Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/f986de24-cf4e-3033-88c6-b89ddae9e387.roa
File:                     f986de24-cf4e-3033-88c6-b89ddae9e387.roa (raw, json)
Hash identifier:          bOyZi7lq3QbiZqqtyy7P1CBBq0lIGYRUdKLcCZuwag8=
Subject key identifier:   7B:F9:40:85:E1:D2:30:23:AF:21:19:2D:80:05:21:8A:4C:80:74:A4
Certificate issuer:       /CN=785749fa-091c-4978-a918-3238e45d2a1c
Certificate serial:       010D0C9F4328584F6292B86B5A06AD28A03DB9C0
Authority key identifier: 33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/f986de24-cf4e-3033-88c6-b89ddae9e387.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     16713
IP address blocks:        64.184.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b8:6b:5a:06:ad:28:a0:3d:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785749fa-091c-4978-a918-3238e45d2a1c
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=84f20147-9f8f-4d99-8b2b-5bee7e334fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:9d:0a:09:1f:4b:da:a4:99:06:6e:1c:ec:
                    14:3c:36:c0:1d:c8:36:4a:ef:e3:a3:a2:24:d9:d8:
                    e0:75:0d:95:fb:7d:9b:9f:0b:a9:3b:4a:a4:76:3f:
                    ea:bb:4d:40:cc:a5:b0:bb:dc:ec:6b:4f:e7:d1:a5:
                    d3:5a:f9:8e:7b:39:f4:59:12:18:5b:c4:25:6e:09:
                    40:8c:04:f5:6a:4b:56:21:e3:6e:6e:26:47:c0:8f:
                    e1:f7:08:7d:24:82:79:1a:e3:f4:4a:98:70:71:c9:
                    47:2d:4f:89:b2:1d:df:c3:04:be:e6:61:99:95:f1:
                    46:bc:20:9a:5f:9a:b8:86:a1:a0:db:e0:22:d7:65:
                    09:3f:1c:86:ac:9b:eb:24:26:c6:13:cf:ed:bd:2f:
                    27:e6:93:db:8a:0b:37:fa:e4:2d:51:d8:9e:04:f8:
                    85:63:fb:90:44:f7:49:e9:a0:7f:d4:54:ce:60:bb:
                    4a:47:70:43:e4:64:61:02:55:5b:e3:68:79:80:32:
                    5d:2e:2c:40:77:3a:0f:d3:9a:b1:23:9d:41:4c:e8:
                    7b:1a:94:88:79:f8:d8:86:57:21:ee:06:86:b2:21:
                    88:a4:7b:11:cc:61:f4:9e:c1:7f:d0:87:17:dd:40:
                    2e:65:23:e0:3f:c2:20:6f:44:37:8a:93:d2:92:83:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:40:85:E1:D2:30:23:AF:21:19:2D:80:05:21:8A:4C:80:74:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/f986de24-cf4e-3033-88c6-b89ddae9e387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c/785749fa-091c-4978-a918-3238e45d2a1c.crl

            X509v3 Authority Key Identifier:
                keyid:33:F0:9A:2E:39:C5:2F:69:00:C8:DB:6A:A8:D7:FF:36:1D:F8:31:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/785749fa-091c-4978-a918-3238e45d2a1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:31:f9:52:a0:94:da:0b:f0:ac:8f:51:17:82:06:e0:78:
         43:c6:af:6d:6f:23:cd:6d:30:ed:d4:e6:e1:e1:8f:1c:11:c1:
         0c:e4:b1:a1:49:cd:25:0b:61:d7:90:30:be:59:f4:2f:6c:4c:
         4a:c2:2f:0a:8d:3b:d8:f6:76:47:82:6f:e6:05:81:c8:ed:af:
         f9:a9:79:e5:82:f6:be:c7:74:8e:40:f7:73:32:6d:99:5f:e7:
         61:db:03:a3:be:4c:ea:e0:81:4f:95:9e:85:81:a5:0f:15:ab:
         45:73:fe:85:f1:14:8f:87:8c:72:7b:3d:75:62:72:e0:d0:df:
         7f:0a:5d:f7:8a:a3:7e:60:01:de:ca:82:8b:63:d0:e2:4f:e0:
         cb:ab:ce:45:50:1c:d3:86:23:01:13:be:ee:25:6e:40:5e:fd:
         09:81:c5:aa:6f:b4:ff:33:e4:6d:25:92:49:a4:12:8a:c8:91:
         4a:8c:3e:70:ad:4a:a8:0d:06:e3:c8:39:6e:7a:56:55:ef:88:
         fd:89:5e:54:3a:73:d2:a2:93:dd:30:08:c2:5f:a6:13:e1:3c:
         c0:21:55:f2:60:c8:b9:a2:22:a4:d6:a1:f5:15:88:1a:c7:56:
         ed:dd:ec:22:88:1a:89:c4:46:1f:ae:06:4f:9f:a6:a0:0f:6d:
         59:37:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:33:23 2026 by rpki-client