Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6203b422-16a6-35ba-b115-29ac8b5e69ab.roa
File:                     6203b422-16a6-35ba-b115-29ac8b5e69ab.roa (raw, json)
Hash identifier:          OJcy5MDNeqCZouIK/YWpCmwQP/bN6kLLbkES5XyTh5E=
Subject key identifier:   B9:F4:1D:B2:E9:45:E6:24:91:03:13:B0:71:58:2B:0D:FC:24:16:7C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E74CF6FB5E80DE8EE5E6FF620
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6203b422-16a6-35ba-b115-29ac8b5e69ab.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     400529
IP address blocks:        64.7.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:6f:b5:e8:0d:e8:ee:5e:6f:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=053ec788-da25-41fd-8137-43a94df2fd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:e3:45:ea:02:d0:b8:d9:a0:2f:35:6e:fe:
                    4d:c3:d1:63:5c:47:f0:49:d2:25:1e:27:5e:d6:7d:
                    40:f6:87:55:14:26:00:a8:5b:4e:a5:e0:1f:69:b7:
                    7c:47:c5:47:48:d2:9a:f8:d9:c3:c6:cb:5d:43:c4:
                    39:1c:7f:75:57:d6:3d:1d:92:56:f3:c4:64:cf:cd:
                    5f:5f:7b:9e:ec:d3:e5:e0:c7:8a:04:6c:a7:11:e6:
                    a1:a2:15:48:b6:98:7c:ce:1c:66:7b:76:35:9e:46:
                    4a:e7:40:1e:c6:5d:49:ae:4b:06:d1:84:0c:fa:3d:
                    8c:4e:3e:3c:d4:a1:c9:14:c4:70:3b:9d:7b:f3:c7:
                    9e:73:0f:9f:64:f3:0e:7f:06:d8:57:44:8d:cc:18:
                    ad:08:5b:f4:55:d8:83:9c:8f:97:f3:1a:68:64:94:
                    34:8f:f8:f7:6a:9b:c7:c5:a1:cf:04:7a:6e:f9:00:
                    47:53:35:7b:5b:b7:02:15:4a:54:67:45:a2:d7:ac:
                    10:97:1f:65:1f:a7:be:c4:bd:6a:5e:a5:84:62:79:
                    48:d6:44:f4:29:eb:33:c7:06:c7:38:f9:a6:ce:0a:
                    65:75:2d:87:20:c1:40:67:21:92:70:59:5d:9d:f0:
                    d3:b3:80:75:7b:ff:40:2e:99:a8:86:93:eb:8f:7c:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F4:1D:B2:E9:45:E6:24:91:03:13:B0:71:58:2B:0D:FC:24:16:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6203b422-16a6-35ba-b115-29ac8b5e69ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:91:20:c5:2c:51:a0:17:52:43:af:41:2c:9a:7f:60:3b:4f:
         ad:2a:e0:ea:75:76:79:11:63:1a:1c:ed:dd:0a:f8:22:92:47:
         9d:68:95:b0:22:47:52:dd:aa:d0:42:73:02:bc:be:f3:bf:82:
         07:e5:ef:1b:58:74:7b:1a:6f:23:03:2d:de:cf:5b:1b:d6:e4:
         19:98:df:0a:ee:55:30:d3:00:c9:98:08:ff:a1:3f:f6:f0:7e:
         64:30:6e:ca:e6:d7:04:42:ea:e7:f4:7b:b3:b8:a4:de:da:fd:
         83:44:20:c6:8d:51:9d:d6:0b:6f:c6:37:77:55:ad:b6:76:f9:
         fa:0e:ed:ac:4f:6a:fa:f1:b4:1c:d7:58:7b:20:06:9e:e3:b9:
         61:c0:2a:6b:18:68:3b:81:01:35:5a:54:61:a7:64:fd:99:13:
         37:7b:86:f0:93:13:33:32:56:c9:60:00:9f:74:06:4e:26:cc:
         cd:b9:02:57:9d:8d:4a:f9:90:f2:12:66:8b:2e:d3:e2:68:4a:
         2d:07:3c:4a:d0:3e:5a:50:06:f9:a3:d1:fe:ab:c0:b9:e8:cd:
         32:80:7c:0e:58:90:f4:b0:9a:9e:62:d3:22:01:00:6e:82:1d:
         21:8a:b2:88:99:62:c3:74:c2:5a:0a:c7:6d:28:d2:8d:4d:8a:
         54:4e:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:32:37 2026 by rpki-client