Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/2521850c-e34c-3dba-81d5-35a5c4209c15.roa
File:                     2521850c-e34c-3dba-81d5-35a5c4209c15.roa (raw, json)
Hash identifier:          Gzhqn+74796BR37z2/Y39O7+Vp+oxg0+isxhyEiMjMg=
Subject key identifier:   49:AA:A4:CA:18:9D:3B:F0:DE:56:91:8D:63:B7:8C:39:69:B5:D7:9A
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584EB847032F6A8C11BB41847CA0
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/2521850c-e34c-3dba-81d5-35a5c4209c15.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.186.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:03:2f:6a:8c:11:bb:41:84:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=9a50cdd8-f331-4b58-9e0a-82d1d9855352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:70:65:f9:8a:1a:2d:93:0c:aa:23:b8:d0:
                    1b:57:a9:a7:83:9e:44:d7:27:0b:d5:61:04:a5:67:
                    64:ef:7a:1f:79:55:b6:3c:d9:b2:3a:20:41:c2:7f:
                    e5:2f:05:cd:25:39:2b:c3:9e:8e:2a:70:af:14:9f:
                    f1:93:da:76:38:da:0e:c8:99:1b:5f:4f:8f:db:b6:
                    13:b6:0c:6e:63:3d:05:56:7d:69:65:bf:0a:be:a0:
                    4a:2c:19:27:0d:b4:5d:f1:da:33:6c:74:e3:26:47:
                    2b:7a:19:76:d0:ae:cc:84:2f:4f:1c:53:41:90:bc:
                    a5:5d:98:d1:e1:ea:f1:95:15:64:c0:27:be:15:eb:
                    d0:0a:e0:51:06:8a:54:95:5c:99:6a:1c:8f:35:e9:
                    75:c4:d1:e9:e8:1b:ee:cb:68:b8:78:c8:6c:99:45:
                    34:6a:30:15:24:01:4f:34:4b:b5:df:c7:78:7c:79:
                    b7:25:0b:9c:81:d0:9e:aa:44:2b:0c:5a:84:32:39:
                    42:cf:bc:ec:ea:bf:e6:86:f3:03:b0:88:61:a1:15:
                    c4:26:18:8c:ad:b9:db:c7:3a:9e:df:a2:01:80:e5:
                    3d:08:f5:83:c0:57:b5:59:67:ce:08:39:8e:82:a3:
                    b2:35:01:eb:50:55:16:3e:c2:2f:fb:6c:63:ae:b2:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AA:A4:CA:18:9D:3B:F0:DE:56:91:8D:63:B7:8C:39:69:B5:D7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/2521850c-e34c-3dba-81d5-35a5c4209c15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:76:50:65:5d:c9:f2:c7:55:49:2b:f0:65:b8:1f:6c:52:44:
         1c:5e:f6:08:32:e6:3c:40:ca:ae:00:02:13:2a:27:61:a1:7a:
         4b:b0:89:f2:c0:ec:19:a6:ac:cf:09:fe:b2:a0:5d:94:37:f7:
         26:8e:e7:d2:06:c7:cb:7d:25:15:30:24:67:0b:20:5f:23:ae:
         08:80:b3:74:32:d5:ce:2d:24:a5:c3:a1:6b:3f:5f:f6:c4:2c:
         79:6a:1d:9c:bd:c7:4d:a4:9c:6d:12:6f:ad:2b:e5:4e:df:3a:
         7c:9a:f0:70:a4:0d:aa:3b:a0:f4:dc:29:5f:cb:a5:be:f5:79:
         39:d9:72:92:2c:d6:68:6f:fb:67:c4:e8:af:a1:ab:2b:8f:f5:
         3c:8a:2f:a6:b9:cd:1e:05:e9:85:4f:68:01:03:f3:c1:0f:ad:
         29:8e:5c:46:2d:ab:17:f0:56:d6:49:24:b4:67:83:1a:2d:cb:
         cf:ec:f0:2e:98:6d:a6:9a:d8:fe:38:8f:8b:00:49:48:fe:e5:
         b2:75:a8:16:05:2e:78:2c:42:ab:af:12:ad:cc:15:a8:98:59:
         12:d2:a0:97:b8:7b:71:49:0a:75:66:23:03:77:ff:7f:4e:ce:
         28:ef:6f:a9:28:8d:dd:b0:26:6e:a7:f7:40:3d:ef:c9:97:5d:
         5d:e2:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:00 2026 by rpki-client