Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36ba493f-9b45-3a6a-95cd-16afcd1b7b6f.roa
File:                     36ba493f-9b45-3a6a-95cd-16afcd1b7b6f.roa (raw, json)
Hash identifier:          2zMeMvFWs23HAavGSk4o8nkgDVbiTDE8W6Xlzaeob08=
Subject key identifier:   8B:F3:36:D8:AF:FD:97:56:F2:B4:FD:AC:F5:91:EF:21:A2:EB:D3:5C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D24C21035FBDECD70A4D88C58
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36ba493f-9b45-3a6a-95cd-16afcd1b7b6f.roa
Signing time:             Thu 12 Mar 2026 12:01:41 +0000
ROA not before:           Thu 12 Mar 2026 12:01:41 +0000
ROA not after:            Wed 10 Jun 2026 12:01:41 +0000
asID:                     212980
IP address blocks:        64.204.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:c2:10:35:fb:de:cd:70:a4:d8:8c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 12 12:01:41 2026 GMT
            Not After : Jun 10 12:01:41 2026 GMT
        Subject: CN=7bbd235e-7156-4d36-ba46-7bd3e6af578a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:5b:be:b3:75:b9:55:1c:c4:3d:34:6f:e9:
                    3a:7a:3a:9d:77:94:85:4a:14:9b:fa:9e:15:e0:f8:
                    eb:50:ae:7e:c8:e7:3c:ce:9c:36:e3:02:18:a9:0e:
                    2f:12:89:c3:52:9d:30:a7:0f:16:57:5f:bd:df:f9:
                    73:2c:18:91:ca:bb:2e:b8:53:68:78:28:a0:59:c2:
                    4f:92:26:13:2d:88:c5:6b:30:e0:cc:58:fc:ea:29:
                    7c:26:09:e1:48:cb:8f:59:90:17:0c:90:32:54:bd:
                    7d:85:05:ec:fe:1e:9c:e5:b9:27:d3:a5:99:a4:dc:
                    7b:e5:55:1d:d7:eb:05:47:23:5c:d6:b5:28:e1:91:
                    f5:bc:cb:80:c7:2e:72:7a:32:b0:e2:51:cb:a8:2c:
                    8d:17:3d:c6:37:2e:f9:3c:56:86:0c:90:d5:81:a4:
                    a1:45:44:f6:1b:69:28:6c:74:39:00:68:a1:97:af:
                    36:1e:17:52:21:1b:7b:79:15:a4:d8:65:c7:a8:7f:
                    0d:fa:08:55:b5:bb:bc:6c:2c:22:65:29:50:1d:c2:
                    50:c2:91:8b:fc:85:f2:5c:be:cc:c5:50:83:a0:a6:
                    e0:80:b7:a7:2f:df:30:93:72:1e:61:39:27:dd:04:
                    02:3c:93:f5:8c:7f:3c:93:2b:42:86:26:11:7f:0a:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:36:D8:AF:FD:97:56:F2:B4:FD:AC:F5:91:EF:21:A2:EB:D3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/36ba493f-9b45-3a6a-95cd-16afcd1b7b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:38:9b:18:7c:fe:d4:5f:29:f0:7c:de:6e:f7:62:62:84:
         2c:89:53:7d:00:79:56:cb:b6:1d:c7:56:8a:03:8a:91:27:8c:
         40:74:88:40:6f:7d:49:8b:dc:fd:13:44:f2:3a:fb:79:23:23:
         c6:af:c3:11:46:df:74:52:04:d7:7b:2c:49:74:78:8f:ce:51:
         f8:73:71:13:53:63:11:d0:11:73:88:01:87:58:4e:6b:e2:3c:
         a5:6b:0f:c8:1b:70:40:75:48:6a:55:bf:4e:04:66:ae:34:d3:
         73:06:8c:56:93:60:ff:01:37:82:65:42:b3:b8:61:22:0f:18:
         9d:60:72:6e:e6:a6:af:ba:1d:7a:a9:93:8b:92:27:19:0e:40:
         62:5a:c7:6a:4b:ce:ba:d3:9a:dc:d2:97:a6:e0:3b:c6:32:cd:
         cb:40:6e:21:88:8c:be:4a:e0:66:fd:f3:77:d5:99:b5:b5:77:
         e7:0b:d4:9e:f8:f3:34:73:53:22:b7:9c:72:2f:56:de:78:16:
         7f:64:8b:7d:b2:b2:67:08:4c:2e:40:ce:1b:02:e0:a5:2c:d0:
         25:77:2a:8e:16:21:79:e8:85:5e:29:60:e9:02:bc:46:33:6a:
         2f:48:54:c7:af:50:a4:bc:ee:86:e8:0d:b7:33:1d:e9:ba:2c:
         07:3d:7e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:24:59 2026 by rpki-client