Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa
File:                     8789b761-bc71-3c11-b18a-efee96fb1b2f.roa (raw, json)
Hash identifier:          eDwxtn4d+KaN9vV/kRkuP9SyWjgb20QuLIw4MGmAn0I=
Subject key identifier:   75:73:61:2B:F5:12:0C:49:42:3E:54:37:9E:CF:6A:44:AB:A8:4B:D6
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584CAB8C52388D449AC1386B3680
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     54643
IP address blocks:        64.34.70.0/24 maxlen: 24
                          64.34.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:52:38:8d:44:9a:c1:38:6b:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=0313ed38-4a95-42d8-b8a6-d9ce70ce65ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:be:fe:33:bb:b8:f4:a2:d9:92:86:90:cb:
                    9c:53:56:48:0a:b7:ca:39:e6:d4:53:af:08:27:b2:
                    74:be:71:66:54:7b:9b:d6:ae:c5:a8:56:fd:4a:f3:
                    14:df:01:e3:95:1e:ab:46:5b:16:e2:c8:4f:32:d5:
                    cc:44:d1:e6:b4:6e:ad:91:ec:65:f3:46:72:48:f9:
                    82:f9:23:86:c9:cb:e3:33:f4:30:4f:eb:12:c8:93:
                    8a:06:3c:4a:ec:92:13:d1:61:a3:68:d6:4e:09:ee:
                    17:38:d4:02:41:91:51:f3:0b:de:42:7f:4a:c6:2d:
                    97:1a:21:95:fe:03:7a:0d:5a:cd:eb:85:89:ca:3c:
                    7e:58:c9:39:b3:c5:34:65:81:0b:56:7d:f2:09:80:
                    a8:7f:c5:dc:fb:23:1e:3a:4d:e9:d8:6a:2d:44:ba:
                    40:e6:ef:61:ff:70:69:ec:0a:13:ca:b2:14:b7:e3:
                    a3:59:ac:48:cb:32:e3:cd:74:d1:49:52:02:a8:8f:
                    c1:ca:34:48:ba:25:5a:17:44:17:b8:70:ae:86:ad:
                    e0:e8:f5:06:81:1d:8e:49:b5:4d:06:f2:69:e5:57:
                    d2:46:64:6b:37:56:4b:59:f7:c6:20:83:4a:7b:73:
                    7e:8d:89:65:c5:50:e6:f6:11:fd:c8:88:16:da:56:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:61:2B:F5:12:0C:49:42:3E:54:37:9E:CF:6A:44:AB:A8:4B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/8789b761-bc71-3c11-b18a-efee96fb1b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.34.70.0/24
                  64.34.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:1f:73:00:4e:21:45:73:4b:92:70:e3:44:39:e2:85:82:
         35:28:bc:bf:ce:fb:dc:ec:20:4a:2a:44:79:6b:a4:8a:96:b4:
         e3:98:85:93:dc:f8:ad:26:95:4a:f9:79:bd:df:a1:34:ab:c7:
         cf:39:a4:78:01:bc:f0:4b:d0:84:80:f3:b0:08:26:ce:0d:ed:
         e5:1e:d0:ed:e7:22:37:e4:a4:64:f9:7a:d0:0e:e7:21:6a:05:
         83:87:87:c8:46:e8:82:87:00:f1:3b:df:99:9b:43:87:f1:cd:
         39:70:b2:22:f4:d3:d2:57:ff:50:a8:69:9b:27:33:cc:d1:33:
         6d:d0:50:f1:75:2c:6c:cb:39:81:fa:35:68:d1:3f:07:4f:b4:
         e1:9a:6d:40:02:80:e1:f2:7a:6b:ee:75:44:7b:a4:4a:e6:2a:
         2c:29:c8:44:e3:f9:11:c2:69:00:92:f2:83:f6:08:4f:44:01:
         7e:da:5f:84:e1:8e:d9:50:d6:39:71:c4:cc:bf:5a:1c:5d:e4:
         be:22:58:9d:30:4e:c0:a0:8e:d0:f8:78:03:6c:82:64:19:15:
         85:7a:b3:48:58:4a:dc:dc:d2:3b:54:6a:51:12:1a:c5:c3:75:
         68:25:46:11:43:8a:9f:21:7e:9b:63:9f:ee:36:d0:0d:b9:d1:
         ba:4e:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 12:57:01 2026 by rpki-client