Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa
File:                     9faef993-81b7-3486-a305-4bb2df44e2a6.roa (raw, json)
Hash identifier:          WWvqwLzUn2nOtnsJXQZvt9yL3wcSMHhvNx36APXgscY=
Subject key identifier:   A0:0B:52:6C:2F:22:6F:C5:DB:71:32:41:2B:C5:86:70:31:16:C7:ED
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F4328584DF0AB42454AA99A2AA35D1AC0
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     55039
IP address blocks:        64.190.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:42:45:4a:a9:9a:2a:a3:5d:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=a3038df4-64df-49de-89cc-0b440adbcd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:15:b4:ed:89:eb:c1:c9:b6:95:96:ec:79:
                    5c:76:6b:50:aa:fa:58:99:89:2f:93:fb:d3:a5:b6:
                    40:e1:18:18:59:2d:7e:52:76:69:bc:12:70:ce:be:
                    ca:a8:30:4c:77:1a:03:10:4e:6a:7d:ff:8a:fb:ab:
                    43:58:31:a9:48:56:ea:bd:7b:c9:d6:f9:d5:4d:f5:
                    93:64:99:7a:ce:95:bf:92:85:d0:2a:4b:8e:5c:96:
                    1b:77:5e:63:83:68:0a:44:b7:7d:bb:39:f4:26:2c:
                    26:02:0e:e6:d2:37:6e:d5:44:36:54:87:8d:ed:42:
                    81:12:53:d2:ac:5f:94:1c:6b:b0:c8:42:77:31:fd:
                    be:db:b1:2c:f9:3d:fe:1c:25:2a:d7:9e:60:f0:c3:
                    71:7d:8a:cd:02:83:3b:7b:cd:cc:e4:7b:10:23:57:
                    de:dc:3a:de:3e:ea:90:76:a4:e8:bb:10:b3:42:49:
                    65:c1:98:f9:ef:44:25:b7:a6:6a:db:d5:9f:ee:7c:
                    f7:f8:34:a5:cf:60:73:59:09:49:96:7f:1f:7d:5b:
                    31:e4:70:16:7d:67:bb:8f:05:67:a0:c9:50:3a:5d:
                    3a:f4:74:dd:79:90:f8:d6:b9:5e:e3:76:ef:0e:a8:
                    66:e3:36:c6:f0:fe:37:2f:54:f7:5e:a0:d0:1d:75:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0B:52:6C:2F:22:6F:C5:DB:71:32:41:2B:C5:86:70:31:16:C7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/9faef993-81b7-3486-a305-4bb2df44e2a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:0c:56:df:50:ff:40:f1:e9:79:63:35:e4:68:fc:47:c1:1e:
         49:e1:fa:4a:a0:ca:cb:f1:fc:8d:ae:46:34:43:24:b7:e9:35:
         8b:3e:e0:50:8c:72:d9:9b:8b:da:ab:6b:57:4f:87:33:3a:49:
         9d:4e:ca:91:98:44:d3:ce:9f:29:ae:7d:49:e5:01:fc:bd:ed:
         d6:22:df:91:7e:c7:32:1a:b9:65:0a:de:c0:b6:b8:32:53:6b:
         35:4d:53:ca:f7:4f:b6:77:c1:e6:a0:a9:a4:6b:5d:89:f7:40:
         00:6d:49:50:11:b4:bd:37:22:2c:dc:9a:df:b3:3f:e4:0f:f5:
         2d:4d:71:a7:e4:cb:a0:a8:f3:81:3d:31:b9:28:35:d4:1a:7d:
         91:7f:bb:16:0a:f4:ec:6e:41:88:da:7b:cd:b6:0c:0b:2b:0d:
         15:45:b5:e6:36:ad:22:a9:4e:57:94:c3:ba:bc:da:19:e2:9b:
         74:ce:7b:88:51:4c:f1:c0:85:1a:1d:91:b8:2e:78:d9:4f:3c:
         8c:cf:3f:d9:b2:70:db:57:24:f1:52:aa:75:af:2e:e4:9a:c7:
         b2:26:90:a5:e0:02:5a:df:c9:f8:66:4b:b5:ca:e3:38:07:b0:
         4f:b5:43:fd:8f:70:11:08:79:f8:a4:cb:36:6e:8d:23:27:00:
         61:25:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:16:53 2026 by rpki-client