Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/54d7d202-f7db-3393-ab57-c742ab50fc98.roa
File:                     54d7d202-f7db-3393-ab57-c742ab50fc98.roa (raw, json)
Hash identifier:          achTP9+liBuqZTUpJb+aPeR0YPWXJzkyb7aoBstwLFY=
Subject key identifier:   C5:21:A6:C5:44:04:94:41:C4:1C:72:B7:2C:A5:08:E9:EB:7C:D5:EC
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94DA13E9736CD28A80E9A2
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/54d7d202-f7db-3393-ab57-c742ab50fc98.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     397630
IP address blocks:        64.16.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:da:13:e9:73:6c:d2:8a:80:e9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=5da16b65-718b-479a-bf03-542b9d6c27e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3f:a7:6e:dd:e3:f5:47:af:5e:27:8c:31:26:
                    fb:d6:68:3f:9d:b3:95:2d:96:1e:56:75:08:dd:bd:
                    3e:56:76:b2:af:7d:1d:b7:78:e4:08:39:c5:21:ab:
                    67:06:d7:95:61:81:a6:a8:38:ce:d4:03:74:78:11:
                    32:90:b6:7d:2b:98:e3:35:25:ea:c2:a4:db:af:48:
                    09:23:8f:f6:80:49:d5:5a:0a:de:37:4f:0d:9b:1f:
                    94:7b:fe:d6:3d:e7:96:30:a9:60:b8:81:94:91:d7:
                    38:ed:6c:74:4f:c2:c4:dd:a7:a9:4b:35:c3:69:41:
                    c3:3c:96:17:b0:2c:ef:1b:51:2a:e2:43:24:92:29:
                    a4:e4:1b:b0:5d:92:4a:d3:ad:c3:e9:02:80:54:ac:
                    2d:3c:91:1b:a5:31:02:17:b6:5f:82:a2:49:fd:fe:
                    37:fe:94:99:74:ea:7b:a4:83:48:77:8d:1a:70:62:
                    db:0a:a6:6c:8a:0d:6c:68:cd:de:fd:39:04:fc:f7:
                    a2:24:20:02:0d:8d:a7:9e:92:8e:60:bc:45:3a:1c:
                    a6:3b:57:a2:3d:5f:ec:75:67:1e:b3:95:b7:2f:1a:
                    c3:3d:16:46:56:ac:a4:d3:4d:43:54:fa:97:be:e7:
                    58:91:45:9d:7a:e6:44:b1:56:91:5f:fb:82:89:f4:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:21:A6:C5:44:04:94:41:C4:1C:72:B7:2C:A5:08:E9:EB:7C:D5:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/54d7d202-f7db-3393-ab57-c742ab50fc98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:ad:60:7e:a6:7d:9a:04:f3:a9:c2:eb:8c:68:c3:71:13:
         14:26:91:fb:6e:b3:df:bf:22:69:88:09:be:ba:a6:0a:58:02:
         78:64:67:fc:81:70:ca:6b:56:38:92:c0:d6:4d:e0:0f:95:58:
         7b:e8:c6:d3:55:da:85:82:de:91:1c:ac:c6:50:3e:9f:ef:46:
         60:86:aa:3d:1e:37:c3:94:f6:e8:46:a9:e4:1e:bf:80:85:08:
         87:b2:3e:3c:fb:35:4d:3a:74:22:0c:1c:b3:cd:04:0c:71:00:
         05:da:cd:00:0f:e4:5f:e9:8a:f9:cd:3e:09:9d:fa:4d:00:c6:
         8c:5c:39:00:83:1f:4c:a1:c1:77:23:8d:2e:8f:87:e5:60:af:
         a7:11:8a:fa:5d:bf:ea:6b:24:29:9e:4b:e0:af:37:2b:51:bf:
         98:9e:7b:8d:eb:5d:54:b0:bf:c9:05:37:52:a3:a4:37:07:0f:
         e4:f7:2c:6b:7b:57:f9:0a:42:86:e6:71:4c:57:b0:47:4c:a5:
         a1:ac:5c:40:ce:9a:f5:36:9f:09:a2:52:b5:16:a0:4c:e3:25:
         9c:4e:89:11:28:60:0f:5d:c8:1b:bf:09:82:e1:3d:eb:25:ca:
         59:f1:ae:ef:bb:78:5f:ee:ca:3a:b9:5d:ac:f3:7d:e6:f4:3e:
         ac:e3:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:11 2026 by rpki-client