Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1b974439-f6ef-3d71-9612-60f8e7789608.roa
File:                     1b974439-f6ef-3d71-9612-60f8e7789608.roa (raw, json)
Hash identifier:          BCB4rqP9TsRzOvRuMAIX17tF34hVy1wwnQPcOxIhNcI=
Subject key identifier:   70:74:F2:C5:07:72:8E:7C:50:F9:1D:88:73:AB:0A:70:52:9E:75:C7
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D170B5FE3BCD7FBD6380
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1b974439-f6ef-3d71-9612-60f8e7789608.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d1:70:b5:fe:3b:cd:7f:bd:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=803c76a4-8506-4cbc-a5e3-06f71a8769aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:a2:b3:19:0f:2c:f9:ac:78:35:82:b8:0e:
                    f4:42:59:39:a4:21:84:7a:a2:4f:70:62:f1:bf:17:
                    43:7a:7e:3d:08:4e:4d:35:de:37:da:af:35:a3:68:
                    1c:7b:c7:6e:ff:8d:92:28:63:cb:8d:4f:1b:f0:0d:
                    2a:ba:1c:8a:4f:1f:2a:bc:f7:c0:15:1c:29:79:d4:
                    df:a7:1e:ca:37:32:a1:b6:28:aa:60:21:25:4f:61:
                    4a:94:02:f9:f1:e6:b7:7e:8a:97:08:2b:d0:f0:11:
                    b8:a1:d9:9e:cd:06:88:d2:e1:03:ce:7d:eb:60:aa:
                    04:18:e3:ac:d4:19:cc:74:c4:70:6f:7b:72:e0:53:
                    62:fa:f8:1e:2e:e3:02:28:bd:f0:61:59:79:a9:34:
                    88:aa:90:23:a5:b9:08:cc:52:22:88:8c:61:a3:d6:
                    83:84:02:57:17:a8:e3:12:05:db:c4:d6:40:24:cb:
                    5f:71:98:aa:f6:be:3d:7b:03:fd:a8:d0:d7:c1:d8:
                    3a:f9:b0:fd:a3:a1:97:5a:24:e5:fc:bb:c7:af:8d:
                    ef:35:4b:ac:fa:53:3e:87:fb:78:78:d2:01:6b:71:
                    c4:0e:6a:4e:11:18:15:ef:42:50:51:35:c8:44:aa:
                    d7:1a:d4:7e:71:f1:08:e3:0c:82:eb:4b:cd:a9:24:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:F2:C5:07:72:8E:7C:50:F9:1D:88:73:AB:0A:70:52:9E:75:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/1b974439-f6ef-3d71-9612-60f8e7789608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:cc:5e:0f:47:76:91:e3:0a:77:44:3d:43:80:07:04:8e:
         2c:1b:9f:07:b7:6e:ed:9a:8b:57:bf:5e:65:4f:af:2f:c1:48:
         9a:ed:84:be:5b:b0:1d:a6:98:f4:f0:43:22:81:95:e1:43:bb:
         6e:8d:f0:46:c6:47:ba:72:a3:46:d9:72:c7:c2:e7:8b:4b:0c:
         d1:e1:21:d6:db:5c:03:a9:6b:37:1b:d5:a5:a0:da:03:98:ea:
         46:9d:5d:de:71:ae:ae:88:26:b6:1d:db:b7:e1:61:ee:b0:3b:
         07:1e:39:39:3c:7a:34:ea:1c:69:51:d6:47:db:c7:3c:b0:f6:
         4b:e0:bc:d1:7e:bb:12:be:03:13:43:1f:49:c4:f6:e3:df:5f:
         db:12:98:80:6e:79:9e:fb:ec:c1:ae:c9:a1:ce:dc:64:66:73:
         a4:7f:ba:d2:00:6d:aa:eb:47:fb:cf:c4:6b:ad:25:6a:39:d7:
         87:42:de:e1:2e:a3:ed:b3:52:fb:9a:45:04:c7:a1:63:a9:da:
         ac:e8:9a:2b:d3:f5:7d:33:4e:09:f4:f6:b3:ce:d6:00:23:6f:
         06:fd:ca:12:2b:43:e1:62:9a:09:47:7c:c2:c3:18:05:19:59:
         57:0e:a3:72:e3:19:4a:f9:87:bc:60:69:93:3e:e9:bf:8f:42:
         6d:ec:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:43 2026 by rpki-client