Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aab96d9b-795c-3a53-88fc-056e19c623a3.roa
File:                     aab96d9b-795c-3a53-88fc-056e19c623a3.roa (raw, json)
Hash identifier:          TVnGHiUQidpd2xx7dtrvYJZ4nVbhM8Gm117kVP0sMb8=
Subject key identifier:   4D:14:59:78:03:58:A2:50:11:F6:18:E8:B7:D3:4B:E4:27:5A:A1:78
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DAC2C18FD6FB5E9BCB2B90180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aab96d9b-795c-3a53-88fc-056e19c623a3.roa
Signing time:             Thu 30 Apr 2026 00:09:28 +0000
ROA not before:           Thu 30 Apr 2026 00:09:28 +0000
ROA not after:            Wed 29 Jul 2026 00:09:28 +0000
asID:                     20473
IP address blocks:        64.69.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:2c:18:fd:6f:b5:e9:bc:b2:b9:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 30 00:09:28 2026 GMT
            Not After : Jul 29 00:09:28 2026 GMT
        Subject: CN=86e9c983-77b5-485d-8846-0548b02475ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:36:e0:b3:62:d1:c8:62:cb:60:5c:25:cd:
                    31:d7:41:4c:3d:2a:ab:5b:47:73:49:f6:4b:04:66:
                    2c:4d:c3:93:63:66:25:a5:41:45:62:07:66:69:f1:
                    ed:75:cd:a2:9d:56:59:ce:7c:28:fc:46:b5:5d:ea:
                    65:e9:87:32:0d:53:5b:cb:a9:30:2b:5b:cf:72:1e:
                    ab:b3:25:af:1d:0b:60:88:78:4e:f9:42:63:fc:17:
                    c4:ea:26:03:51:ec:fb:c7:2c:78:e3:13:ef:20:a3:
                    51:3a:64:07:b2:bf:a0:c6:db:07:08:c8:6d:68:27:
                    5e:72:50:38:95:52:6e:8d:e7:aa:59:76:ca:a2:30:
                    1b:c7:5e:ea:28:f2:11:6b:0c:6a:a3:82:a4:72:37:
                    4e:46:37:9c:2d:05:22:74:f3:b3:01:8b:9f:d7:8f:
                    c8:43:19:94:79:a7:3f:f1:67:9d:74:40:48:b5:15:
                    61:bd:b5:45:61:85:7e:24:32:a2:59:6a:3c:b1:57:
                    7c:13:c6:a0:55:f2:61:4b:17:2b:e9:93:76:ba:2e:
                    9f:16:1d:82:23:5f:fe:91:85:8d:80:e2:e6:66:e0:
                    01:b1:3a:63:cf:ca:6c:55:14:1a:35:09:90:e6:0a:
                    4f:36:c5:0a:51:d7:3b:b0:9e:fa:88:84:d1:55:86:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:14:59:78:03:58:A2:50:11:F6:18:E8:B7:D3:4B:E4:27:5A:A1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aab96d9b-795c-3a53-88fc-056e19c623a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d6:6b:93:15:ab:2d:06:b7:c8:20:0d:39:80:02:05:bb:9e:
         93:e2:0f:d1:0a:04:42:46:f7:51:4f:b4:9e:b3:09:fd:ae:d0:
         72:bb:d0:8d:9d:67:fd:db:cb:91:3c:52:d5:5a:18:1b:f6:7c:
         48:cf:5d:9c:51:e3:42:e1:b3:9d:99:be:46:dc:95:92:df:14:
         79:2b:cc:4a:d6:ec:f6:80:d9:d7:1b:ce:53:f9:8a:a7:d1:fc:
         ff:4d:2e:b3:c4:32:e1:85:27:b2:93:ff:c7:0b:14:d5:36:70:
         de:58:83:14:92:2f:c5:4f:b8:77:db:b8:8c:98:37:3d:33:65:
         9c:c7:2c:a5:88:f0:d6:fc:60:e8:5d:80:bd:d0:7a:dd:f6:f2:
         49:32:48:b6:96:69:8a:5d:c5:f9:88:70:f4:c8:89:05:68:c9:
         a2:a6:de:c1:19:60:68:8e:85:41:5d:a3:92:ae:51:9e:03:d8:
         83:e7:35:fc:68:c1:65:af:07:1c:78:38:13:7a:8a:f8:7d:13:
         8e:38:e2:c4:0b:62:81:ac:9a:21:3f:62:a6:7d:d7:34:55:b8:
         9e:60:e2:bc:af:4a:de:28:47:99:82:8e:2a:2d:d7:3b:2a:13:
         23:3d:4a:f8:5a:09:77:82:ad:d2:05:98:37:4a:b4:8d:e7:de:
         41:11:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:52:04 2026 by rpki-client