Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/e964b687-ce5c-3b0b-a322-f0559837fb1e.roa
File:                     e964b687-ce5c-3b0b-a322-f0559837fb1e.roa (raw, json)
Hash identifier:          2VMyZIDNYCqHOxQemvi84SR2ghqREjNg5j75OWiEnbc=
Subject key identifier:   91:FA:C0:9A:7A:34:3D:98:2C:90:D6:FD:7B:1C:FC:B0:C2:3E:77:DE
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584EA788C63F89156374469D3740
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/e964b687-ce5c-3b0b-a322-f0559837fb1e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4511
IP address blocks:        64.56.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c6:3f:89:15:63:74:46:9d:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=85a44bd4-5fb6-4f7c-b1a2-dc1d8fc053d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:75:d8:4e:18:7f:8f:89:c6:05:92:83:ce:
                    84:0f:ca:0c:b3:e9:69:08:2b:f9:7c:fd:e4:7e:90:
                    16:40:14:a6:c5:be:74:bc:14:80:dc:3e:2b:8b:61:
                    b9:50:7e:92:2f:01:43:68:90:9b:76:b2:6a:25:f0:
                    d8:98:6c:2a:ce:72:f6:a9:94:c1:76:02:90:8e:cd:
                    9c:61:84:71:35:8a:01:16:22:b4:80:52:5f:55:45:
                    0d:2e:2d:a6:5b:60:e4:ee:f6:e1:9a:15:2c:e3:7e:
                    e4:c3:0d:9e:ee:be:eb:ed:3d:5e:ff:b2:94:a9:d1:
                    d6:cb:45:64:ef:a5:a7:66:5f:d2:f8:90:1c:ec:2e:
                    7d:71:2d:ba:68:15:e1:3f:00:da:aa:1e:78:ad:51:
                    ec:cc:d7:34:bc:94:d3:01:4e:77:32:ea:e4:f0:c0:
                    a2:c9:2a:ac:0c:53:14:51:d1:1d:62:b9:e5:68:f6:
                    01:61:f0:69:ec:8d:14:81:90:aa:8a:9d:ee:20:0b:
                    17:6c:d4:1e:41:f0:af:c7:f0:73:31:73:67:3b:f7:
                    c5:10:a8:c4:62:2f:35:5a:46:6e:60:14:90:22:59:
                    02:ef:37:d2:bd:d6:e5:a8:fd:a4:e6:d7:30:72:65:
                    f0:d2:d8:14:93:f4:c4:df:82:4c:ba:26:73:db:0e:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FA:C0:9A:7A:34:3D:98:2C:90:D6:FD:7B:1C:FC:B0:C2:3E:77:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/e964b687-ce5c-3b0b-a322-f0559837fb1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:76:51:09:79:30:f1:af:9b:48:12:65:76:f1:57:63:4b:
         85:20:a3:21:7d:1f:98:33:c7:1a:8c:4d:33:01:13:e1:23:cc:
         85:14:b3:e4:9b:ad:cc:69:c2:c9:83:58:84:4b:20:ca:3e:1b:
         f1:e5:11:f0:1b:05:8d:f9:28:52:e4:97:31:4b:bd:5b:b7:25:
         88:f8:2e:06:2e:07:3a:fe:26:b4:d2:3b:6a:34:92:bb:22:35:
         ef:45:52:4d:16:38:45:1a:79:72:c6:fc:8e:35:17:0a:66:fd:
         50:c7:1a:ab:33:0b:f5:0e:4a:5e:4b:9c:bc:b5:a4:00:9b:c9:
         ca:7d:f3:43:90:02:e7:26:63:a9:f8:c6:27:30:17:8a:5e:ba:
         01:f1:f5:d8:09:dc:fe:6f:92:14:37:c2:42:cc:ac:68:59:73:
         89:e8:40:1f:fd:42:e0:2a:6f:b9:53:e6:e6:1f:7c:7a:a0:39:
         f5:ec:8e:ee:05:cb:97:45:19:0e:96:b3:61:82:46:f3:e7:28:
         27:8c:77:df:bc:2a:41:1b:c9:cb:6f:86:1b:aa:3b:17:4b:0e:
         a3:f2:63:81:f0:07:3b:b3:62:2f:5f:a5:af:e4:c6:74:66:7e:
         25:eb:eb:8b:65:f9:d1:70:80:8a:9d:25:82:ea:ab:42:d1:7c:
         5e:03:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:08:37 2026 by rpki-client