Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84711e7b-4235-3b4a-a6b6-4750e86f65f2.roa
File:                     84711e7b-4235-3b4a-a6b6-4750e86f65f2.roa (raw, json)
Hash identifier:          KrkQ+EM35sq3xUq4AdP0MMopYcurgzNhXX8x1WStAPU=
Subject key identifier:   16:41:35:67:0A:3D:60:60:E6:07:A6:DF:3E:3E:37:F2:64:8A:DC:43
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DF210B9891B23E7050D503700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84711e7b-4235-3b4a-a6b6-4750e86f65f2.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     32693
IP address blocks:        64.83.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:b9:89:1b:23:e7:05:0d:50:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=74c4eb82-d775-4a1a-85b3-495a26566250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:de:29:69:ab:b2:c9:a4:32:cd:3b:42:fa:
                    f4:6a:e5:c8:f9:4c:18:b5:d9:9f:71:f6:95:eb:0b:
                    81:97:61:92:14:ad:51:71:f7:f1:48:29:37:84:3d:
                    03:26:df:00:a9:53:02:d2:9e:db:3b:29:44:eb:90:
                    fb:b6:b1:aa:d8:75:4e:5f:aa:06:15:b5:2f:72:1e:
                    2f:32:47:28:58:d8:6a:af:23:18:d0:4d:7e:1b:b8:
                    3b:6f:fe:c9:e8:86:2b:12:d4:94:b5:ba:2a:b2:73:
                    81:67:7a:1a:81:47:99:7d:96:9a:08:33:ce:13:38:
                    3d:cb:c6:46:55:a6:20:96:d8:22:ce:de:fe:6c:19:
                    5e:81:d3:40:14:c6:31:d9:38:07:23:ad:9f:a4:bf:
                    f4:3a:66:05:3a:de:fa:e3:28:64:13:0c:48:87:95:
                    42:32:1b:2c:8a:55:ff:ff:f8:c3:42:25:82:25:35:
                    67:00:4f:d5:3c:c3:76:7c:b4:7a:fc:68:d6:11:29:
                    f0:a8:0d:15:d1:e8:67:aa:94:f7:f8:9a:77:d4:1f:
                    a2:a8:2d:5f:63:4d:cc:70:28:45:f4:41:02:19:03:
                    23:c9:61:b0:76:c6:d8:9b:39:76:16:57:e5:50:25:
                    08:5a:e5:51:18:d5:48:06:10:47:a0:db:10:9d:82:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:41:35:67:0A:3D:60:60:E6:07:A6:DF:3E:3E:37:F2:64:8A:DC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84711e7b-4235-3b4a-a6b6-4750e86f65f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.83.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:48:8d:25:c8:c1:6e:cd:c8:06:5d:64:c4:7a:d7:b1:5d:1b:
         ee:0e:2a:b3:5b:80:03:8a:a2:65:5f:b6:bb:8e:84:ad:bd:8f:
         b7:33:fc:1c:74:e0:6a:51:11:61:e1:00:34:11:37:4e:b1:c5:
         ce:f3:50:8a:bd:e8:6a:03:bd:02:06:98:5d:de:2e:17:e3:c1:
         49:9b:6d:75:85:46:19:85:5c:09:31:ba:59:04:43:d9:6c:bd:
         1e:dd:a0:96:86:88:8f:3c:9f:b5:cc:d7:0e:a5:8b:c0:c0:de:
         21:47:e6:41:b1:fc:ed:6e:fe:be:93:e4:e9:ca:15:b3:d6:64:
         04:15:de:78:cf:30:93:26:43:b3:64:26:4f:7a:91:4e:e9:8b:
         ff:48:34:19:7e:b7:fd:1d:ac:b4:1d:2d:28:0b:d2:3b:0a:c1:
         d7:51:f8:f5:f5:9b:8f:65:70:18:c6:f6:7e:8f:14:04:c4:a0:
         40:f1:6c:bb:5d:95:60:fa:1c:14:dd:b4:6a:1e:16:1c:e5:b9:
         1a:f0:fd:9c:53:37:fe:4e:11:31:c5:3e:bd:a2:b5:f1:a4:d7:
         5f:91:c7:9c:99:b1:67:78:de:56:f4:b0:b7:a4:9f:aa:82:4c:
         80:b0:01:19:e5:e2:cf:ee:3b:b3:41:70:46:14:5c:30:73:31:
         aa:0d:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:55:31 2026 by rpki-client