Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa
File:                     a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa (raw, json)
Hash identifier:          jhhXgDZ+unpcwHDaA32IICv7XibErvdsvKuvDfBKF5M=
Subject key identifier:   B9:FC:B5:11:11:52:02:A8:24:3A:73:3E:EF:9F:B0:B2:89:2F:68:7A
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584EC371C9121693783B0E14CB00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     7018
IP address blocks:        64.40.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c9:12:16:93:78:3b:0e:14:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=55424733-88fd-4163-baea-25eef7c7168f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:b9:67:a1:dc:0b:27:68:73:7a:1a:95:82:
                    ad:57:ef:f8:38:30:ea:0d:f9:70:84:77:2f:03:5d:
                    33:c6:5f:24:7d:30:02:f7:15:4b:ec:83:74:ac:2e:
                    fb:04:ad:69:43:cc:c7:84:6b:ba:1e:e7:a8:83:0d:
                    c9:11:b4:3b:32:8a:70:3e:1d:42:a1:24:5b:bb:f0:
                    93:b5:5f:62:c4:ce:7a:ad:66:ed:dc:e4:3a:37:76:
                    b7:e9:c9:71:c5:ad:59:a9:ac:af:97:1c:19:16:13:
                    38:ca:5d:4c:33:5e:50:2c:cf:da:e8:a8:45:b4:f1:
                    12:07:66:de:b7:9d:0d:37:c0:af:b5:13:9e:78:3c:
                    6a:5c:7e:33:dc:f0:96:38:89:3d:6f:26:ff:1a:37:
                    06:00:58:59:e1:ca:4f:c4:15:57:0c:cc:db:93:07:
                    65:68:24:f4:d4:b2:05:f1:19:99:ea:38:ef:60:36:
                    aa:f1:12:a8:c1:71:f6:6c:89:a0:e5:f4:20:0d:a9:
                    1f:a1:73:31:a2:12:f3:ad:b6:c1:82:0c:fd:9c:21:
                    93:a9:3e:de:70:84:d6:e5:e8:5a:70:ee:9b:2a:29:
                    75:20:1c:f0:16:76:c2:96:6c:e7:3d:2e:b3:28:9c:
                    04:45:14:e4:7a:3e:25:f1:27:a4:8c:37:57:c6:91:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:B5:11:11:52:02:A8:24:3A:73:3E:EF:9F:B0:B2:89:2F:68:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a43028c8-ac53-3f20-9ca7-3d7acc73ab2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:f2:a1:ba:65:24:cd:76:5b:99:53:fe:9b:d5:8d:17:08:
         3a:87:e9:7f:43:db:47:a7:e6:15:30:9e:96:24:25:a0:f5:fb:
         9d:ce:f2:5a:c0:4f:a2:ee:47:1d:a4:17:e5:4b:07:35:30:8f:
         32:cc:e6:19:ff:79:a1:7b:8c:11:93:f0:d7:00:b6:7b:cc:34:
         fa:8b:3f:60:be:d3:11:f9:39:99:b8:64:5a:b4:e9:80:e5:b5:
         e8:26:98:b3:b1:ad:32:7a:2c:33:2f:e9:e6:43:63:08:ea:38:
         f6:51:b9:b7:3f:df:d4:67:6c:16:de:af:89:3b:fd:de:d0:c5:
         92:b8:84:ce:e6:48:19:5e:c2:f5:96:29:9d:22:5e:af:b6:ba:
         75:1d:04:1d:02:6a:42:21:74:4a:35:1d:13:0f:1c:61:2c:95:
         7f:33:4c:5d:49:3a:b3:b7:04:ec:2a:9e:ae:90:89:fa:ba:7a:
         c3:f8:8f:80:fc:e9:52:1f:1f:db:86:66:48:a7:cd:8d:71:c5:
         46:c1:57:5e:89:ee:c5:b5:0f:42:3e:78:6e:21:b8:1a:cb:12:
         5f:04:ec:65:32:f8:91:72:23:aa:14:d2:95:ce:54:2f:09:a7:
         c6:83:a2:aa:6e:9c:6a:34:c3:32:f4:d9:69:d8:17:82:c2:e6:
         1a:ac:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:16:05 2026 by rpki-client