Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3d5db6c-386e-36b6-96a9-bf38eee384de.roa
File:                     f3d5db6c-386e-36b6-96a9-bf38eee384de.roa (raw, json)
Hash identifier:          0Yq1YV5xY5ewMxaeSimU19Vp5vf0qMV/MNKJjv0nGFs=
Subject key identifier:   B6:F2:39:DC:B9:30:E3:C7:E1:E2:FA:59:E4:E5:00:A2:3C:59:75:63
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E8DEF96E5EEB8AE06D30375E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3d5db6c-386e-36b6-96a9-bf38eee384de.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     399955
IP address blocks:        64.93.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:96:e5:ee:b8:ae:06:d3:03:75:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=b1d74e2e-1a6a-4ea8-b1bb-2081ec4ee8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:6b:01:1b:c1:28:9f:68:e0:14:a2:72:d7:
                    bc:bf:4d:fd:6b:66:11:55:f4:f8:09:cb:21:bb:2d:
                    28:76:97:eb:d0:f8:eb:d3:81:c9:9c:7d:07:55:cf:
                    5d:5a:03:97:4e:e1:a9:7f:31:10:7d:69:3c:1c:16:
                    39:02:41:08:83:c4:58:9a:87:87:9c:0e:85:cb:41:
                    2f:01:76:52:0d:7d:bc:a1:5c:36:5a:7b:1a:2b:da:
                    66:b4:bb:20:5e:0a:a0:8d:39:e8:69:31:50:46:6d:
                    10:5c:ee:e1:55:e2:ee:2d:e4:4e:04:47:f3:3e:34:
                    be:77:a9:f0:af:90:0e:d4:89:ca:1a:75:94:b7:8b:
                    52:7f:83:dc:e4:c3:53:53:b5:17:ee:f1:82:82:6b:
                    7a:a6:92:e0:cc:06:e8:d9:b0:c3:79:ed:69:f4:e2:
                    9e:7f:ac:fc:77:ca:69:18:a1:ed:32:48:17:af:00:
                    79:07:f4:b0:00:50:f1:4c:f7:6f:20:c3:6e:ac:13:
                    d8:7c:50:10:1e:70:b1:3a:d9:b0:c2:4f:89:1f:ed:
                    94:df:71:de:40:50:68:98:ca:49:ae:b5:4b:2b:a2:
                    e5:ec:32:7c:1a:ab:a6:e9:5f:14:41:8b:90:61:9e:
                    f5:22:b0:de:b4:7e:33:4f:f6:85:44:22:83:8a:28:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F2:39:DC:B9:30:E3:C7:E1:E2:FA:59:E4:E5:00:A2:3C:59:75:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3d5db6c-386e-36b6-96a9-bf38eee384de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:11:d4:e4:53:52:75:4e:66:36:82:79:7e:92:c9:a9:3a:
         1e:7f:5a:2c:26:35:13:99:32:85:7e:13:92:41:3f:90:a5:b2:
         94:d3:05:ff:ee:d2:f0:f1:bf:76:cd:3e:87:7d:84:5a:b0:c1:
         07:db:ae:e2:58:3c:a7:6d:06:13:ba:39:7c:0c:8a:d9:b9:f9:
         4b:d7:5b:79:96:44:ea:9b:4e:55:37:c5:7d:8d:b5:41:d7:c8:
         5a:cf:f0:a3:27:1b:93:fa:1e:4d:ee:67:a0:b4:ea:2a:d6:7c:
         0e:21:4b:2f:de:1f:82:05:9b:b8:07:25:35:ba:27:64:43:02:
         f7:b4:de:1e:88:76:69:7c:0e:f0:91:6d:55:41:01:ed:77:67:
         4b:77:b7:9c:6e:ce:55:f5:21:c1:64:88:7b:36:e8:0c:ae:30:
         e7:08:c9:b8:c5:3b:8d:ec:9c:3f:e9:57:35:ee:cb:93:b0:fc:
         b7:bd:66:99:1c:6a:2a:6f:a7:22:c3:40:65:74:d3:b5:fa:7f:
         c4:15:7e:8c:46:12:d4:7a:b1:19:71:6a:79:88:ca:de:58:95:
         b8:8c:cb:13:59:d3:e9:4e:81:74:1f:e9:c5:d8:82:18:1c:93:
         40:a0:04:82:ce:e0:ed:16:64:2b:9b:ca:cc:0d:7a:43:25:ba:
         17:2b:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:22:23 2026 by rpki-client