Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa
File:                     8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa (raw, json)
Hash identifier:          P4EdiEuodqjzQ5I2fBnFka6rHbYgVH/3Kogra5CRyTw=
Subject key identifier:   D2:B4:8E:FE:71:02:41:B9:B7:19:53:4B:BE:06:88:5E:8E:A2:06:3F
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584EAA51A1408C792100A7BADA00
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     46261
IP address blocks:        64.79.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:a1:40:8c:79:21:00:a7:ba:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=18460046-86a4-48e6-b2e0-e97a3a80aeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:e3:d8:f3:ed:2a:e0:44:54:cb:f5:84:e1:
                    67:f3:19:89:cc:c0:a8:27:4f:c0:e5:b2:51:d0:96:
                    96:6b:2e:95:92:40:23:74:25:20:2f:1a:cb:1a:13:
                    32:15:33:78:49:a9:30:2e:a1:1d:7a:8e:e5:3e:7c:
                    c7:58:c1:2b:25:ff:1b:ea:5c:28:f1:ff:31:e0:20:
                    ff:43:3b:0c:fd:65:f2:c1:84:30:17:61:2b:c2:2f:
                    8a:1d:11:6f:41:2f:3b:87:4e:22:5d:c0:a4:06:e9:
                    98:61:37:80:c3:65:18:73:e6:7b:bd:1d:b4:a8:a9:
                    e2:24:a9:17:fa:8f:e1:2d:93:af:70:70:97:7f:b0:
                    7f:90:c6:86:83:aa:f3:a1:8a:5b:cf:b5:05:c2:73:
                    dc:2f:69:d2:8e:64:4e:54:97:e1:4d:26:21:23:02:
                    1a:06:b4:b1:62:1f:5c:a2:83:ff:fc:3b:fe:db:ea:
                    10:84:b7:80:9e:09:d6:ec:c6:20:68:bf:62:60:56:
                    cc:92:5b:45:25:2b:32:6d:2c:53:f8:4e:4f:5a:40:
                    89:d3:33:89:aa:06:0a:a4:c9:f3:00:e0:59:11:7d:
                    a2:b4:e3:21:71:55:d7:1e:ab:76:11:11:ef:5e:48:
                    f9:1a:45:cf:7f:ea:7e:e4:69:f9:30:09:4b:05:fb:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B4:8E:FE:71:02:41:B9:B7:19:53:4B:BE:06:88:5E:8E:A2:06:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dd8a8f4-b21e-34cf-a3eb-73c9b35e38ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ff:32:89:ea:e6:92:87:cd:ae:3f:ec:28:1b:7b:be:e6:5b:
         1e:94:62:04:32:4c:9c:fc:42:82:b4:ef:3f:2d:38:96:e2:8a:
         ff:ae:33:e7:79:eb:46:0d:50:85:7a:75:72:cf:b6:ca:6a:2a:
         53:6e:ab:14:7c:27:d7:50:14:fe:d7:70:25:e1:76:45:fe:b9:
         30:16:f3:6f:52:24:6a:37:67:a8:86:48:1c:39:f0:33:5b:a1:
         54:9a:92:e1:20:25:d5:4e:5f:f3:bc:8b:fb:4f:20:a4:3f:14:
         b8:ef:ac:2b:7d:77:10:d4:99:bd:87:bf:96:6f:0d:7a:13:c6:
         65:52:7b:95:1a:a2:fd:60:6e:92:44:b4:f6:5b:60:18:dd:35:
         1b:6c:c0:44:dc:9d:e8:70:c0:63:df:90:69:15:eb:91:e0:64:
         07:b6:a8:de:f8:30:f5:74:94:31:91:b5:9a:b3:76:2d:8f:3d:
         37:e6:71:e6:2a:7a:94:b4:c2:bb:fc:22:d0:c8:92:cc:1d:67:
         6b:29:d6:6c:db:12:c2:73:f0:81:e8:6b:3b:bf:23:d8:04:9a:
         db:a0:66:fc:bc:73:a6:6f:98:b4:92:81:02:24:7f:01:f8:13:
         66:da:9a:28:68:f0:94:0e:3f:76:8b:91:f0:72:c7:7f:23:ba:
         80:55:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:44 2026 by rpki-client