Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa
File:                     2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa (raw, json)
Hash identifier:          Iy32yuO36bRUAeHMKtvWQoXxXkUjekxK+tHg6LNq2js=
Subject key identifier:   BB:67:7A:92:59:36:83:8E:08:C4:2E:4D:65:5B:20:08:98:60:1E:8F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E988A793BA7F53AA385D81C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa
Signing time:             Thu 23 Jul 2026 16:10:23 +0000
ROA not before:           Thu 23 Jul 2026 16:10:23 +0000
ROA not after:            Wed 21 Oct 2026 16:10:23 +0000
asID:                     49791
IP address blocks:        64.204.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:8a:79:3b:a7:f5:3a:a3:85:d8:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 23 16:10:23 2026 GMT
            Not After : Oct 21 16:10:23 2026 GMT
        Subject: CN=c639075f-019e-44f0-8b80-f0ca4e99a0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:42:9d:d4:f0:73:cf:b8:79:39:ca:98:b0:
                    5a:bd:0e:37:96:5f:5b:36:4a:79:71:36:82:9f:00:
                    6d:8c:76:a0:8b:9e:05:5a:61:2b:16:a2:aa:60:29:
                    86:7e:ac:b5:64:e3:f0:c3:51:d2:41:a6:12:a7:90:
                    df:10:cc:64:19:73:57:ed:7b:4b:1d:6d:0d:8b:01:
                    35:51:34:a0:77:b6:d2:8d:1b:c7:6d:5a:c5:c6:bb:
                    a1:48:f8:3c:1b:ed:b5:c1:d7:fd:e1:f1:f2:c0:33:
                    ad:98:6e:08:11:b6:58:41:e2:87:21:c3:fd:da:36:
                    7b:0b:c8:53:66:65:28:0d:a1:36:c1:bb:c8:68:27:
                    03:54:9d:23:29:28:d8:3d:b7:83:22:05:47:d3:d8:
                    ae:13:33:c1:1f:f8:ad:10:56:ab:ad:47:80:b1:3f:
                    23:fe:dd:1e:ae:10:2c:b4:68:e8:ec:34:d0:f1:7a:
                    a4:b3:fd:8b:ee:32:5a:81:89:a5:e5:77:f7:6d:c9:
                    d3:4f:52:fd:ab:9d:11:a1:a7:e9:92:e2:72:b6:30:
                    38:a0:ac:46:4e:34:19:c8:a6:50:6a:55:b2:59:53:
                    23:76:a0:6e:56:fe:13:71:79:a9:4f:13:52:3c:a3:
                    8e:5d:01:9a:5d:57:d7:0e:13:8d:cf:be:0d:6f:14:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:7A:92:59:36:83:8E:08:C4:2E:4D:65:5B:20:08:98:60:1E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2929bdb6-d173-38f1-bde8-053d2cc17d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:2f:84:51:a8:3b:06:24:2b:b3:b5:fc:25:f1:4b:ee:71:
         22:2a:56:24:b4:a5:5c:6d:73:ce:e7:29:a4:e0:a7:00:11:1b:
         2f:cd:28:b9:aa:46:ee:26:fc:d6:17:05:ab:e6:24:5a:48:d7:
         7a:13:e3:82:44:57:1f:3d:37:13:56:b4:4b:90:71:57:99:7f:
         5d:2d:6e:f7:c9:9f:e6:df:71:c3:df:65:50:cb:79:ea:d0:4a:
         cf:8c:df:84:dc:23:46:9b:57:ec:5c:69:61:79:d9:8c:1c:ed:
         a4:fe:f5:c7:cb:fc:e3:61:de:e1:48:75:bc:2b:92:76:25:57:
         71:76:32:1a:2d:87:2e:12:0e:d7:f2:98:96:eb:e7:49:a8:de:
         a4:0f:f4:94:73:1c:cd:e2:fd:46:16:2e:ab:b2:eb:17:9b:ce:
         a4:25:d5:c6:e8:dc:f7:a0:1c:e5:86:4c:06:9e:bf:d2:c3:0b:
         4a:9c:9e:03:45:05:10:95:5d:67:a4:47:42:3e:23:7f:04:54:
         3b:54:bd:02:8d:d9:fd:31:70:19:0f:04:8b:a6:59:67:4c:9a:
         7f:6e:3a:0a:e6:67:d8:6a:c4:32:99:d4:d3:cb:79:33:c1:6e:
         06:fd:52:77:e5:e3:1d:ba:a3:53:2e:87:fd:f3:6b:4b:25:30:
         70:01:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:08 2026 by rpki-client