Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8f4cb89c-efd3-35fe-9ab5-ed561186680b.roa
File:                     8f4cb89c-efd3-35fe-9ab5-ed561186680b.roa (raw, json)
Hash identifier:          wFBPqrVgRYaEtzSZCu+snVGrL+5HlOGGxMbjv0buPKk=
Subject key identifier:   E2:E9:28:48:83:30:39:20:E0:5D:C5:C3:E3:AF:0B:73:45:05:29:0F
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584EC7A1D055946CF236AE919800
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8f4cb89c-efd3-35fe-9ab5-ed561186680b.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     14990
IP address blocks:        64.240.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d0:55:94:6c:f2:36:ae:91:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a3052781-68a3-42fe-987b-c77790f2b8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:13:91:bb:d5:de:21:db:fb:c9:ea:ab:b9:
                    40:51:ef:57:c6:ea:e4:31:f7:00:01:6c:3d:11:60:
                    71:af:3d:fa:e2:41:28:45:e6:31:90:99:4b:4c:c7:
                    83:81:21:7f:d1:9e:58:85:ae:af:19:f6:e4:66:a6:
                    61:de:d3:50:f4:75:47:f1:16:08:9a:9a:70:0d:31:
                    4f:fe:43:01:d1:ab:ff:84:9b:c7:d7:7b:3a:68:7d:
                    e3:ca:f7:0a:a1:93:41:3d:ba:9f:1d:aa:81:45:21:
                    2d:86:c4:39:f9:55:49:03:7c:46:25:c1:a8:b5:77:
                    22:d9:8f:3b:df:c8:76:ed:81:d3:32:4a:90:9b:09:
                    78:d3:72:58:79:76:b3:6d:e4:42:4b:be:db:e2:9a:
                    22:4f:0b:03:8f:a7:14:48:72:e6:6a:fe:38:d6:58:
                    5b:26:ff:ad:b0:91:fd:ee:a3:88:b8:14:b7:5f:80:
                    d1:64:60:f5:64:b6:7d:78:6b:6b:5a:23:94:b0:49:
                    61:2d:7e:64:52:4c:b9:11:0c:47:12:76:d1:90:c3:
                    30:22:bc:19:e6:b7:4f:12:a6:aa:1b:35:13:92:76:
                    6d:c5:e1:33:d6:e7:0a:68:bc:9c:cf:84:73:ca:ff:
                    74:e2:96:1a:c5:2f:bd:f9:6e:59:67:c7:7e:2c:22:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:28:48:83:30:39:20:E0:5D:C5:C3:E3:AF:0B:73:45:05:29:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8f4cb89c-efd3-35fe-9ab5-ed561186680b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.240.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:46:37:24:5c:09:cb:fe:4d:8c:96:9b:48:8d:7c:6d:59:64:
         90:61:66:55:a4:46:de:ce:e7:b9:7b:89:ec:49:32:87:35:52:
         0b:76:6b:ba:06:35:c5:7d:77:90:26:d7:9c:3d:05:e9:e6:6a:
         82:4a:03:20:aa:2f:97:a1:e7:be:51:db:f7:82:93:9e:ea:ef:
         9a:14:ec:4d:21:4c:2f:a1:87:38:66:e1:ae:81:9f:af:a8:3d:
         4f:8e:ea:45:27:65:5d:74:9c:61:cc:14:3a:4b:61:0f:43:cd:
         87:f9:fb:ce:f0:49:55:c7:ab:e9:f6:e4:cb:3e:a1:49:18:59:
         b8:76:5d:e4:aa:8d:ef:5b:55:84:d8:f5:70:65:f3:fd:fc:59:
         0b:3c:97:72:19:5b:61:6f:cd:ad:d8:28:a1:63:36:a5:1a:27:
         b0:88:1c:5f:ee:3c:e9:eb:22:78:f6:c2:1a:ba:de:ea:84:77:
         e3:7b:40:c2:14:5d:5e:c5:5b:0b:e4:70:b4:a7:50:2e:77:20:
         a7:5e:e1:db:c3:36:8c:b5:28:ca:b2:62:85:27:dd:09:84:cb:
         4c:6d:ac:68:31:9d:68:02:5c:39:fa:12:34:cd:dc:7d:75:71:
         a2:ae:aa:c0:fb:06:2d:6e:d3:9f:2e:11:dc:55:dc:e1:a9:e8:
         f5:6c:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:07:39 2026 by rpki-client