Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d1e6d3c-7088-3cc9-80f7-efe634080198.roa
File:                     5d1e6d3c-7088-3cc9-80f7-efe634080198.roa (raw, json)
Hash identifier:          jf4JJI+SsUnEdjbuhvKmQNR13jTNiUQpzr5q272vH/U=
Subject key identifier:   1C:45:43:1D:55:F4:84:83:F2:6F:95:58:D9:3F:E1:72:68:1F:49:FD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EFD4DC4D07C2BAB22A432FC00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d1e6d3c-7088-3cc9-80f7-efe634080198.roa
Signing time:             Fri 28 Aug 2026 18:24:43 +0000
ROA not before:           Fri 28 Aug 2026 18:24:43 +0000
ROA not after:            Thu 26 Nov 2026 19:24:43 +0000
asID:                     219427
IP address blocks:        64.204.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:4d:c4:d0:7c:2b:ab:22:a4:32:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 28 18:24:43 2026 GMT
            Not After : Nov 26 19:24:43 2026 GMT
        Subject: CN=0a31eb8f-49d0-4968-af43-22cb9ac813cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:45:76:59:60:5e:70:e4:c5:16:ce:07:93:
                    30:c2:92:46:3d:36:5d:fc:b2:01:7e:5c:08:ad:1f:
                    ce:9f:0b:ad:6f:91:dc:58:f9:29:ed:c4:c9:76:1d:
                    03:b5:aa:7d:a9:ef:3a:c4:ec:5e:5d:61:b2:80:4e:
                    bb:89:2d:3d:93:8c:cd:aa:12:63:b1:d5:8c:f9:5b:
                    d9:fd:74:9b:9b:d5:65:ab:8b:79:c4:9c:05:0c:94:
                    c5:88:ac:ae:da:a6:c5:7c:2a:aa:29:d0:9b:7c:c0:
                    24:40:b8:32:ef:d5:98:55:1c:06:dc:39:92:47:8f:
                    06:d6:c4:29:09:25:32:bf:12:b4:29:db:5a:b1:9d:
                    67:cf:94:70:51:aa:1a:b0:91:c1:75:85:38:b4:0f:
                    82:0a:e5:63:3a:4f:78:ae:d1:c6:db:ba:19:d7:c5:
                    e9:76:ff:88:d0:de:a0:19:c5:89:78:ae:50:5d:78:
                    23:79:09:72:bd:45:7b:b2:ac:1c:9d:c7:94:b8:b1:
                    de:9d:e1:64:83:94:e6:00:24:7c:8d:da:85:72:bc:
                    1a:90:d7:ad:21:9b:93:64:ce:3f:e0:0c:a9:b5:9a:
                    b8:38:dc:67:6c:db:fb:1c:9c:de:19:a2:35:2f:3d:
                    56:5a:1e:29:c4:5b:6a:8e:a9:41:83:83:ea:73:9e:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:43:1D:55:F4:84:83:F2:6F:95:58:D9:3F:E1:72:68:1F:49:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5d1e6d3c-7088-3cc9-80f7-efe634080198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:f1:27:56:16:b4:4a:28:e1:9b:50:34:ed:a5:6b:06:87:
         56:4b:96:33:17:1d:19:78:23:37:d9:f8:0e:46:ec:bd:1b:5f:
         a7:bb:15:c6:86:a5:91:a6:ca:91:d6:0c:3c:ea:73:7f:6a:46:
         06:56:0f:36:c0:4a:c0:4f:6f:45:66:63:ed:03:1e:25:ca:94:
         fa:01:99:bc:dd:72:98:12:bf:1d:8d:8d:92:a2:02:ba:f9:96:
         03:3f:a1:b1:f7:e5:39:98:c2:83:be:b5:2a:c1:4e:56:51:81:
         ed:52:87:48:83:cd:1a:12:03:1b:ea:84:ca:9d:a9:fc:fe:d8:
         95:2a:11:d2:b1:4d:64:fe:57:ea:ef:76:6f:59:da:2b:14:7c:
         7a:5c:46:8d:e8:7f:9a:3f:48:cb:92:f5:36:ac:d4:24:e0:cd:
         55:cd:ee:15:78:63:ad:a9:c6:cf:99:ac:b9:77:d4:2f:87:f2:
         51:be:c7:d3:49:73:0c:dc:a4:97:d7:9d:36:66:cc:c1:47:c1:
         08:93:54:bd:8d:d5:ab:4d:b8:4c:16:eb:6b:e5:5f:44:bf:92:
         12:ca:c6:6a:97:95:61:cb:9b:99:51:98:0e:fe:dc:bc:ab:70:
         bd:a3:53:98:33:1d:d7:bc:55:fe:11:a7:97:4c:0e:d3:36:e6:
         71:87:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:02:40 2026 by rpki-client