Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/337509ea-7ed4-352c-8a85-c0a4c8af9811.roa
File:                     337509ea-7ed4-352c-8a85-c0a4c8af9811.roa (raw, json)
Hash identifier:          fQf+fYdr6bBMHCI4KSczOFkWqXFFShLTRGBEkZnS72c=
Subject key identifier:   D7:7C:99:8A:3D:A2:2D:68:4E:85:D1:DC:46:3A:1D:05:3F:E3:48:40
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584EA7942731C96A6E1554F7F8A0
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/337509ea-7ed4-352c-8a85-c0a4c8af9811.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30324
IP address blocks:        204.83.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:27:31:c9:6a:6e:15:54:f7:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=caffd365-6098-4f6e-8891-998139afd03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d3:ea:d4:ff:53:96:c5:d2:35:8c:05:7c:ce:
                    3a:cd:94:5d:89:ef:16:8d:70:56:82:76:6f:96:87:
                    a5:53:00:e5:82:ba:7c:b8:72:59:aa:f8:09:27:6c:
                    f6:84:40:0b:a0:c1:32:d3:5b:e0:67:25:e2:e3:1f:
                    6f:4e:80:ad:d7:2c:c0:9f:47:54:c4:d2:21:87:c9:
                    e6:35:81:07:ca:78:02:e8:e5:16:c8:c0:0b:e5:3b:
                    e9:61:c3:9a:76:e9:e7:27:9b:36:0b:5f:fb:4e:92:
                    d3:2f:a6:6b:fa:a6:39:99:47:9d:c9:d4:36:79:7c:
                    fc:f2:57:d0:86:44:b2:69:14:b3:84:a9:b0:70:23:
                    fb:be:e3:d0:6a:98:d0:4d:d1:e9:ca:de:2a:76:46:
                    7c:5c:f8:5a:89:05:c6:09:86:65:56:c7:66:4f:c7:
                    54:7c:c0:06:39:a6:24:44:fb:2f:08:66:88:75:ba:
                    96:7b:c9:68:bb:f9:b9:75:af:4e:ed:14:bf:fa:c6:
                    fc:44:08:72:b0:11:44:65:77:19:85:85:f8:c0:e1:
                    f2:49:79:d3:13:2d:0a:cc:9d:82:da:1b:68:74:eb:
                    fb:a2:e9:09:1b:e4:78:e4:fa:14:e4:27:c0:24:47:
                    31:a7:27:81:8c:35:91:1b:ce:9e:85:82:5b:e3:c4:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:99:8A:3D:A2:2D:68:4E:85:D1:DC:46:3A:1D:05:3F:E3:48:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/337509ea-7ed4-352c-8a85-c0a4c8af9811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:18:b5:7b:cf:5c:a9:df:bb:c3:4c:cd:b6:ae:e2:63:d4:62:
         93:e9:02:54:35:0b:03:47:e0:04:8f:1c:1e:b1:a3:fb:fb:c1:
         d2:4e:a7:75:8f:92:ae:e0:6f:09:34:aa:2e:8a:03:58:64:76:
         73:c2:6c:cb:0f:dc:58:79:18:fd:3a:73:08:8c:21:0b:ac:f1:
         db:02:10:67:59:dd:ea:e8:49:84:46:40:78:f8:d5:43:64:62:
         8d:0a:99:04:c5:e7:ac:f4:bf:43:42:43:b4:59:0d:fb:ba:c7:
         56:32:32:80:6d:d0:3c:75:b1:a9:f8:65:1b:de:1a:c3:e3:5c:
         6d:2b:ce:ef:42:ea:de:a6:9b:ed:91:d2:78:37:91:43:49:e6:
         71:11:a6:34:74:13:8a:56:ff:15:ac:e5:8b:a1:1d:05:f8:fc:
         62:58:68:f3:33:90:b2:43:9c:d6:43:25:92:db:f9:95:7d:8a:
         21:e1:fe:8d:97:d2:a4:21:d5:ab:df:7f:4f:04:af:9f:c1:20:
         63:ba:af:59:02:15:35:0e:e9:2c:17:f9:17:fb:0f:2a:6d:4c:
         64:f1:75:c2:55:b1:79:44:df:71:ee:44:9b:94:dc:79:46:eb:
         71:b8:8e:5e:57:f7:6e:98:91:c6:f3:ad:5e:2a:7d:0a:25:8c:
         50:50:6c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:51 2026 by rpki-client