Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6379bd22-a1f7-3390-bb89-37631ebee9a3.roa
File:                     6379bd22-a1f7-3390-bb89-37631ebee9a3.roa (raw, json)
Hash identifier:          GiHszm+e2K7cbC21Qy2F+dD5pzSuCq9TFjXNHKpxcz0=
Subject key identifier:   26:9D:AA:32:BE:62:9C:25:35:0E:F5:16:90:D0:17:C5:44:7B:72:45
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC206A9441FA9E4E80DA5C780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6379bd22-a1f7-3390-bb89-37631ebee9a3.roa
Signing time:             Thu 07 May 2026 20:01:49 +0000
ROA not before:           Thu 07 May 2026 20:01:49 +0000
ROA not after:            Wed 05 Aug 2026 20:01:49 +0000
asID:                     151389
IP address blocks:        64.204.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:06:a9:44:1f:a9:e4:e8:0d:a5:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 20:01:49 2026 GMT
            Not After : Aug  5 20:01:49 2026 GMT
        Subject: CN=bbab1bfa-8693-4a64-8453-343c596c9fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:3a:d7:4d:02:28:27:08:49:e3:75:b6:95:
                    83:f6:c8:c8:99:a2:ae:c2:5d:d8:cf:b0:7a:86:38:
                    c0:cc:c6:84:77:89:cb:0a:63:c4:55:05:d2:7f:4a:
                    05:37:85:0b:c0:17:42:fe:fc:02:88:1a:fa:01:cc:
                    48:11:67:bc:54:78:60:6b:d0:62:17:0f:ef:70:99:
                    f3:ba:87:3e:32:f0:5a:18:80:e8:11:8b:e9:58:1c:
                    37:2c:70:94:48:b3:77:0f:9c:8c:59:7c:47:4d:3b:
                    a9:e4:7b:aa:94:6d:ec:fd:07:57:80:95:4e:29:41:
                    e9:b0:b2:5c:72:5a:76:dc:f6:62:86:0c:0e:90:44:
                    7f:00:2c:02:ab:0d:8e:5a:6c:3b:16:79:ba:f1:c1:
                    9a:6a:2a:22:40:40:29:14:52:41:9b:3d:ce:c9:54:
                    c8:3d:5f:aa:4e:2e:b4:f3:a2:44:20:3f:97:46:86:
                    f7:e9:78:5c:19:68:52:b0:35:7c:0c:0a:6f:e3:a5:
                    1a:0c:d4:cb:14:85:d4:91:61:af:e2:ea:ca:0d:3e:
                    c4:5d:f7:30:3b:08:69:ba:12:8f:e3:e7:ce:bd:a0:
                    eb:47:1d:05:a8:12:20:d0:c9:f5:d8:06:d6:e5:c8:
                    a9:cd:50:11:50:bb:5e:ac:23:b8:82:3a:ef:dc:7d:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:AA:32:BE:62:9C:25:35:0E:F5:16:90:D0:17:C5:44:7B:72:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6379bd22-a1f7-3390-bb89-37631ebee9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:fc:ab:1c:49:d3:6f:c0:23:f2:23:58:08:5a:d4:93:b4:cf:
         b4:3e:22:a7:70:5b:9d:3d:e0:2b:fb:04:b7:c5:61:7c:d7:ba:
         aa:c1:e8:af:ee:32:03:0d:7f:91:38:2c:58:60:30:3b:0f:03:
         3c:e0:3c:30:78:7c:55:9b:70:91:b6:84:b6:01:83:a1:6a:60:
         f1:b0:ee:31:e3:0c:a8:d7:77:82:ee:c4:70:5f:b2:f1:3b:77:
         1c:36:19:62:93:10:1e:4f:58:fc:ba:d4:10:46:02:0d:31:ca:
         b7:93:07:01:0d:16:1c:df:1a:d9:03:bc:ad:93:60:dc:bd:d8:
         44:4f:4f:16:f0:ec:d4:2b:7e:63:8f:76:be:0b:f9:98:03:18:
         de:32:6a:da:2b:27:42:9a:1a:3f:a8:7b:86:61:16:d2:7d:ad:
         f2:42:30:bc:92:3b:9a:28:6b:b1:a0:51:90:ae:df:2d:3f:14:
         d5:45:bd:ec:6b:1a:2e:b3:cc:a7:02:40:eb:ac:35:0b:80:2a:
         b0:09:49:c4:89:f8:ed:7a:bd:2c:4f:50:6b:13:6f:a3:f7:54:
         f4:c5:77:00:69:a6:cc:fc:ef:1e:e0:77:ed:fb:4a:5f:c6:55:
         07:de:ee:ef:cf:93:dd:bc:9a:83:b4:0c:32:38:92:eb:47:84:
         59:67:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:33 2026 by rpki-client