Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40/63b87dee-9af9-3d03-9cd2-cb15bda6691f.roa
File:                     63b87dee-9af9-3d03-9cd2-cb15bda6691f.roa (raw, json)
Hash identifier:          /SMIdNjesJTvADWvoZUGMAzrGDIGCJdWucupTZ9Usmw=
Subject key identifier:   0F:DD:F8:F0:D4:64:C9:05:6E:2B:D3:04:51:A7:7D:BD:87:A0:97:9D
Certificate issuer:       /CN=8d69e098-42b3-46ae-9668-51a596432d40
Certificate serial:       010D0C9F4328584F85DE90B8CFA95AEF2A8EFAC0
Authority key identifier: C8:3F:CD:FB:4B:67:30:DB:E7:70:1A:4D:5F:51:7F:18:8D:AC:4B:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40/63b87dee-9af9-3d03-9cd2-cb15bda6691f.roa
Signing time:             Fri 16 Oct 2026 16:26:24 +0000
ROA not before:           Fri 16 Oct 2026 16:26:24 +0000
ROA not after:            Thu 14 Jan 2027 16:55:03 +0000
asID:                     400933
IP address blocks:        64.111.38.0/23 maxlen: 24
                          69.27.194.0/23 maxlen: 24
                          69.27.213.0/24 maxlen: 24
                          69.27.214.0/23 maxlen: 24
                          69.27.216.0/24 maxlen: 24
                          199.21.88.0/22 maxlen: 24
                          209.152.142.0/23 maxlen: 24
                          209.152.145.0/24 maxlen: 24
                          216.145.143.0/24 maxlen: 24
                          216.145.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40/8d69e098-42b3-46ae-9668-51a596432d40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40/8d69e098-42b3-46ae-9668-51a596432d40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:de:90:b8:cf:a9:5a:ef:2a:8e:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d69e098-42b3-46ae-9668-51a596432d40
        Validity
            Not Before: Oct 16 16:26:24 2026 GMT
            Not After : Jan 14 16:55:03 2027 GMT
        Subject: CN=2c7adcdb-e2e2-431d-a392-ee6831629d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:dc:88:c8:87:f8:7c:95:80:7f:e4:66:84:
                    cd:a4:04:25:8c:4d:44:fa:2a:e0:87:9a:98:82:0c:
                    57:57:61:58:6e:7d:68:b8:7c:f2:19:de:28:7a:c1:
                    74:66:8f:44:a1:4e:94:1f:de:d5:b6:f9:e7:a6:e3:
                    b9:98:92:40:60:d7:8f:3a:e6:d0:27:7b:e1:04:15:
                    af:d6:d8:cc:84:46:86:43:0f:db:ab:dd:12:80:b6:
                    df:35:c1:22:de:cd:a6:17:1f:a5:3f:67:e3:28:39:
                    4a:89:69:5b:c3:13:04:03:8e:cb:1a:e9:c6:d8:d4:
                    47:25:93:dd:38:5f:a9:9e:bb:4f:b1:8a:a6:4e:fa:
                    3a:80:84:a6:5d:07:6d:4d:dc:24:d3:a4:f4:c8:54:
                    e0:a6:90:7d:18:2c:32:73:21:22:c8:69:1f:0a:5d:
                    ad:28:eb:b8:cf:bf:f6:0b:f0:51:19:89:50:dc:20:
                    99:65:8f:17:c2:52:70:17:39:bf:44:93:3f:da:8a:
                    96:cf:f8:91:43:34:c8:33:33:62:b9:95:67:d8:e0:
                    8f:5a:d5:ef:71:ef:db:af:85:0d:62:4b:63:ed:7b:
                    f4:2f:08:6f:e3:11:16:3b:85:8e:73:d7:fc:d3:cb:
                    20:f2:c6:1a:75:c6:90:b6:ff:a7:6e:a0:c3:92:ca:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DD:F8:F0:D4:64:C9:05:6E:2B:D3:04:51:A7:7D:BD:87:A0:97:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40/63b87dee-9af9-3d03-9cd2-cb15bda6691f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40/8d69e098-42b3-46ae-9668-51a596432d40.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3F:CD:FB:4B:67:30:DB:E7:70:1A:4D:5F:51:7F:18:8D:AC:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d69e098-42b3-46ae-9668-51a596432d40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.38.0/23
                  69.27.194.0/23
                  69.27.213.0-69.27.216.255
                  199.21.88.0/22
                  209.152.142.0/23
                  209.152.145.0/24
                  216.145.143.0/24
                  216.145.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:5e:7a:4a:07:cf:ab:2c:c4:ea:03:9d:ed:bb:cd:ee:ba:
         ae:0d:cc:cb:f1:09:75:10:dc:cb:4f:6d:f5:44:a1:9d:17:ec:
         fd:51:18:17:61:63:96:78:ff:67:ce:45:dd:ea:22:cf:a3:55:
         ed:18:dd:a4:3a:44:5a:5c:0e:ee:37:e0:74:c8:59:c3:34:47:
         43:62:d6:e8:ea:90:4d:e9:a2:ab:e9:78:26:9d:3e:66:4a:a2:
         2b:3e:99:f4:43:8b:2b:54:d5:6c:e4:03:40:a5:83:cf:0d:6c:
         da:b4:7b:e5:31:fb:13:1d:1e:3c:d5:09:ed:aa:90:8e:d0:07:
         95:19:bc:36:a4:5c:ac:9e:e2:df:ad:ed:1c:26:20:4c:5f:5f:
         ca:6a:32:50:2d:5e:f4:eb:ef:65:51:f2:5c:6d:48:71:89:44:
         63:a1:0d:78:98:a5:de:6f:c3:ff:3e:95:32:94:0a:4a:81:c1:
         b8:21:1c:c9:a6:23:b3:97:94:2b:9d:b9:61:bf:ee:23:16:84:
         f1:dc:38:4b:05:30:92:ce:d9:e6:73:e7:18:19:33:a7:05:cb:
         3a:3b:4b:6b:04:88:7f:b9:c9:48:2f:cb:bb:74:d9:fe:a0:bb:
         77:ac:93:39:00:46:12:73:18:07:40:5f:e7:48:47:26:39:c9:
         04:8d:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 22:57:58 2026 by rpki-client