Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121925f5-c9cb-3103-8d40-1f382957f25b.roa
File:                     121925f5-c9cb-3103-8d40-1f382957f25b.roa (raw, json)
Hash identifier:          jh3oBpCfJsyY2YI3m7Emh02DcHYEJBAvxeuCoNMd4wU=
Subject key identifier:   ED:EE:14:AE:70:AB:65:23:B2:2D:8E:D3:C9:1C:EC:77:E6:B7:F4:94
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584CAA271290D698E2018EF13180
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121925f5-c9cb-3103-8d40-1f382957f25b.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     398391
IP address blocks:        64.227.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:12:90:d6:98:e2:01:8e:f1:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=8a5db894-b003-4e18-8c53-975b4386d388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:55:97:e7:ed:8b:02:10:ec:2e:b9:86:b6:
                    99:04:24:37:a7:72:6e:9d:f2:2d:dc:4c:41:04:a0:
                    18:da:db:45:31:ab:ca:41:1d:07:16:66:e4:da:45:
                    4d:06:fb:be:e3:cd:20:56:e0:ec:f1:e9:b9:0a:20:
                    41:a9:20:88:aa:0c:93:3a:3f:03:69:fd:35:8e:46:
                    2f:f1:3b:30:b1:f9:7d:10:60:90:77:8e:36:a1:3f:
                    0b:e0:33:48:73:3e:e1:27:83:59:76:ea:12:ec:83:
                    36:c4:0e:3a:b1:10:09:4c:d8:b4:87:ef:3a:55:6c:
                    89:41:2e:cb:8f:4d:22:f2:35:5f:4c:50:4b:3a:7a:
                    75:26:37:d5:b6:9b:f4:0a:03:03:01:85:ae:bf:91:
                    16:c5:10:45:4c:ca:01:7e:41:a0:70:db:c7:fa:f4:
                    5a:25:54:a8:3b:09:67:1a:4b:42:b0:f2:4e:09:0b:
                    ab:c7:fe:dd:47:b9:67:22:4a:0a:dd:9f:fd:76:84:
                    a5:59:e2:46:19:31:ae:50:d0:cb:e5:ce:63:9e:e9:
                    6d:9c:89:97:88:19:9b:96:39:9d:d7:9a:d5:74:57:
                    76:5e:ea:2c:ac:ff:97:be:1f:f9:b0:3e:82:80:f5:
                    b0:89:85:c6:78:b3:71:c3:d6:d5:17:78:91:be:62:
                    57:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:14:AE:70:AB:65:23:B2:2D:8E:D3:C9:1C:EC:77:E6:B7:F4:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121925f5-c9cb-3103-8d40-1f382957f25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:5a:07:b3:81:e3:d3:6a:ea:06:1e:b1:19:16:ad:51:e7:
         f1:01:8a:b7:ed:5d:37:e8:84:94:e4:8e:f8:08:e2:dd:a4:a0:
         82:92:75:7d:2b:b7:88:b8:65:ac:90:98:74:43:c1:7b:4f:bb:
         b0:37:78:fd:7a:e6:c5:3d:27:9f:46:ac:c4:eb:19:56:8a:aa:
         43:b1:b3:e0:1e:04:3b:30:ef:98:01:dc:92:2a:64:ef:1c:ad:
         ee:fb:7d:88:52:d4:28:2f:23:0c:66:ee:5a:94:bd:03:2a:38:
         cf:c4:31:42:2c:8c:56:a0:7a:1b:81:79:f5:dd:fc:53:a5:76:
         df:d7:12:24:f1:2f:fb:13:74:4d:82:3b:6f:af:20:ba:0e:6f:
         59:0c:01:25:7a:06:ef:e0:a0:76:74:6d:f0:71:e2:7d:bb:75:
         c4:fe:c5:c8:66:cf:37:5d:0e:d7:8a:70:05:b8:f6:69:14:c4:
         2f:c8:ad:1f:e8:44:ae:46:21:26:e6:5e:98:42:51:19:d7:3c:
         f1:15:19:ce:05:c5:05:87:8e:fb:9b:7e:19:77:d4:7b:0e:eb:
         7c:6d:6e:82:35:07:46:0d:cf:a8:79:41:44:67:52:0d:db:8c:
         77:64:7b:f4:bf:16:77:e9:67:9b:6b:5f:f1:ae:bf:c8:27:98:
         5b:5a:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:07:32 2026 by rpki-client