Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
File:                     0327aa02-52d2-3d16-9336-4e4047d5dc35.roa (raw, json)
Hash identifier:          DOfLx/V2umfShU1A7gLBMGkIDA7VmDdRwn3zzfH9h+M=
Subject key identifier:   8E:B6:35:AF:10:69:72:30:60:9B:40:AA:0F:1E:4A:DF:FF:D6:D4:D8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584D571FB2481FF33D46D6ADDCC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     262287
IP address blocks:        64.64.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b2:48:1f:f3:3d:46:d6:ad:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=14ede640-bcfa-4648-b0fa-b3346ce234da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:b6:dd:27:95:89:b0:81:44:5c:e9:6e:84:
                    0a:9c:df:87:e9:a7:93:76:06:fb:2b:e5:86:ca:58:
                    5c:8b:0b:14:b0:69:ba:71:38:8f:31:62:f2:05:6d:
                    84:2b:65:d2:91:6e:bd:98:fa:d9:81:8f:13:87:c7:
                    bb:c8:8a:ba:b2:a1:57:16:19:55:f4:ff:b5:8d:15:
                    d5:88:b8:53:43:99:6e:5d:55:c0:bb:ec:7d:b8:af:
                    16:9c:ff:df:24:db:d4:f9:00:d7:dd:62:4c:43:22:
                    b1:04:6f:ce:43:ac:cc:08:d9:69:20:ea:20:ab:09:
                    01:fb:db:67:90:75:f2:ed:dd:45:30:95:30:64:76:
                    da:d0:16:e0:31:fe:ab:81:19:84:63:06:67:d5:32:
                    89:08:98:d7:6f:07:45:19:2d:95:3c:03:c2:e2:63:
                    c7:34:ff:1c:fe:4f:b9:5f:60:2c:2d:5a:16:6e:da:
                    69:0d:ee:c7:93:f9:c1:10:99:13:ba:3b:5d:88:ff:
                    d3:ba:b2:0d:67:74:40:23:4b:77:bb:72:f3:b2:67:
                    0d:59:f8:c7:84:ee:11:1c:c3:61:01:7f:88:5f:b3:
                    fd:42:27:0e:1c:68:1f:66:5b:6a:23:be:c3:e2:04:
                    62:e1:3e:d8:ec:38:7f:44:71:a7:bb:97:8e:48:40:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:35:AF:10:69:72:30:60:9B:40:AA:0F:1E:4A:DF:FF:D6:D4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/0327aa02-52d2-3d16-9336-4e4047d5dc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:d5:91:1b:03:b7:e8:cc:96:b2:1f:8c:09:2b:66:64:3a:
         8a:fa:7e:03:50:00:2a:43:53:7b:2d:96:59:ed:60:97:d3:d3:
         d7:2b:e3:b5:71:5b:a6:de:97:cb:c2:e2:83:af:81:1a:56:27:
         7f:00:a6:46:37:a3:2c:69:84:20:01:96:ef:54:18:bb:45:fe:
         12:1e:10:41:97:cb:a2:90:b7:fb:af:08:52:0a:9a:0a:17:63:
         86:af:0e:e0:ce:e4:e7:5c:5b:71:a7:69:8a:ad:30:d2:4c:e9:
         9d:64:61:cd:fe:25:53:19:2d:65:60:eb:84:57:fc:fb:cd:32:
         5c:de:ef:8e:6c:63:a4:a6:15:d8:59:ae:3e:34:22:66:ac:cf:
         19:5b:7f:4f:6a:5f:33:e6:3a:f9:b6:0a:4e:dd:84:f5:8e:95:
         58:c7:3e:a2:35:1e:47:b0:f4:67:26:0a:41:c3:c5:ab:33:8d:
         3e:0c:e6:90:87:fb:40:d1:6c:1b:4d:ae:a7:1d:34:6b:9a:30:
         b7:a1:79:45:51:e2:1c:10:88:4a:8a:12:f1:14:8c:06:da:31:
         69:a5:f8:00:2f:bc:46:5c:e2:e2:e5:37:21:aa:b5:ce:67:7c:
         84:c1:cd:5e:15:90:84:14:96:bf:f8:fe:dd:0c:2b:f5:11:2a:
         35:cb:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:48 2026 by rpki-client