Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa
File:                     ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa (raw, json)
Hash identifier:          qzzEbveGFl+OrFfoS/SHMwd8hl2S3Fr61/g2vzXZDtc=
Subject key identifier:   54:42:3F:E1:3E:03:4C:5C:5A:E5:35:9E:2A:CE:A3:77:D7:C8:98:97
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584E7E94D2F674E1B49D50B1DDD0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        64.16.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d2:f6:74:e1:b4:9d:50:b1:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=9e83177e-6343-4897-9a6b-b4090c6d87f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:49:b0:1f:0b:94:90:23:e6:03:48:6c:c8:
                    60:ef:2f:d3:0c:9a:25:21:0e:25:ad:3c:3b:27:2b:
                    25:7a:da:ad:bc:04:f8:cb:20:78:f4:41:ea:83:cf:
                    84:b7:67:2d:23:cd:21:3d:ca:71:7b:7c:6b:f0:af:
                    82:01:0c:33:0f:3c:a8:09:f2:3f:67:ce:05:d8:ac:
                    dc:ba:ee:cc:cb:5f:21:59:e5:be:7e:1c:e9:2f:74:
                    e8:68:73:83:c6:45:25:37:5a:a3:f8:e9:fd:64:85:
                    b5:67:b0:97:b6:9b:b4:b0:7a:5e:ce:5c:97:56:d2:
                    d1:76:d5:f1:af:3b:b0:8d:ab:60:a0:8a:99:74:92:
                    27:74:cf:3a:f3:b7:73:95:cd:f2:e4:2d:7d:9d:78:
                    e0:a2:2c:9f:dd:b6:78:39:85:62:08:85:de:8c:6f:
                    5e:03:39:84:98:77:41:4c:a2:3f:4d:a3:e4:20:e6:
                    2d:20:eb:99:45:da:8f:54:ed:a7:42:e4:3f:a0:96:
                    9f:4b:f4:cc:67:6e:46:3e:df:74:8d:4b:0d:52:23:
                    de:32:d5:c5:3b:86:f2:85:86:04:b8:a5:ff:a6:1b:
                    03:d9:88:24:22:99:9b:73:68:15:2d:31:4b:d7:dd:
                    05:e3:7f:af:0e:26:2f:32:d1:5c:ea:98:4c:54:8a:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:3F:E1:3E:03:4C:5C:5A:E5:35:9E:2A:CE:A3:77:D7:C8:98:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/ae80c859-80ae-3eae-9b72-6cfebaa4cd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:06:7a:ae:c7:7e:07:45:09:8c:fd:66:92:3f:11:8e:3e:
         f2:64:71:95:13:16:f9:19:23:88:f7:3f:c2:2a:b6:e5:8d:5f:
         4c:d6:f6:ee:15:39:af:6e:31:c9:c3:cd:43:83:4f:4d:95:34:
         25:15:83:01:fa:e5:9f:e6:d0:5d:e2:4f:84:02:39:4c:cb:d1:
         16:4e:63:6d:5d:50:b9:44:31:82:7d:61:60:97:2b:e0:c4:f6:
         4c:a9:b7:0c:14:1c:ec:64:dc:f9:b0:aa:3f:bd:1a:75:24:39:
         0b:b3:bf:35:f1:04:c9:23:a3:d6:ca:3c:62:0c:f7:e3:fb:e3:
         f4:c2:fd:dc:60:b6:88:48:5b:c7:a2:13:58:bf:7a:fc:d7:54:
         7a:e3:e7:68:9f:b3:1c:a8:51:13:78:e8:5f:5c:8a:77:7f:ed:
         f1:e5:20:36:2a:50:17:5e:b9:4f:69:bb:37:f4:b0:d0:2b:12:
         a3:85:17:15:d5:1c:e1:aa:0f:2b:d0:6f:ee:93:ae:3b:24:bf:
         87:fd:db:13:59:7a:85:b8:34:4f:05:b3:38:bd:24:b2:6f:3a:
         1b:34:04:ea:b8:f8:ec:69:5c:33:6c:df:16:ae:dd:8a:46:eb:
         3f:ff:7a:e9:3b:66:ea:65:9f:0b:83:ef:50:67:dd:df:71:7b:
         20:5e:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:18:06 2026 by rpki-client