Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
File:                     ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa (raw, json)
Hash identifier:          +s/DD9JTHFGoqxQR7tv8RauUldzwMfq3v32ymrqfbKQ=
Subject key identifier:   D2:0B:6B:72:E5:0B:CD:4C:84:38:49:53:30:F6:24:DF:CC:49:ED:EA
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584F5A32D9DC999F3C10E9516A30
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     396253
IP address blocks:        97.64.56.0/22 maxlen: 22
                          104.225.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:d9:dc:99:9f:3c:10:e9:51:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=722e364f-0c42-4a4c-85c2-927a4722ca8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:c0:2c:7c:85:60:dd:49:54:9f:42:6a:7d:
                    ec:b2:71:a3:5f:0f:47:26:ec:6e:26:20:9f:a1:70:
                    30:df:03:fb:8e:2d:76:5f:2e:13:b4:1d:cb:c3:95:
                    71:81:01:36:b5:31:8a:86:cf:a8:bb:9f:b0:4d:05:
                    43:a5:3f:dd:a2:d0:02:d8:25:5b:e7:80:e4:75:f5:
                    10:8d:bf:90:51:dd:ff:f4:a6:dd:0d:68:72:b2:99:
                    16:35:2c:18:44:03:8c:7d:52:14:9a:e9:54:4c:2b:
                    1c:03:11:4a:07:71:78:f1:11:ff:46:c9:46:a5:68:
                    39:39:64:61:6f:6e:01:cd:98:23:a3:35:47:fb:79:
                    f3:a4:b3:0c:4e:0f:00:0b:51:73:51:d8:40:c4:d5:
                    e2:79:27:ff:ac:a8:13:f1:ac:5d:60:7c:d0:f9:9b:
                    d5:6d:c7:38:8a:2f:31:41:17:32:fe:73:f6:6f:ad:
                    d0:c8:8b:7b:91:86:2c:d3:69:a6:ac:d3:ce:cb:a8:
                    1c:03:f8:3c:4f:2a:7e:02:71:cf:62:4c:60:b6:82:
                    16:bc:e9:87:81:be:2a:3e:7b:85:39:77:97:c6:d0:
                    11:91:a1:07:42:57:0d:54:28:8d:0d:51:3b:1d:40:
                    82:52:b0:53:70:f7:d1:e9:b5:98:f9:78:af:6f:0f:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0B:6B:72:E5:0B:CD:4C:84:38:49:53:30:F6:24:DF:CC:49:ED:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.56.0/22
                  104.225.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:a9:17:00:45:cc:f4:77:98:3d:ab:c0:69:e4:c9:8c:dd:
         69:5c:df:bb:a0:a7:55:8c:19:31:cc:7b:e4:04:cc:b1:24:be:
         48:97:ab:90:a8:ba:db:39:e5:a5:db:66:97:f4:07:88:54:45:
         79:24:1f:ac:85:d0:49:52:70:ab:29:05:14:95:d6:85:c2:ac:
         ed:86:86:b0:6c:68:00:d7:6c:68:d7:7f:f4:53:ac:73:3f:b1:
         6f:c7:96:e4:be:c2:47:77:21:b3:e3:b3:1a:c8:9f:9d:c5:32:
         ff:2a:5b:80:4d:47:54:04:6e:17:18:c9:28:64:1a:63:4d:e2:
         a3:55:68:bb:7d:79:46:47:c7:7b:12:36:56:c6:07:2d:68:c1:
         65:65:c8:d7:7c:0c:8f:a8:c8:0f:e3:d1:fb:07:89:de:4c:b7:
         82:ee:ec:c4:70:34:fe:64:c1:ff:15:b4:7b:38:76:c4:df:86:
         1e:e2:d9:53:05:a6:64:bb:78:17:a3:9d:50:2a:11:89:f5:7a:
         e1:72:1d:ec:62:25:e1:22:0d:34:10:58:18:29:2a:b2:25:63:
         7e:90:15:73:ea:07:e0:29:fa:c0:f4:e1:95:90:c6:4c:23:bb:
         d6:27:2d:50:b8:e4:d6:6a:16:16:18:5e:75:66:4d:e4:a7:56:
         26:fd:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:21:18 2026 by rpki-client