Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4be97c8-4c45-33a0-8f9c-9d81a9b9efd9.roa
File:                     a4be97c8-4c45-33a0-8f9c-9d81a9b9efd9.roa (raw, json)
Hash identifier:          t5kVWV8bmw0z8iH+4E/9s84+rbTatEKHwvo+xZNcKtk=
Subject key identifier:   9B:47:4C:70:ED:E7:E6:42:33:6D:65:1F:70:E1:A0:69:71:C5:53:F8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E991A5184203A15F58A59EA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4be97c8-4c45-33a0-8f9c-9d81a9b9efd9.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     8368
IP address blocks:        64.105.224.0/23 maxlen: 23
                          64.105.238.0/23 maxlen: 23
                          209.166.12.0/23 maxlen: 23
                          209.166.30.0/23 maxlen: 23
                          216.175.216.0/23 maxlen: 23
                          216.175.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:51:84:20:3a:15:f5:8a:59:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=006caae6-e976-4b85-81bc-febafe31ea99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:1b:b0:c3:75:34:4a:28:53:04:30:bd:3f:
                    f5:7b:ec:b4:79:90:b2:f9:33:a2:64:a8:78:d8:26:
                    9a:93:f0:c5:d6:0f:61:13:fc:81:30:04:8a:46:91:
                    78:0d:5d:e3:f7:8c:28:97:c1:19:05:09:19:4a:12:
                    ea:13:97:b5:ab:8b:e7:dc:a8:78:44:8c:df:d2:35:
                    5e:9e:86:d2:40:de:bf:cd:97:02:9d:cb:d6:2f:65:
                    82:73:91:5b:84:5e:96:cc:20:df:78:d5:9d:73:77:
                    b0:15:23:87:b4:29:26:55:0c:dc:ea:36:84:76:dc:
                    0c:2d:95:7a:98:c4:ef:b1:aa:f7:2c:6e:96:e6:f0:
                    3c:cc:85:69:5d:55:5d:66:07:cd:bf:5f:57:13:76:
                    75:e3:a3:50:ed:29:8e:fd:78:b6:ba:e6:a3:08:66:
                    96:83:1c:f2:20:f3:ac:66:a1:c6:61:25:89:ee:74:
                    ff:ed:58:ab:d8:f5:29:35:5c:d9:ad:28:7f:75:4e:
                    44:8c:62:07:08:b0:c9:ad:94:ce:83:1a:53:c2:3c:
                    fb:c0:96:29:3f:87:01:fa:c7:cc:19:28:d2:0b:ce:
                    7f:df:e7:a5:7d:e4:34:91:41:d4:e7:61:b9:25:49:
                    d2:31:4a:74:44:c3:49:43:58:7b:e0:ab:10:60:c2:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:4C:70:ED:E7:E6:42:33:6D:65:1F:70:E1:A0:69:71:C5:53:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a4be97c8-4c45-33a0-8f9c-9d81a9b9efd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.224.0/23
                  64.105.238.0/23
                  209.166.12.0/23
                  209.166.30.0/23
                  216.175.216.0/23
                  216.175.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:e2:1b:59:83:39:99:ee:38:03:6e:81:ec:ba:95:6b:f1:
         7b:a0:18:72:39:4a:37:7d:b1:f6:b0:6c:55:fe:14:06:42:b7:
         78:3a:63:0b:65:e0:87:93:8b:66:d2:7a:b0:6a:75:84:27:90:
         18:b0:d3:05:ac:d9:78:fa:26:3e:32:c1:e1:80:f0:9b:ce:2a:
         75:5d:10:c3:e6:d9:fb:aa:6d:19:38:84:fe:88:3b:00:57:12:
         46:a1:3e:99:91:a3:a4:2c:aa:ef:9e:bc:fe:5b:56:9a:c5:5a:
         67:1c:7e:23:2d:e7:1d:78:cc:b8:d2:4b:2d:1e:f9:5e:79:7e:
         9d:39:6a:61:a5:58:3b:98:66:a7:fb:47:9f:ed:ac:9b:76:c8:
         60:9e:df:e7:bb:85:01:f7:ed:a9:25:0b:b2:56:cf:3c:30:ae:
         1d:49:d4:e6:fc:e7:20:11:92:0b:5c:e8:96:04:e2:4e:3f:0b:
         fa:77:27:8a:bc:26:49:c8:39:bc:c8:b2:5a:91:f9:00:0c:35:
         2e:35:79:b8:7e:37:ea:22:23:6e:b5:ef:d9:a7:79:b7:b6:21:
         a3:df:c7:85:c1:de:52:c6:54:f4:d6:60:24:36:c2:f0:43:5a:
         46:2e:9d:69:fd:7d:36:bc:37:d6:65:b9:30:e4:8a:22:64:d4:
         c0:9c:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:46 2026 by rpki-client