Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa
File:                     e42d91f9-9804-3d76-af94-8d44f01a2d24.roa (raw, json)
Hash identifier:          RMSP+bbZ4jguMYRkV73jT3synV/7E/jsIK7lh9SOkdY=
Subject key identifier:   87:9D:55:42:B7:01:DF:AA:BD:B9:27:95:BF:11:08:03:7A:64:A4:2E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584EAA51C662D6EAFE3C3A697900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     36492
IP address blocks:        64.9.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:c6:62:d6:ea:fe:3c:3a:69:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=a81ea025-2ab3-41b0-93f7-b6dfccdb6442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:d2:9a:fc:32:bd:2d:b0:de:b8:94:31:5e:
                    a5:d6:c8:1b:d5:95:04:26:44:d3:11:59:16:1c:9f:
                    3f:af:da:fb:07:67:33:6f:f8:c5:04:97:6a:c2:a2:
                    09:28:57:a7:93:ce:ea:b6:48:9b:14:9f:42:0f:55:
                    40:7f:2e:75:1b:13:06:98:9a:a4:f2:9e:d2:7f:11:
                    51:29:70:a2:3a:c1:a5:89:a1:f8:4b:eb:49:d4:a4:
                    72:94:9e:04:ce:f6:28:ba:10:a9:84:d7:12:74:13:
                    97:49:f7:46:56:74:55:84:98:c6:33:3d:1d:dc:72:
                    da:a9:d6:5e:90:41:2d:80:0e:bc:e4:d7:2a:9d:b1:
                    81:99:55:92:61:51:4c:c0:cd:eb:01:2d:7f:c0:ba:
                    41:32:8c:3a:3b:94:51:f1:47:ec:14:1a:62:5c:6a:
                    d5:95:0d:96:11:02:fe:f5:46:4d:7b:9c:42:4c:78:
                    f2:ec:00:d6:61:00:f7:35:f3:2c:8e:53:bb:29:63:
                    95:74:a6:d7:e1:78:3c:09:6f:35:b4:5b:fd:22:c9:
                    be:10:e6:06:5f:34:a4:46:9d:ed:21:cc:60:48:f1:
                    c9:d5:f1:e5:5a:de:7b:74:6d:25:60:0f:d0:2c:26:
                    8f:83:cb:4d:e6:c0:8a:4e:b6:98:87:bf:7f:ed:54:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9D:55:42:B7:01:DF:AA:BD:B9:27:95:BF:11:08:03:7A:64:A4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:fc:8b:40:bd:78:91:01:1a:a4:20:51:d9:45:e2:fb:44:
         17:ce:08:fd:05:8b:f7:00:5c:8b:f8:96:21:16:77:7e:7f:07:
         2d:ca:e3:61:2d:4e:fd:4d:35:f1:3a:c3:d7:06:b9:08:ac:d6:
         f6:74:9a:a1:13:c8:f9:ae:5f:45:1b:74:bf:bf:3f:c5:d3:ec:
         86:9f:fb:4f:da:fe:97:fd:fd:77:f1:38:8a:9a:ad:41:d2:f2:
         35:74:31:40:3a:fc:f0:6d:36:56:6d:4a:f6:b4:db:ef:73:8f:
         96:a4:f2:22:e1:b7:fb:35:d1:3e:b4:17:01:6c:ca:35:01:9d:
         3a:3d:d1:62:26:c9:87:9c:a4:06:33:62:a0:eb:01:69:89:98:
         71:9d:47:fe:dd:f4:85:89:a8:5b:a9:69:38:b2:8e:25:70:f3:
         50:a9:13:b1:99:90:77:74:7e:fc:64:94:73:53:26:fa:24:7b:
         10:82:82:72:61:0c:f0:69:60:2a:22:bf:2b:2b:73:0c:1e:24:
         fe:56:f8:75:0f:45:80:5e:bc:07:fe:d6:5a:e6:7d:f3:46:f0:
         9d:5e:ce:79:31:d5:ec:bd:b5:88:c8:6b:bf:7b:8f:19:b5:c2:
         44:5f:a1:66:a4:11:ec:b0:da:6a:a4:f5:88:ea:e9:bc:19:75:
         df:89:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:30:16 2026 by rpki-client