Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/9a8e72e0-79b2-323c-b951-cca63a6507a0.roa
File:                     9a8e72e0-79b2-323c-b951-cca63a6507a0.roa (raw, json)
Hash identifier:          CQIHgY02FeKJnbpHSMCcXz4N2daSJMENH4072c2jJOE=
Subject key identifier:   F4:B7:79:63:66:4F:84:EC:4C:10:34:0E:8D:71:51:8F:A6:BC:08:F7
Certificate issuer:       /CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
Certificate serial:       010D0C9F4328584EC331310F8419116D19864D40
Authority key identifier: CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/9a8e72e0-79b2-323c-b951-cca63a6507a0.roa
Signing time:             Fri 07 Aug 2026 22:50:15 +0000
ROA not before:           Fri 07 Aug 2026 22:50:15 +0000
ROA not after:            Thu 05 Nov 2026 23:50:15 +0000
asID:                     40933
IP address blocks:        64.187.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:31:31:0f:84:19:11:6d:19:86:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8ef68a-20eb-4f6e-a80e-617aa1473f09
        Validity
            Not Before: Aug  7 22:50:15 2026 GMT
            Not After : Nov  5 23:50:15 2026 GMT
        Subject: CN=e4d922a6-9968-4322-9ed3-49815a68b79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:2d:8d:ce:df:47:cb:7f:4d:ec:fe:45:dc:
                    3f:fb:2f:1e:89:be:eb:00:84:8a:cd:20:b2:31:05:
                    9b:08:67:ce:52:b0:13:c1:4e:e1:49:4f:6b:cc:73:
                    b3:14:28:53:24:47:cc:01:16:bd:f2:79:47:ee:4d:
                    13:5d:17:b6:96:ec:5d:bc:53:bc:c3:27:ec:b7:0f:
                    88:6e:80:42:11:de:f2:1f:80:09:fc:9a:5c:3b:4e:
                    04:35:26:8a:80:d5:10:7f:65:30:5d:70:af:d1:e2:
                    ac:63:e0:c5:a5:fb:d5:d6:71:83:82:0c:a5:b2:41:
                    3d:d3:c4:1f:01:7f:6d:02:05:1b:ab:fd:45:d2:d1:
                    23:0f:aa:af:d1:dc:8b:86:7a:0d:63:2c:66:9d:85:
                    4c:fc:80:d1:d3:0f:f7:40:7e:ef:53:41:17:fb:24:
                    43:97:2c:55:95:23:e8:0b:eb:94:f3:c7:37:f1:20:
                    1e:db:8e:bb:60:ed:2e:42:ed:34:b8:02:31:8d:10:
                    e8:ff:6d:bb:4c:20:84:08:85:a9:25:c9:d0:a2:64:
                    33:a4:b4:ab:7d:db:d0:25:7a:90:cf:aa:29:54:ed:
                    2e:dc:b6:f2:92:4f:06:31:0c:41:ec:7e:9f:2d:11:
                    7b:68:2e:1b:82:c2:d8:83:b7:98:cd:1c:08:4c:7d:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:79:63:66:4F:84:EC:4C:10:34:0E:8D:71:51:8F:A6:BC:08:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/9a8e72e0-79b2-323c-b951-cca63a6507a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09/da8ef68a-20eb-4f6e-a80e-617aa1473f09.crl

            X509v3 Authority Key Identifier:
                keyid:CC:52:EE:D6:CD:6F:C2:A0:F3:2B:8E:12:3B:23:87:59:02:0B:35:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/da8ef68a-20eb-4f6e-a80e-617aa1473f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:12:bf:74:5a:9c:c2:47:12:11:24:37:8d:e6:00:63:ab:
         47:31:06:92:f0:07:88:31:bf:ab:a1:33:f9:9e:87:a0:d1:db:
         29:4b:65:b7:fa:67:89:a9:5f:75:71:30:bf:f5:31:a0:9b:09:
         70:94:8d:c9:36:81:05:89:e9:84:22:11:65:25:62:96:44:39:
         96:3a:39:58:84:40:43:09:65:8d:90:57:a8:c3:d9:4f:3a:60:
         ee:71:c1:e6:0c:7f:12:a4:f3:ad:30:d9:8d:9d:46:96:6f:ed:
         1d:01:6e:31:49:d9:83:c2:d5:34:19:01:47:86:24:d1:22:47:
         e8:42:78:91:b4:87:93:4a:ce:0a:d1:0c:8d:e0:bb:d8:f3:c5:
         7b:11:b5:ad:c0:c7:f7:57:8b:1b:4d:f4:44:3f:a0:cc:8e:ed:
         16:15:b5:9a:9f:7c:95:50:19:9f:69:ca:bc:da:68:17:4f:66:
         cb:dd:d5:ef:d6:ee:cd:60:fe:1f:9b:38:4c:ea:3f:5e:03:af:
         0b:5e:c1:c5:76:8c:d9:9a:db:a5:30:de:43:ad:02:c0:2f:de:
         56:4b:07:87:07:09:d8:0b:95:f0:76:0a:fb:82:4c:2e:b3:b8:
         e6:6b:85:b4:06:85:fa:3c:41:dd:e4:81:44:90:cb:15:af:6a:
         53:ed:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:30 2026 by rpki-client