Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa
File:                     35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa (raw, json)
Hash identifier:          GVMtCkEYRVC/HYmqgRWZUAQ1bOjwEONJKpzpBucRpSE=
Subject key identifier:   F9:80:3A:AE:1B:3B:EC:06:23:A6:AA:08:F0:E2:E2:A4:3E:49:18:5E
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584F655D68A657B1377A0A1E4B98
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     40933
IP address blocks:        64.187.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:68:a6:57:b1:37:7a:0a:1e:4b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0983220c-97f6-4066-9904-6a5d15bc8e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:74:bf:b5:d7:a3:0c:5a:6d:c7:b9:aa:52:
                    7a:73:b3:3c:03:11:ec:d8:d0:84:ce:cc:04:88:5d:
                    8e:cd:b3:59:e6:64:b5:4a:d0:6b:40:ed:fb:50:a2:
                    76:b7:92:b6:9c:18:3a:a6:67:b2:0c:d4:bf:72:ac:
                    f6:3e:f4:a7:13:b1:77:51:db:bb:6b:f7:18:1d:93:
                    30:ac:56:25:a2:75:79:ba:d2:e9:26:8b:f4:14:cd:
                    a6:e7:0d:b0:87:5e:ad:4b:2b:58:0e:0c:1e:a0:74:
                    a7:e6:3a:a5:c1:30:ed:52:7e:93:a7:c5:0a:8b:73:
                    2b:a5:b5:87:43:e7:60:51:77:09:75:fe:5f:60:18:
                    ac:8b:29:f6:f2:36:28:4a:92:44:4a:c7:ee:8f:a7:
                    77:ee:3e:9e:79:c8:43:f6:6f:d7:b9:f6:a4:1e:2f:
                    df:5f:ce:54:aa:e0:64:b4:68:b8:84:6c:92:e0:9e:
                    45:27:cd:89:be:17:b0:bb:51:ca:27:31:a5:73:25:
                    1a:43:ff:01:a4:5a:83:c4:88:78:45:b5:2d:f4:67:
                    af:92:4d:b4:63:70:00:d6:7c:8f:7e:9d:6e:3e:7c:
                    94:f6:24:19:dc:ba:cc:e4:fa:c1:94:ac:24:3c:33:
                    70:c6:cc:d5:ff:d7:8d:7d:fc:7f:a9:e9:7a:e4:0e:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:80:3A:AE:1B:3B:EC:06:23:A6:AA:08:F0:E2:E2:A4:3E:49:18:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/35c3da0b-bbfd-3fea-a4eb-c791daa611f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:6b:22:05:77:d8:11:37:34:25:ef:a8:e6:b5:a4:9f:f4:
         48:c8:b1:c9:8f:76:f0:c1:31:62:d7:03:da:6f:14:43:b4:14:
         77:27:7b:ca:2a:db:77:d2:27:c2:a4:bd:b6:df:7f:aa:7a:a0:
         99:7b:12:c2:6c:44:34:43:3d:79:98:cf:7c:62:84:09:9f:b1:
         9e:43:84:50:6a:d9:3f:22:da:f1:fa:54:0b:f1:63:60:d6:a3:
         b0:9b:13:04:59:9d:96:32:01:70:24:48:1f:7e:d8:f3:b4:e6:
         d3:be:aa:b3:40:4c:57:a0:7f:7a:45:4a:a6:2d:5f:df:52:b3:
         09:ff:fe:3a:b7:16:4e:4e:c0:9b:8e:be:b0:1b:bc:58:d4:21:
         0d:e2:30:69:6e:c4:1f:56:50:10:f1:ae:a1:d0:95:26:f9:44:
         86:0c:cc:e1:9b:3a:87:47:d5:dc:d4:c2:99:40:6f:7d:bd:e4:
         67:ab:dc:10:9b:02:51:47:ca:9f:7b:04:b4:be:4f:66:06:c9:
         63:0b:46:51:c5:09:f6:cf:a4:18:8f:be:a3:b0:3d:7d:ce:ac:
         d8:74:64:82:c1:f0:84:1f:5e:f8:a6:e0:17:8c:fb:02:8b:70:
         fc:c1:db:59:b4:91:f3:7a:a8:cf:09:c6:13:44:18:18:cd:94:
         48:6f:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:41 2026 by rpki-client