Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa
File:                     041fad63-307b-3a43-886f-754dbffe700b.roa (raw, json)
Hash identifier:          cTgSvyyc9j7Gr16VQfUSmqzLixPH/cpMUmk4vRcaKNw=
Subject key identifier:   71:78:94:FC:3F:55:43:16:90:96:87:F8:B6:DF:E9:C3:5B:CA:32:FB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E736A3CC367D50F3AA1D47480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     147034
IP address blocks:        64.205.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3c:c3:67:d5:0f:3a:a1:d4:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=546b5837-d24f-4da7-a71a-8e737b931f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:c6:09:7a:86:8f:4f:73:3f:63:68:53:bc:
                    9b:51:eb:7a:2f:19:e9:15:bc:9e:9e:4f:17:13:36:
                    af:c5:7a:72:96:30:31:c3:73:84:a8:93:cc:1b:2b:
                    39:05:95:02:a1:3f:e9:db:18:48:67:b9:3e:e6:b8:
                    3a:16:c1:2e:7f:a5:0a:75:1b:d1:4e:95:4e:61:a9:
                    3d:00:7a:31:7c:cd:8c:eb:98:5d:72:33:99:4b:66:
                    02:b9:d3:06:46:b0:d6:d3:fd:58:64:d1:d1:31:86:
                    56:53:a0:45:89:66:3e:60:1b:ed:d8:81:35:1d:f5:
                    f7:b0:57:c3:73:7e:22:87:b9:b2:86:46:5c:ea:b4:
                    ac:7e:14:5b:32:b2:c8:c4:82:c2:c7:04:3b:11:12:
                    2e:6b:91:01:73:20:c7:af:a9:75:48:6c:35:10:43:
                    d6:80:e6:6c:b0:11:95:e1:93:55:8c:93:5f:64:72:
                    bb:0c:06:9f:48:08:e9:f6:8b:c0:0a:58:28:7e:e7:
                    e1:de:e8:d0:80:c3:41:0e:bd:b0:81:57:ff:ff:8b:
                    cb:9e:67:70:ff:3b:e3:63:59:39:8d:92:da:65:10:
                    7d:1b:bd:4e:07:a7:3e:4b:73:8a:2b:89:3d:94:f9:
                    8f:2b:2e:29:76:01:ae:28:3e:8b:76:fd:d3:ff:ba:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:94:FC:3F:55:43:16:90:96:87:F8:B6:DF:E9:C3:5B:CA:32:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/041fad63-307b-3a43-886f-754dbffe700b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:22:e8:82:da:c7:56:98:19:cf:b9:1e:53:31:a1:37:f8:96:
         0c:2c:f2:be:91:4e:0a:c1:18:74:fa:82:fc:50:e6:b4:f7:42:
         b8:47:28:3e:d7:85:c8:2a:22:a2:9c:ae:d5:8a:0f:ce:80:66:
         f9:87:ef:d0:01:e1:14:da:26:69:2b:37:e2:24:8f:a7:b1:d8:
         0e:46:9d:af:bf:f8:8f:58:87:9d:32:45:19:86:4c:8e:91:27:
         1d:34:60:2f:31:78:40:a1:ca:98:40:84:fb:d6:90:dc:c8:5e:
         05:53:36:75:0e:d1:2a:81:fb:24:ec:cc:13:dc:3e:ea:86:b6:
         98:e5:7c:5d:6d:0a:31:2a:2b:11:8a:d8:3e:b4:f0:46:2e:5b:
         62:3c:14:d4:5d:b9:9b:49:03:2f:a4:11:1c:7f:51:e6:6e:b8:
         56:88:cc:9b:36:55:59:9b:55:41:b7:e1:99:c6:9d:84:b5:9b:
         97:28:b9:0b:ca:ae:5c:0a:de:e5:52:4d:64:da:e6:f1:e7:ef:
         9e:f7:0d:09:86:87:18:e7:6c:7b:82:79:77:66:72:42:02:f9:
         89:2b:6b:e3:58:f6:8d:f2:a9:6a:71:62:5c:97:df:6a:b2:05:
         9d:98:e5:5d:a6:6b:a0:1c:aa:83:85:a6:a4:e9:5c:3b:a1:af:
         ad:16:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:34:16 2026 by rpki-client