Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/83421081-0dfb-3e8d-86bc-b72b5f93f658.roa
File:                     83421081-0dfb-3e8d-86bc-b72b5f93f658.roa (raw, json)
Hash identifier:          sG3CVPSfQCJu0SpiDX4GqVW0c2fmry0wJbjN48iS+K0=
Subject key identifier:   BD:4C:46:98:33:94:91:98:14:8C:26:29:EA:48:AE:F9:BD:2C:13:44
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D2E51D2544375848B940
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/83421081-0dfb-3e8d-86bc-b72b5f93f658.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d2:e5:1d:25:44:37:58:48:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=283f1f8f-4915-4600-abdb-7eca1de96598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:2e:51:a0:c9:d5:b3:32:16:be:cd:2c:71:
                    7c:2e:f3:55:25:c8:23:bc:ad:f1:ad:6a:98:54:a5:
                    16:e4:fe:e0:4b:bf:1b:60:23:a7:1a:0a:08:21:8c:
                    5f:c8:a7:66:9c:d2:1d:e8:eb:b7:6f:85:e7:92:4c:
                    8b:c5:83:a4:50:d1:9a:31:3f:64:bf:23:fa:e9:a0:
                    61:f8:d6:49:8d:62:1b:10:5b:ef:4c:7e:29:cd:c5:
                    ed:f6:fa:6a:af:e2:f9:8f:20:0f:48:54:73:a8:1e:
                    27:b6:67:db:b1:32:f0:1a:4b:98:f4:82:cf:88:24:
                    20:41:82:a0:35:98:e3:9c:75:89:b7:de:0b:dd:00:
                    6b:59:eb:53:10:db:67:4e:4f:c8:33:03:9c:8c:20:
                    f7:dc:21:61:51:91:7c:bd:32:5a:ae:df:93:39:92:
                    2e:e6:22:43:4a:7a:6b:f1:0e:d0:08:63:2f:cb:7d:
                    39:a4:f3:95:a2:0c:44:43:ce:c9:54:43:d1:36:ad:
                    bb:75:51:ad:29:e1:cc:4b:d7:40:74:9d:f5:01:8d:
                    4b:ed:28:2b:e3:ed:1d:0b:ff:4a:dc:56:79:0c:eb:
                    0f:79:89:c7:2c:ef:35:9a:8e:43:ca:f6:0c:b2:86:
                    ec:c6:a4:cd:74:2c:f5:5b:86:54:49:e1:08:76:11:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4C:46:98:33:94:91:98:14:8C:26:29:EA:48:AE:F9:BD:2C:13:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/83421081-0dfb-3e8d-86bc-b72b5f93f658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d0:53:a8:a9:5c:1d:a9:a4:00:6c:b8:54:d9:24:5b:17:f1:
         b7:e1:e8:e5:3b:e0:7f:0c:55:ff:50:39:d2:61:c2:de:bb:3c:
         14:4f:8b:52:45:81:f4:1a:c0:89:5c:33:1a:9e:79:f2:19:01:
         3c:2a:55:14:e9:f3:2c:96:e0:83:30:ef:43:bf:a6:96:a6:53:
         dd:ed:4d:28:ba:ec:a3:1b:be:87:86:25:3a:2a:51:6f:79:ed:
         b1:bc:77:7c:a9:58:77:e2:85:0b:9d:dc:4f:ed:bb:95:00:6e:
         27:50:c4:1b:be:3e:9a:60:10:69:07:2c:f6:bb:9f:a2:93:7a:
         98:8c:99:79:01:16:08:3c:aa:3e:53:f8:17:2d:7e:96:85:24:
         70:90:29:52:09:7c:15:e1:5d:8d:3e:5b:04:09:70:8c:19:2e:
         8d:ca:a7:de:50:22:fc:29:8e:dc:0a:64:ea:49:e5:5a:fc:4c:
         45:76:d4:58:d6:91:37:3e:4e:d2:1c:52:13:d5:e0:de:a7:37:
         76:3c:91:23:41:61:a6:06:d6:76:54:46:f0:cf:a7:6e:37:b0:
         b9:00:73:15:d3:e0:cc:19:2b:5f:46:cb:58:07:54:ba:a2:1a:
         b2:24:a5:55:f7:9f:31:93:a4:10:0d:e8:71:02:7c:1b:2a:ac:
         b2:71:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:19:13 2026 by rpki-client