Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/38042e5e-db93-3be3-98d6-53c5d51f93ec.roa
File:                     38042e5e-db93-3be3-98d6-53c5d51f93ec.roa (raw, json)
Hash identifier:          hBHV3Z0fG8OBAKjpZ1sckWV7JLrn+Wv0A83/sFdZ3Z8=
Subject key identifier:   5D:86:27:01:50:42:4E:36:59:8C:67:73:74:EA:6B:AF:DC:B1:2B:89
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584CAE5EA41EC0927090BE25C880
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/38042e5e-db93-3be3-98d6-53c5d51f93ec.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     64286
IP address blocks:        64.64.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a4:1e:c0:92:70:90:be:25:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=b047a259-4693-4189-8eb0-c991e3628214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:0f:44:a3:36:b8:b8:45:05:03:cd:b4:29:
                    f2:15:88:7f:b7:3e:03:12:65:e9:f2:c5:7d:0a:1d:
                    75:96:4c:31:ab:27:27:00:8c:cf:16:05:cb:ca:52:
                    d7:55:26:0c:40:6c:bc:5f:65:05:26:f2:6f:3e:d2:
                    b7:18:7a:35:a0:eb:6c:8c:b2:5a:41:74:e4:1c:1b:
                    a1:37:46:91:c1:a4:98:88:85:af:80:4f:19:b7:1e:
                    11:bd:8f:58:4a:d9:19:af:f3:83:42:01:2a:7a:b4:
                    2a:c1:64:54:6b:59:e0:8d:ff:35:23:bc:09:47:e1:
                    5a:e3:c8:38:94:0d:10:dd:52:22:16:fd:b1:8b:f0:
                    76:05:80:d9:8f:9f:c7:5b:12:06:17:d8:a6:ac:5e:
                    95:6b:5c:bd:6f:27:b7:bd:96:6a:bc:51:2d:9e:3b:
                    1b:ef:1a:b2:d9:60:fb:18:e0:94:be:18:4a:48:6c:
                    9d:3f:6d:e9:88:bf:9d:52:d5:81:ef:05:4b:fa:f2:
                    f2:3c:be:7b:0b:ce:78:f1:55:24:77:10:63:aa:6b:
                    f2:fa:1b:30:ab:42:ec:4f:00:af:48:b3:84:2e:f6:
                    d6:56:41:df:d8:8b:07:7d:6f:44:01:77:d5:87:75:
                    c6:56:ef:91:65:9d:5a:53:77:b8:01:97:88:4c:84:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:27:01:50:42:4E:36:59:8C:67:73:74:EA:6B:AF:DC:B1:2B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/38042e5e-db93-3be3-98d6-53c5d51f93ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:b1:3f:86:a3:6b:4b:a5:69:70:22:6e:be:00:3b:12:b3:b9:
         9e:de:d2:64:d1:7c:fb:e4:f0:da:4a:2b:1e:d8:db:0e:a6:b6:
         c1:55:07:f9:95:be:0b:36:df:7e:f6:64:21:e1:4b:dc:25:d7:
         fb:ff:b7:e5:a6:54:b5:1b:fb:f6:7b:f0:d4:3a:77:21:db:64:
         c4:fe:e0:bd:43:55:3e:e6:cf:56:60:cc:1c:cc:94:76:0f:66:
         10:61:04:eb:24:00:91:f7:55:ea:ea:ed:25:29:af:d4:3b:2b:
         b4:57:99:5d:6f:88:22:40:50:b0:0c:d9:8b:18:0e:97:88:0f:
         7d:db:d4:f0:16:49:f9:21:c6:79:e7:38:0f:eb:48:a6:e7:22:
         fa:74:d3:6d:df:e6:e6:70:f6:f7:2d:e4:14:e1:1b:44:f4:a9:
         97:42:c8:a2:20:de:df:0d:29:06:c1:8c:53:b7:06:a6:1f:3a:
         bc:88:4d:70:5d:38:9a:54:1b:63:06:47:dd:1a:2e:ba:18:74:
         f8:6c:c2:fa:0a:93:67:fe:22:a1:7b:7d:f9:ad:2b:24:91:5d:
         5a:2e:dc:f0:e7:aa:96:cc:37:ef:11:80:7e:11:63:dc:ab:ac:
         22:96:40:63:0e:1f:14:ab:39:ab:89:72:84:8d:18:75:49:f2:
         62:5a:77:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXqQewJJwkL4lyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjA0N2EyNTktNDY5My00MTg5LThlYjAtYzk5MWUzNjI4MjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhQPRKM2uLhFBQPNtCnyFYh/tz4DEmXp8sV9
Ch11lkwxqycnAIzPFgXLylLXVSYMQGy8X2UFJvJvPtK3GHo1oOtsjLJaQXTkHBuh
N0aRwaSYiIWvgE8Ztx4RvY9YStkZr/ODQgEqerQqwWRUa1ngjf81I7wJR+Fa48g4
lA0Q3VIiFv2xi/B2BYDZj5/HWxIGF9imrF6Va1y9bye3vZZqvFEtnjsb7xqy2WD7
GOCUvhhKSGydP23piL+dUtWB7wVL+vLyPL57C8548VUkdxBjqmvy+hswq0LsTwCv
SLOELvbWVkHf2IsHfW9EAXfVh3XGVu+RZZ1aU3e4AZeITIQuGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2GJwFQQk42WYxnc3Tqa6/csSuJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMzgwNDJlNWUtZGI5My0z
YmUzLTk4ZDYtNTNjNWQ1MWY5M2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEBwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMuxP4aja0ulaXAibr4AOxKzuZ7e0mTRfPvk8NpKKx7Y2w6mtsFVB/mV
vgs23372ZCHhS9wl1/v/t+WmVLUb+/Z78NQ6dyHbZMT+4L1DVT7mz1ZgzBzMlHYP
ZhBhBOskAJH3Verq7SUpr9Q7K7RXmV1viCJAULAM2YsYDpeID33b1PAWSfkhxnnn
OA/rSKbnIvp0023f5uZw9vct5BThG0T0qZdCyKIg3t8NKQbBjFO3BqYfOryITXBd
OJpUG2MGR90aLroYdPhswvoKk2f+IqF7ffmtKySRXVou3PDnqpbMN+8RgH4RY9yr
rCKWQGMOHxSrOauJcoSNGHVJ8mJad+0=
-----END CERTIFICATE-----
Generated at Tue Feb 24 03:49:51 2026 by rpki-client