Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d1d15bf-834d-3197-8d4e-3539bbd0d053.roa
File:                     5d1d15bf-834d-3197-8d4e-3539bbd0d053.roa (raw, json)
Hash identifier:          QmynlU5PFY7G2i4ezcgHcpEcF7paG2u/Lh7HwjOpAVQ=
Subject key identifier:   61:28:1F:8B:38:A3:1C:93:EC:75:6A:05:78:1C:85:CD:53:7F:1F:80
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D5FD5004B03BA078782BC0F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d1d15bf-834d-3197-8d4e-3539bbd0d053.roa
Signing time:             Thu 02 Apr 2026 15:52:32 +0000
ROA not before:           Thu 02 Apr 2026 15:52:32 +0000
ROA not after:            Wed 01 Jul 2026 15:52:32 +0000
asID:                     834
IP address blocks:        64.83.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:d5:00:4b:03:ba:07:87:82:bc:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  2 15:52:32 2026 GMT
            Not After : Jul  1 15:52:32 2026 GMT
        Subject: CN=c6d8a490-1304-40e9-aac3-07f9b62bc8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:75:0d:26:86:a5:ab:b7:48:52:e3:8f:bb:
                    87:07:3a:c4:12:b8:8f:1a:d4:a0:d1:e2:a9:01:79:
                    14:2a:7b:0c:b0:68:9d:f8:c0:5b:be:92:80:ce:e2:
                    83:31:0d:f1:21:9b:4e:ee:98:d4:0d:ba:a4:e1:46:
                    61:fc:c9:69:85:c1:71:76:78:d8:ca:e6:7a:f6:15:
                    cc:61:8c:bd:8b:5d:9e:84:62:e3:97:99:d3:89:59:
                    04:96:20:86:18:dc:3e:44:83:ac:7d:46:7a:96:8c:
                    66:1f:8f:e1:38:67:07:f1:6b:64:b2:e0:6a:6b:2d:
                    c2:5d:d0:14:f1:24:8e:da:cf:66:fc:f2:46:26:b8:
                    cf:e8:89:9e:27:68:df:39:e7:d7:7f:5a:4e:77:da:
                    80:95:bd:c5:4b:37:25:4a:7a:d7:78:54:b4:a0:86:
                    25:d2:9f:eb:9f:21:6d:cf:9d:a3:5f:0d:40:00:1d:
                    70:c3:d2:04:ee:4c:6b:18:3f:4c:e2:51:d1:67:e8:
                    49:7f:2f:47:a2:1c:fe:6a:a3:70:fa:33:da:9e:65:
                    32:bf:97:77:68:11:e4:a0:f5:40:02:87:ca:f7:ac:
                    ca:1a:f8:dd:ee:cf:bf:82:b7:7b:19:e9:8b:68:28:
                    09:eb:a4:d9:a4:de:6a:c2:c2:a0:9b:57:8b:9c:c4:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:1F:8B:38:A3:1C:93:EC:75:6A:05:78:1C:85:CD:53:7F:1F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d1d15bf-834d-3197-8d4e-3539bbd0d053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:b0:60:fd:3e:14:0a:68:6d:06:03:69:12:4e:11:41:30:
         5f:5b:8a:49:e0:3b:1b:60:94:db:5e:8f:b3:1d:25:b5:aa:e5:
         c8:be:4e:49:46:00:f0:c1:12:c8:45:84:d8:69:03:5e:63:01:
         99:b8:81:c7:c8:b8:ae:fe:95:08:73:4d:bd:dc:c4:4d:3d:72:
         56:c8:2b:9a:2e:22:14:64:df:18:55:8c:c3:36:8a:4a:a9:16:
         69:e9:aa:2d:f2:24:17:ce:46:15:16:ff:6b:7d:1d:91:9b:c6:
         37:f7:93:fc:d4:2e:dd:32:99:90:95:e4:78:2f:7f:14:d6:3f:
         3a:79:4e:1e:7e:3f:63:cd:9f:bc:35:7c:02:5d:46:0f:3b:7b:
         cc:48:2e:c3:39:a3:05:6e:24:3d:ea:59:3d:00:67:3d:31:4d:
         fa:d3:20:29:8d:bc:30:32:39:fa:08:2f:5f:a9:f9:6a:71:07:
         fb:79:f7:a9:8f:d2:93:04:d3:b1:b7:f2:ef:fe:40:8f:36:1e:
         c3:f9:d0:cf:87:b1:87:19:d3:a8:e3:26:6d:59:5c:bc:64:06:
         e4:ff:3f:3f:7b:a7:af:c7:c9:9f:04:34:9f:51:b7:ff:b8:b3:
         07:ad:b2:19:9c:5a:b6:dd:ab:6f:b3:40:d3:64:92:23:63:51:
         9d:73:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 13:47:51 2026 by rpki-client