Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20f7e4be-0556-30d8-b9ae-3c1383c74f23.roa
File:                     20f7e4be-0556-30d8-b9ae-3c1383c74f23.roa (raw, json)
Hash identifier:          f+e3yAVUV92Af2LWQLaTqyALVCzeBF4yAgnCeHp1jSs=
Subject key identifier:   EF:27:B7:21:C3:8E:CB:77:82:C3:46:55:68:9A:99:66:E1:BD:CB:22
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F55904BF27B67B80BD4C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20f7e4be-0556-30d8-b9ae-3c1383c74f23.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36522
IP address blocks:        207.164.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:55:90:4b:f2:7b:67:b8:0b:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=40f6640e-0b1f-4eac-90ef-55d8a1a1b8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:7f:4a:d5:64:82:8f:f6:31:8e:15:83:cc:
                    52:ba:8c:a9:91:29:e7:5f:8e:ca:52:eb:7c:b5:36:
                    6d:9d:49:ae:16:62:ab:35:d6:81:ae:db:ff:f5:3f:
                    a8:4b:ad:1e:8f:63:39:90:2f:e3:6d:b4:76:9f:de:
                    80:79:e3:27:a6:4e:67:b8:4a:c2:23:df:e6:59:15:
                    21:1e:3b:ec:b5:2b:ef:a3:11:27:9b:cb:67:a9:47:
                    24:a5:ec:42:bd:ca:9e:85:38:d4:57:e6:2e:ce:99:
                    c8:7f:f7:dd:ac:ae:1d:39:35:42:1e:8c:bd:4b:6a:
                    2f:07:8c:b0:fe:78:2a:10:04:30:67:ae:2a:4e:a6:
                    68:71:ad:d0:26:d3:a6:09:bd:92:2b:ba:83:83:3a:
                    5f:c9:d7:d4:43:a8:cd:9b:79:a1:ea:21:e2:b9:1e:
                    e5:ab:86:b5:db:88:df:cf:ad:80:bf:b9:68:57:ee:
                    cf:85:e8:98:8c:53:9e:2a:28:2e:4a:53:23:16:d4:
                    8a:0d:69:89:73:6f:1e:83:30:a9:0e:c7:dd:47:5a:
                    a7:37:6f:ff:8d:04:4d:95:59:b1:3d:93:4f:50:b6:
                    17:12:42:91:14:12:47:f3:b6:9a:d8:e3:2d:bd:c7:
                    a6:da:94:36:02:ab:2d:dd:20:ca:9c:f4:14:f9:0c:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:B7:21:C3:8E:CB:77:82:C3:46:55:68:9A:99:66:E1:BD:CB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20f7e4be-0556-30d8-b9ae-3c1383c74f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:43:05:8d:bc:e9:84:b7:60:50:ce:eb:52:84:a3:27:c7:
         7c:df:f5:8a:39:2c:c0:e8:29:18:20:98:61:3e:a3:ee:e2:b8:
         ef:c4:fa:15:06:50:d3:ef:07:4b:d9:e9:d6:54:49:65:88:04:
         8f:6e:ed:88:0a:4e:9b:75:8c:70:4e:de:ce:03:6b:11:5d:3d:
         36:4b:b3:a9:aa:c3:4a:c9:2c:98:90:8d:71:1e:21:27:ff:64:
         76:03:92:41:25:92:a6:80:9d:91:b1:53:83:d4:8c:c4:e3:5e:
         59:31:38:a9:6c:f2:3a:c5:00:ca:da:0f:a9:97:b7:fd:a6:e5:
         6d:63:88:9e:99:e2:90:47:40:55:9f:e1:9a:61:e9:1a:bd:fd:
         07:34:39:ab:9b:41:15:1e:7b:cf:ae:9a:28:2a:9a:21:d9:63:
         42:6d:ab:bc:fd:ea:03:c9:53:f4:b9:ea:c0:00:59:86:8e:82:
         c5:62:27:14:bc:fe:d0:18:a2:9d:5e:f7:5c:38:20:e1:4b:9f:
         0e:12:aa:74:99:af:79:7a:85:19:b4:da:4e:e9:8c:11:a5:68:
         cc:56:5f:3d:ae:bd:15:fc:36:5c:39:ce:bf:1c:43:85:e6:e8:
         cf:44:a9:ec:92:fa:50:7c:71:8e:9e:d2:97:0b:7a:b8:4d:ad:
         86:44:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:42 2026 by rpki-client