eb:27:
                    c6:16:76:16:e8:e7:4a:e7:77:9e:38:30:c1:05:55:
                    c6:c9:25:30:6c:c3:91:ea:aa:f7:f2:fc:09:04:89:
                    6c:e7:53:37:33:52:e7:15:54:9d:45:61:c3:46:fe:
                    37:ea:61:03:a8:36:83:d1:2e:20:ad:a3:70:2a:e8:
                    fa:eb:70:45:d8:f8:28:10:8c:07:e8:c7:28:dc:d6:
                    02:8d:16:08:0f:d4:2b:90:17:86:0b:73:f3:b7:94:
                    ac:3d:97:74:9a:64:0d:7a:ad:86:fb:d9:37:20:65:
                    5b:c1:fb:24:ef:70:14:41:f2:3b:7e:46:0e:d6:74:
                    4e:26:f1:a9:b5:ba:2e:c8:0f:12:71:16:a2:b4:f6:
                    2c:3c:cb:4d:2b:50:70:8b:c8:36:36:1e:9f:3b:af:
                    c8:a4:86:9a:45:37:87:32:8e:37:a0:7e:7c:68:f8:
                    32:48:72:fc:68:e6:d8:c1:ef:79:5d:7c:f3:1d:94:
                    e4:07:a6:b8:b2:41:db:0f:19:20:1e:6d:c3:b0:6e:
                    14:2f:2f:3a:13:33:50:d7:e4:63:22:71:06:b5:a0:
                    7e:ec:22:dd:5b:e4:0b:38:c2:8f:e1:76:dd:63:9e:
                    50:ca:23:3c:3e:59:b0:83:a8:c0:29:14:6f:24:68:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:A6:C3:2B:31:06:EF:50:D3:AD:0B:B1:7A:50:B1:5F:F7:A2:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e4353bb7-9c4d-3d35-8302-ad289dea4797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:bf:63:76:ab:ec:1b:f3:db:12:a8:44:fd:27:b8:d8:1a:
         a4:c0:12:5b:24:0f:2a:17:0a:3c:27:53:e7:09:1b:f5:eb:69:
         2d:54:08:1b:f0:38:70:0e:c1:99:96:46:d2:d9:1d:47:4b:ba:
         b2:03:1e:81:bd:d8:3d:51:ba:2c:df:8e:15:fb:b9:31:fd:13:
         0f:ef:af:66:1e:a0:0f:79:05:52:a0:fe:57:46:fa:da:2e:db:
         af:75:41:7e:e1:6e:6b:21:95:b0:05:ca:df:82:0e:d9:e7:17:
         be:0b:d3:e1:07:85:e2:89:fb:b3:a5:78:10:d9:4b:fb:28:67:
         f9:94:c2:8c:a9:14:8a:55:a7:a4:73:1d:28:8d:90:b0:82:2e:
         b2:0f:2e:f0:98:59:8f:dc:51:16:e3:79:eb:97:05:08:df:98:
         be:1b:1b:10:0b:f7:ac:a5:00:11:98:38:e8:08:02:f6:96:7e:
         a1:b4:fc:8a:a9:83:80:3c:af:09:01:05:67:98:d9:bb:52:02:
         05:20:36:a6:8e:1d:6f:06:a5:3a:03:be:68:f8:18:32:1e:cb:
         ba:8a:65:c2:a4:d2:0d:fb:0e:32:42:89:08:a1:47:72:be:ff:
         ca:3b:05:43:08:cf:ce:16:be:99:0b:75:90:b0:78:09:17:86:
         fc:de:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:25:42 2026 by rpki-client