Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa
File:                     efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa (raw, json)
Hash identifier:          WlL3an5raWxTkqL1/Qs5gQHNY1//JtihIDI4FQQef3M=
Subject key identifier:   6F:64:2E:B9:D1:A1:C8:7E:87:01:1A:57:B6:67:4B:87:01:33:32:C2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DBFD0A4AA556648459182C140
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     401783
IP address blocks:        209.101.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:a4:aa:55:66:48:45:91:82:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=4fb3efac-8ac9-438e-8c52-226e7110028e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:d4:35:c7:e3:db:78:d9:65:84:9d:ba:4c:
                    de:dd:fa:f9:04:dd:4b:a5:3a:0e:5f:86:13:22:8f:
                    a8:f1:4b:d5:9f:ea:5f:42:18:96:e7:c7:d2:d0:b3:
                    63:06:cb:45:f0:ee:ea:e9:61:93:b7:2d:40:be:9f:
                    c9:ae:43:7e:a1:57:65:c6:db:96:d4:3e:a3:70:5b:
                    7a:92:b2:c4:92:01:39:8b:67:de:b8:e5:a3:1a:3f:
                    ca:ce:62:9e:f3:03:0c:57:09:54:ba:e7:6c:e9:59:
                    76:74:52:3d:79:77:6e:33:d1:f5:42:75:1d:a0:33:
                    0e:98:23:3f:a1:0f:3e:40:a7:f8:33:d1:9f:8c:a8:
                    6b:3a:bd:6d:c5:2d:89:0d:02:05:da:1d:1e:d1:ae:
                    6f:4a:3a:ae:5e:05:88:44:b3:e6:35:c1:dd:2c:ae:
                    7c:be:f9:a3:82:f9:a6:f3:28:32:99:fd:7a:01:ed:
                    fe:58:11:1c:d5:bb:9c:b2:b3:01:a7:f5:19:69:8a:
                    46:e1:0e:dd:06:94:e8:95:c7:87:8c:e3:51:a6:54:
                    e3:39:f7:db:26:93:c6:bd:5d:c6:75:05:ca:61:57:
                    fe:df:24:6c:a9:e3:33:3f:77:2e:e8:a6:18:c5:b9:
                    a2:a6:55:b0:49:59:1f:99:f2:6e:40:a5:2c:da:52:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:64:2E:B9:D1:A1:C8:7E:87:01:1A:57:B6:67:4B:87:01:33:32:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:cd:f3:09:ff:08:fb:c7:94:58:a0:31:86:3b:cd:07:26:
         36:8c:3e:6b:ed:e4:91:fb:bb:aa:4d:d7:df:06:91:84:b1:73:
         f4:b4:20:f2:70:5d:bd:7c:42:77:67:60:74:95:46:de:24:c7:
         76:40:75:15:72:11:ae:02:9f:7d:5e:6c:2a:e4:a9:c8:98:f7:
         a4:72:a9:e0:cc:11:8a:4d:e6:6b:f4:56:d2:b9:6b:fb:b6:46:
         f5:37:5a:1b:34:54:d8:dd:17:a6:2f:f3:54:03:44:f1:9e:c3:
         7c:df:ab:bb:87:ae:96:d3:e9:ab:63:a8:0b:77:7f:d3:06:71:
         a7:2f:11:ec:3c:3d:83:7f:3c:f5:b0:0c:c8:5f:bf:c4:42:8a:
         3d:18:0f:53:b0:6c:9a:51:df:90:81:59:11:01:75:c4:7b:66:
         18:0c:b8:58:e5:74:ab:12:83:5f:58:e6:86:c0:11:9d:c4:05:
         25:79:f0:94:31:56:65:7c:cd:95:8c:d5:5d:45:d1:6c:a0:3a:
         b8:f0:ca:e5:e0:db:0f:4b:a0:be:77:df:bd:3f:14:72:b0:7a:
         b6:7d:4e:ce:b0:eb:31:ab:cd:b8:55:32:f1:68:ef:19:54:7b:
         6b:8b:06:cc:69:4c:a4:fa:f7:df:3a:af:93:c0:8c:b3:7a:ae:
         30:dd:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:02 2026 by rpki-client