Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c6920bf5-95d6-35d4-ac3c-818b69dee879.roa
File:                     c6920bf5-95d6-35d4-ac3c-818b69dee879.roa (raw, json)
Hash identifier:          /h73MOxjBzu5kLyJjUgvGwJH7aErxwaboz2xuQwvuWI=
Subject key identifier:   31:08:62:6B:AB:2E:2C:F7:29:2E:77:F8:42:FC:C6:08:3C:FF:FB:C7
Certificate issuer:       /CN=b2fad91b-4146-4274-9411-fc471c444156
Certificate serial:       010D0C9F4328584F97E09F0FFD20EB0C15C93320
Authority key identifier: ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c6920bf5-95d6-35d4-ac3c-818b69dee879.roa
Signing time:             Fri 23 Oct 2026 03:15:06 +0000
ROA not before:           Fri 23 Oct 2026 03:15:06 +0000
ROA not after:            Thu 21 Jan 2027 04:15:06 +0000
asID:                     11696
IP address blocks:        64.190.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:e0:9f:0f:fd:20:eb:0c:15:c9:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fad91b-4146-4274-9411-fc471c444156
        Validity
            Not Before: Oct 23 03:15:06 2026 GMT
            Not After : Jan 21 04:15:06 2027 GMT
        Subject: CN=27f883e3-f079-4ea3-a525-594e4ecd3a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:54:a7:7c:75:c8:78:3a:e2:ed:66:c2:f9:6c:
                    a9:52:9b:12:0e:dc:a5:ad:5f:58:4f:f1:b9:df:6b:
                    f3:08:35:5f:01:f3:f1:03:ca:5e:0f:72:4a:80:a0:
                    da:e7:ed:61:ca:ad:19:b2:30:2f:62:b5:74:c5:77:
                    d4:fe:05:6c:fd:7a:bc:f0:3f:1e:ba:d2:d1:22:00:
                    af:58:73:9e:47:9f:af:08:d0:fa:98:74:2b:b8:17:
                    c7:fa:15:49:40:59:39:8a:ab:7d:9c:df:1e:17:3b:
                    ba:80:5b:40:68:6e:8c:16:1b:8d:99:68:e2:b0:78:
                    6d:3b:de:7a:07:31:10:b3:5d:20:60:95:74:bd:98:
                    a1:4b:99:02:10:32:ed:3e:6d:d5:ca:c0:15:c5:ee:
                    2b:2f:03:4c:0e:cb:8b:b3:88:c2:76:6c:f0:8b:b3:
                    6e:30:0b:15:73:a6:91:7b:24:de:85:69:52:ae:5d:
                    45:31:1e:c6:be:3e:05:1a:0c:14:6e:b3:0a:1a:81:
                    39:31:e0:e1:7b:02:f5:8f:10:19:81:7a:6b:af:f4:
                    ae:f9:d8:f1:a0:3c:32:63:ba:1f:48:0f:bd:27:15:
                    51:f0:69:ae:e9:7e:05:99:9b:2b:22:6a:31:46:cd:
                    ab:cd:de:80:7d:59:4b:b0:6a:3d:ca:b1:58:04:46:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:08:62:6B:AB:2E:2C:F7:29:2E:77:F8:42:FC:C6:08:3C:FF:FB:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/c6920bf5-95d6-35d4-ac3c-818b69dee879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156/b2fad91b-4146-4274-9411-fc471c444156.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A0:AF:16:9F:95:8F:17:B2:29:A2:69:70:14:46:B1:B0:3B:EB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b2fad91b-4146-4274-9411-fc471c444156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:88:32:50:18:b5:23:4b:ae:4c:7a:c1:3f:8d:ed:bb:4e:
         c1:c2:72:13:4e:87:84:db:fd:7f:a8:85:ae:1a:55:29:78:ee:
         ba:40:27:06:0f:60:6b:a9:0e:d5:fc:31:7c:cf:35:36:1c:55:
         92:c7:f6:07:03:45:8d:98:2a:aa:f1:81:53:5e:2d:ac:69:03:
         12:4a:cc:d3:c3:dc:47:e5:8e:29:d3:bc:db:20:cb:93:1a:d6:
         21:b1:4d:20:b5:e2:32:2e:1b:e3:ff:72:cb:a6:b2:ef:ad:a0:
         cb:27:10:e8:a0:1f:87:88:17:ab:ca:6a:38:37:6c:80:39:d6:
         7d:a7:71:e3:e7:99:7e:75:06:eb:85:70:0c:85:f1:28:c2:25:
         fe:8a:64:9b:8a:aa:0f:5f:33:89:b7:63:18:95:f8:52:7b:c4:
         9e:41:16:a5:37:64:83:b7:00:32:b6:9e:a0:e5:89:f8:7d:99:
         02:f8:03:b4:69:20:be:6e:ce:6d:86:b9:47:6e:3a:8e:98:8b:
         5e:6f:d7:34:dd:ff:43:21:34:f5:ac:49:db:2a:78:e7:55:61:
         0c:43:02:fa:d0:f3:0c:b9:97:68:b5:7e:f9:34:4b:f7:65:09:
         c8:3c:d1:af:b1:3b:d6:6b:f2:cc:fc:b3:81:2e:a0:81:cd:8c:
         1f:9f:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:52:18 2026 by rpki-client