Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f74122ba-f96a-3880-b0d4-9f550bf067f2.roa
File:                     f74122ba-f96a-3880-b0d4-9f550bf067f2.roa (raw, json)
Hash identifier:          dA/DD4OaX37HY3YRT9TodNmLxIFcBWU0XijL4QIIa6s=
Subject key identifier:   67:2B:9D:E4:DF:C7:E2:6D:D3:47:10:A5:64:CF:4E:22:35:69:69:C0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7885F19CA7927D9240BE660
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f74122ba-f96a-3880-b0d4-9f550bf067f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13537
IP address blocks:        64.81.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5f:19:ca:79:27:d9:24:0b:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4cc6d41-35cc-4664-867d-1042079c7238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:f2:92:a0:7e:ed:5a:1a:26:14:5f:dc:69:
                    2f:fd:a4:25:50:5d:67:31:01:0a:e3:24:e0:29:d0:
                    9f:75:0c:c1:8f:52:98:58:ad:8e:3f:87:65:c2:d4:
                    53:e2:06:3d:11:59:55:c6:2d:c7:2d:f9:f2:4f:eb:
                    4e:3f:ad:a5:d0:78:c0:51:37:64:01:09:4b:81:f1:
                    49:80:86:da:47:e5:d6:5d:30:ba:24:67:74:9a:e8:
                    ae:cd:24:d8:59:87:b0:ac:66:73:18:50:51:51:1e:
                    38:f6:be:fa:98:ef:0e:e8:e1:07:a5:28:49:62:6c:
                    9f:67:6a:fc:eb:f2:9d:4a:b1:69:3e:c7:5d:1e:42:
                    e2:c8:e4:9f:04:10:54:84:60:a7:ff:6d:eb:4d:5b:
                    f7:68:b7:d9:7c:c8:de:fc:19:d3:02:c0:61:a5:ea:
                    4c:07:96:4d:85:12:79:9e:49:2a:16:c3:39:7c:41:
                    38:71:7b:37:23:bf:79:dc:20:6f:a6:c9:3b:64:45:
                    e2:83:7b:b3:23:bb:99:5f:c1:49:f2:12:48:7e:88:
                    e6:7a:c0:b5:86:c8:db:f6:29:7f:8e:9f:f9:94:39:
                    77:13:62:7e:a3:fb:91:2e:22:fe:e6:7f:b7:38:86:
                    ba:61:cf:98:9c:e1:65:93:de:6b:d1:af:57:6e:51:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2B:9D:E4:DF:C7:E2:6D:D3:47:10:A5:64:CF:4E:22:35:69:69:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f74122ba-f96a-3880-b0d4-9f550bf067f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:4a:c5:93:4f:3b:c8:13:5d:46:cc:0f:e7:83:9c:97:cf:
         7e:5e:8c:0b:d2:5f:cd:dd:27:85:8c:d4:f1:0b:3c:6f:d7:4c:
         3d:8a:54:65:d2:2d:60:e4:6d:20:a0:7f:0f:9f:40:16:8e:d7:
         77:a2:74:ea:9c:e9:72:da:f6:42:df:ed:37:13:5b:0f:8e:33:
         c6:88:8f:9a:12:75:3d:26:56:91:0f:bd:c6:e5:69:65:31:58:
         ba:46:2d:e7:37:75:fb:80:0a:be:95:86:c2:bd:f2:c9:62:3a:
         57:00:e0:3e:ac:a3:c3:35:a8:bf:70:bf:7c:2b:73:d6:d4:47:
         9b:b7:eb:5e:1a:b4:9d:1d:eb:7e:00:bb:39:0e:2b:01:ac:4f:
         c8:85:19:16:1a:36:24:69:42:3b:ad:be:a2:90:80:a7:c9:ec:
         e9:3a:ab:66:ad:ec:fc:1d:38:f3:40:63:71:e3:b4:04:7c:79:
         d9:a3:6b:59:83:4a:8d:15:a7:cc:fe:25:0a:80:db:1c:38:dc:
         c5:8c:7d:d6:1c:33:75:7f:33:47:84:8c:8f:85:ac:7c:92:eb:
         6b:a9:fa:04:b3:3b:e4:36:f1:15:35:6b:78:08:3f:1e:82:13:
         c0:6f:1f:33:09:41:6c:91:67:71:b2:2b:a3:7b:6a:f5:01:57:
         8a:24:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:44:53 2026 by rpki-client