Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa
File:                     e30a3058-e90a-3007-8755-87cf5d7490e9.roa (raw, json)
Hash identifier:          tCL0SOC8vcG7seOzIQKW7HN5qNeSPln+MAk6mClDRuY=
Subject key identifier:   0F:23:9B:CF:2B:D6:98:D1:34:FE:BF:1D:52:64:33:47:C2:6B:1D:9E
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584EB8474C7054FBB9DB3743C880
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.136.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:4c:70:54:fb:b9:db:37:43:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=9fadf5a1-5bc1-436c-95ae-9cc289848a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b7:13:78:03:55:63:73:6a:85:26:d9:95:14:
                    d7:7f:e8:b6:d2:79:73:68:e9:b6:d9:15:f1:da:07:
                    d0:e5:1f:5d:9f:67:85:f2:b1:a2:a2:d1:32:e6:12:
                    0d:08:32:16:a8:28:4a:f8:8d:7e:17:c8:26:d5:4d:
                    29:75:91:a7:e1:0f:30:d9:bf:43:63:15:b6:53:2c:
                    15:f7:de:7f:b6:11:35:4d:d0:3f:b6:9f:83:8d:2d:
                    e2:b1:c9:c0:bb:e2:60:22:b5:a2:1d:45:f4:e7:e5:
                    22:10:21:a6:08:69:ec:7c:95:13:ca:67:ca:e9:47:
                    3b:f4:38:4f:a8:66:c6:06:0c:98:f1:2b:7e:6b:18:
                    bf:4d:f0:bb:93:66:45:72:1e:d3:28:53:99:01:89:
                    1c:3d:70:8b:c4:47:d7:26:a3:5a:56:9e:30:21:97:
                    ea:2b:04:1b:59:a5:4d:ac:76:51:e5:96:8d:4c:9e:
                    84:be:67:12:30:fb:47:cf:1a:8d:16:46:18:61:ce:
                    c2:6b:d2:e1:d4:c9:f5:c5:d3:76:fb:17:5f:86:d9:
                    3a:bc:b8:12:2e:64:e2:de:20:f0:9c:45:fe:66:5b:
                    a2:0a:6b:ee:15:d9:70:cf:51:d3:4e:ee:9c:f4:9e:
                    0f:f2:9d:49:32:66:7d:12:78:70:8d:6b:dd:d4:5b:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:9B:CF:2B:D6:98:D1:34:FE:BF:1D:52:64:33:47:C2:6B:1D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/e30a3058-e90a-3007-8755-87cf5d7490e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:72:96:32:ac:ca:84:71:67:0f:a5:43:7b:f8:0e:a6:e4:
         aa:82:ee:08:2d:4e:38:2c:20:2b:21:65:3c:35:df:3c:9d:3a:
         e4:fa:0c:22:a2:1f:cc:be:d5:e9:97:d4:21:0d:2a:16:83:34:
         29:92:aa:3c:52:52:ab:e5:5f:d9:7f:c5:d8:8b:30:a2:f9:25:
         2d:aa:6e:80:24:27:2c:4c:77:6a:ea:be:16:55:a2:48:f4:cf:
         bb:26:39:5d:f9:0b:7e:2c:1c:6b:f1:f1:27:50:6f:e5:56:d9:
         7c:2f:af:d8:18:0e:43:4e:ec:c6:27:67:5a:2d:62:39:80:e7:
         fa:f7:c8:03:8c:44:ae:82:2c:7b:cb:bd:28:16:50:94:71:a9:
         31:67:eb:b1:36:0d:95:2d:15:ba:37:07:4d:89:fe:5c:ba:f8:
         92:57:8d:aa:b3:0e:1f:9e:45:bb:81:c5:d6:e4:54:ef:3f:ec:
         0e:2a:43:90:01:f4:0a:52:06:bc:71:c6:44:e4:14:ec:89:c0:
         5b:63:4f:b0:ad:3e:ab:92:30:68:e1:c3:92:43:54:f0:bf:1f:
         fa:15:83:a7:fc:62:1a:8a:06:38:f4:e6:41:b5:e1:07:cc:93:
         e7:d6:e5:87:0e:5b:82:3d:34:28:47:d5:75:c9:41:18:a7:b0:
         50:c8:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:54 2026 by rpki-client