Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa
File:                     ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa (raw, json)
Hash identifier:          dDAuyDDPMpmeHnOnYmjDphJSRaqwiazUI4iLoilioHA=
Subject key identifier:   09:79:F6:09:D5:C9:83:81:43:4A:CA:C3:99:17:BD:11:FA:35:C9:97
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584D09126316BBA15754BABFA980
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     22351
IP address blocks:        64.88.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:63:16:bb:a1:57:54:ba:bf:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=eb01f8fe-b8a2-429c-8216-8cc66b6695cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a5:08:06:ad:91:9f:21:5c:20:1b:ca:39:8c:
                    1e:64:46:9f:56:8f:34:0f:14:26:be:1f:f1:59:93:
                    e2:e1:97:22:d2:9d:28:d7:ed:7d:03:06:7c:ec:6a:
                    84:97:0e:19:ca:89:15:3f:9f:64:ae:04:10:8e:36:
                    c4:1c:0e:53:7f:42:8b:6a:ec:27:b2:39:78:75:01:
                    a8:6d:83:2a:ce:a6:68:cd:53:10:47:5d:52:7e:cb:
                    35:72:6f:2d:c2:b0:29:66:8f:89:c4:af:c3:60:64:
                    8b:d4:14:17:77:88:38:57:c6:58:91:f1:e6:b6:81:
                    89:3e:0d:e5:d9:df:b1:db:c5:75:d5:15:21:42:6e:
                    86:93:02:84:da:07:90:9a:0d:95:32:a1:b3:da:e0:
                    3a:73:04:b9:7b:0a:e1:3c:59:72:a4:4c:e8:5e:12:
                    42:dd:eb:bd:84:ee:87:fe:4b:ee:b4:77:85:81:a8:
                    90:32:91:7d:97:3d:49:92:73:f0:1f:49:eb:2f:80:
                    fd:ad:d1:95:a8:30:e1:62:68:f5:a6:2a:4c:ea:fe:
                    91:52:ac:9b:2a:01:2b:f6:92:eb:9e:93:95:98:93:
                    23:7a:c5:4b:03:1a:53:18:aa:e4:2d:b3:69:47:c5:
                    a4:f5:d9:e8:9a:4b:3f:7f:e3:9a:c0:2a:40:15:66:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:79:F6:09:D5:C9:83:81:43:4A:CA:C3:99:17:BD:11:FA:35:C9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/ecba00a1-5ff9-3fa7-acc7-dd2cda3146c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:60:11:12:7e:f0:c2:93:bc:8f:be:64:82:28:be:74:db:
         42:3c:41:5d:70:54:87:a8:c0:c4:57:ad:09:f6:56:34:0b:0e:
         37:21:51:75:b6:07:af:d8:60:b1:ec:9c:c1:d9:de:e5:ad:2e:
         07:ec:2a:26:62:ec:3c:16:a8:d8:a6:82:93:78:40:cf:e9:73:
         a6:85:c3:ba:ea:f7:91:2a:99:6f:b7:7f:38:db:23:de:96:e2:
         a2:b2:0f:61:a3:94:57:5d:57:51:71:c2:4c:ba:1b:04:f1:9d:
         24:ba:2e:54:4f:78:8e:3e:33:1e:aa:e5:f8:e1:56:25:67:02:
         dc:a6:94:b1:6f:8c:d7:bb:cd:64:33:2f:7d:ec:4a:8f:76:a5:
         50:65:36:de:b0:a0:1b:55:ee:a4:79:ac:1a:77:2c:70:f7:d0:
         c5:20:38:7c:3e:fe:de:c8:b7:0e:f6:61:57:f1:c5:34:dc:91:
         96:ed:a5:47:8a:dd:8c:6d:12:2d:f1:fc:3f:81:3a:a2:9e:c0:
         bd:60:35:2e:27:b8:4d:f0:17:ce:ea:fc:56:9e:1f:e8:82:d1:
         af:9b:33:8c:c8:e0:d0:ff:1a:c7:c9:26:d7:71:98:7c:17:13:
         f0:50:0d:63:00:ae:03:26:88:a7:55:d4:48:ca:24:f0:ce:b3:
         08:2d:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 14:00:27 2026 by rpki-client