Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121925f5-c9cb-3103-8d40-1f382957f25b.roa
File:                     121925f5-c9cb-3103-8d40-1f382957f25b.roa (raw, json)
Hash identifier:          05HXS6faGW0Qcpkol3dDzZbELjXgISuuMCRqShQmBUE=
Subject key identifier:   32:90:C1:93:44:B2:E7:24:D6:4C:38:3F:C1:42:59:74:0B:71:4A:3E
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D8AC53FD336CD36ED0FD55080
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121925f5-c9cb-3103-8d40-1f382957f25b.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     398391
IP address blocks:        64.227.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3f:d3:36:cd:36:ed:0f:d5:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=340d116e-c7e8-4ec5-961d-fc3f947854d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:ef:16:0c:e2:90:6f:4a:55:43:03:7c:ca:
                    05:7c:d6:63:8a:e1:af:1a:47:83:ad:8e:4a:be:d9:
                    20:13:52:f8:1e:a0:63:2a:3a:23:6a:8c:16:66:0f:
                    86:ef:7c:be:9f:b0:4c:0b:13:7b:09:25:ee:b5:d4:
                    df:a7:d0:e4:91:82:05:8e:64:e6:8b:7e:bf:36:59:
                    80:cc:d3:9e:ef:72:6a:a7:92:04:87:2f:82:0a:75:
                    2d:6e:1b:ad:1b:cd:5b:ad:99:a5:a6:c9:d4:a3:16:
                    44:6a:92:49:bf:7d:3d:3e:aa:74:ee:36:a1:75:4d:
                    6d:da:35:23:5d:3a:bd:6a:9f:46:68:0a:47:f9:9f:
                    36:e8:dc:ce:5c:59:b4:f6:ca:5d:fb:9f:ba:57:3c:
                    af:62:c9:30:32:c5:36:2b:6e:83:73:18:e7:55:d9:
                    b6:d7:98:ea:86:f4:2f:43:16:64:ed:d0:a6:2c:38:
                    fa:fd:5a:83:92:5f:76:12:3d:ed:cc:08:8c:3b:3d:
                    b7:7d:aa:1d:75:28:31:37:0d:d5:c6:73:7e:b8:12:
                    55:38:f2:5d:bf:12:90:0e:ff:0e:af:aa:4c:1f:9d:
                    72:7c:dc:75:bc:87:89:1b:93:3f:14:8b:fe:9e:ca:
                    0c:52:e5:4a:9e:b0:4b:d0:34:bc:5f:7a:9c:ec:59:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:90:C1:93:44:B2:E7:24:D6:4C:38:3F:C1:42:59:74:0B:71:4A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121925f5-c9cb-3103-8d40-1f382957f25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:59:9e:da:3c:51:1b:d7:bd:f2:0d:cd:dd:55:1b:20:cc:b4:
         53:e6:e3:7a:82:40:42:9a:39:6f:d5:aa:e0:a5:1c:ff:97:cf:
         4b:e5:f1:5d:e8:51:44:b7:ab:ba:7e:18:3d:cd:af:03:7c:07:
         7d:ae:8a:97:5e:8f:25:4a:32:67:c4:fa:6b:7f:92:5a:60:d3:
         e8:f2:bf:d6:c5:14:68:e4:72:25:8f:60:47:90:e6:2f:82:33:
         0a:b4:56:b4:62:d9:72:b3:72:54:4c:5c:bc:4f:0c:2c:e9:36:
         5b:5b:7d:e9:2c:63:ad:13:0c:74:f2:d1:d0:3a:15:aa:a1:db:
         7c:00:84:df:85:ea:ec:84:20:e5:58:52:f9:ee:49:6b:91:83:
         7f:eb:b3:2d:b1:5a:53:ac:03:80:08:57:92:2d:06:66:18:20:
         03:d9:7b:87:36:2a:ce:90:04:db:eb:56:28:0a:11:3f:a5:2c:
         54:20:7f:ce:89:e2:b2:03:df:02:49:ac:20:91:d8:b9:1e:1e:
         b2:dc:d6:d4:8f:7c:09:88:dd:a6:44:d2:bb:2c:d0:6a:3d:7f:
         f0:01:eb:27:67:df:33:c6:6a:67:ca:44:7c:61:76:60:7a:f6:
         41:a1:b8:99:83:06:f8:c6:79:50:13:eb:b6:d6:f7:84:fb:9a:
         25:42:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:30 2026 by rpki-client