Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c89d9b34-80aa-3fd8-aa8a-2cdb95a83cfc.roa
File:                     c89d9b34-80aa-3fd8-aa8a-2cdb95a83cfc.roa (raw, json)
Hash identifier:          b1edHfLISoqEAO5rPqqmXo+EGWU8oUWnAk8Hps0vKrA=
Subject key identifier:   BB:A2:FF:39:C6:43:A0:28:B9:D3:FA:47:6C:10:27:BB:D9:FC:BA:F0
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584C9ACC3D498BC0685C6D7DC5A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c89d9b34-80aa-3fd8-aa8a-2cdb95a83cfc.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     3131
IP address blocks:        64.184.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:3d:49:8b:c0:68:5c:6d:7d:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=dd5e8a70-2a65-4505-86a9-81cad0b80cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:05:3b:1a:2c:0c:f2:85:8a:34:6e:30:d7:87:
                    5c:89:e8:38:0b:44:84:d6:f7:7b:04:05:e4:99:f1:
                    6b:43:aa:a7:c4:44:d6:cc:81:ae:c6:05:6d:75:3e:
                    c3:a0:05:d0:fd:4c:b3:10:2d:05:d1:e4:46:85:d7:
                    fa:dd:6b:a2:ea:32:ac:28:96:22:85:72:38:65:ee:
                    e2:dc:0b:22:48:f8:52:4d:14:14:15:3e:c3:6d:97:
                    1d:07:75:a3:1e:76:53:fa:d0:a3:b9:c5:16:72:57:
                    bb:79:1e:1d:26:78:e5:87:f1:3b:73:a7:f1:54:3f:
                    12:ad:bd:be:25:39:55:bb:9f:9c:37:9d:ce:3f:2a:
                    dd:5b:5a:f1:74:3f:6f:38:6a:02:11:f0:48:74:90:
                    90:24:85:5d:f2:aa:d4:80:1b:ea:b3:48:df:69:df:
                    3c:7c:a7:d5:21:ff:ea:13:6d:cf:31:a1:3e:7e:18:
                    a7:67:05:01:1e:61:c9:38:37:f3:51:82:95:22:b9:
                    55:30:88:09:78:1e:87:ae:bf:cb:96:7f:cc:9d:b7:
                    c7:ee:24:26:02:b5:69:55:a0:06:68:9f:46:1e:c3:
                    b0:fd:4a:a2:34:92:72:85:18:50:af:64:3f:74:f6:
                    13:94:5e:e6:90:e8:5a:13:54:ee:7b:b8:1c:cf:5e:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A2:FF:39:C6:43:A0:28:B9:D3:FA:47:6C:10:27:BB:D9:FC:BA:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c89d9b34-80aa-3fd8-aa8a-2cdb95a83cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:ce:f0:16:c9:e4:ea:d1:0a:b1:b9:6e:b9:78:a7:9e:6c:
         aa:d7:91:0e:96:82:d3:c0:ae:5b:0f:fe:6e:d2:d2:e7:04:f9:
         d3:9d:1b:5c:d2:a8:9b:2c:80:82:1a:84:38:d9:31:ee:59:be:
         f2:b5:a4:6a:40:98:43:46:3b:df:d3:2c:23:b8:85:98:30:41:
         fd:f4:55:68:e6:84:da:c6:2a:5c:3d:0d:24:7a:11:14:37:75:
         c0:11:54:18:ba:b5:e8:56:46:f4:c4:9b:77:e6:9f:43:52:6f:
         5f:bd:fd:8d:8c:4b:ce:97:d5:14:c5:1a:0b:2c:83:e9:98:25:
         a4:e4:b5:60:bb:70:b5:56:12:a8:33:3f:51:55:2b:ab:21:84:
         a2:bf:64:17:4f:7a:89:ce:95:7e:4e:5e:66:77:00:54:5f:ba:
         0d:8e:02:00:d3:7e:9b:bd:02:96:28:b3:53:08:c7:37:f2:2f:
         1e:c2:69:21:47:3e:7f:83:ac:dd:07:97:c1:db:ef:85:72:1e:
         9b:fd:48:30:13:26:c1:2a:c4:72:5c:e3:29:ce:b5:4d:2d:31:
         7a:a3:f8:12:2d:d2:08:95:e3:a6:0e:66:8a:6f:5e:db:9f:46:
         e3:b3:3f:39:c5:47:04:c6:78:9a:77:3c:2d:b6:39:25:4f:e1:
         75:14:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:57:20 2026 by rpki-client