Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/21c964b9-add4-347f-97c0-9f1a9b15d2da.roa
File:                     21c964b9-add4-347f-97c0-9f1a9b15d2da.roa (raw, json)
Hash identifier:          8ePyxhGawXsxpti4M90EjRKFVAdWzlL9QlUARU6165A=
Subject key identifier:   4B:D8:59:6C:DF:D0:BC:CB:D3:98:48:C5:B9:65:5E:DC:F0:DC:F7:DB
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584D6EFA575113819E58F8A81B00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/21c964b9-add4-347f-97c0-9f1a9b15d2da.roa
Signing time:             Wed 08 Apr 2026 02:04:54 +0000
ROA not before:           Wed 08 Apr 2026 02:04:54 +0000
ROA not after:            Tue 07 Jul 2026 02:04:54 +0000
asID:                     2914
IP address blocks:        64.112.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:fa:57:51:13:81:9e:58:f8:a8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Apr  8 02:04:54 2026 GMT
            Not After : Jul  7 02:04:54 2026 GMT
        Subject: CN=b193544f-391b-469e-97bd-72b75a117b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1a:a8:2b:a3:44:46:fb:fb:be:e9:25:07:1a:
                    b4:e1:d4:45:f6:2a:13:95:04:cb:e4:e7:06:fc:91:
                    5c:fe:ec:19:c7:90:3e:ce:85:06:1f:16:71:4e:76:
                    43:3c:65:93:a5:21:6b:9a:21:b8:a0:2b:70:7e:4b:
                    39:51:55:9f:b1:14:10:69:c1:e9:2d:62:18:b5:6b:
                    01:f0:ce:fb:15:75:99:5f:b9:a5:a9:78:86:8f:3e:
                    82:51:11:a3:7b:2d:7d:f3:39:97:99:6e:47:f5:32:
                    b8:d5:5e:6c:a0:2b:15:ae:33:94:d8:e5:e0:a5:da:
                    fc:13:2e:f4:34:8d:4f:b7:15:2c:c2:13:7e:31:21:
                    a6:21:45:44:3e:f3:c7:0f:f6:f4:14:0b:59:a6:b5:
                    81:50:12:b1:16:a3:75:fc:f1:4f:e0:15:ae:26:02:
                    81:a4:35:1c:ea:39:1c:e7:86:96:4b:71:5d:b1:d6:
                    d6:ca:57:7a:a8:94:d0:0e:dd:d5:3e:d5:34:6d:b9:
                    a1:24:05:24:46:d6:40:5e:ce:ee:7a:87:56:ca:08:
                    18:0b:6b:ea:4e:13:1c:ee:b5:8a:41:a5:5d:ad:e9:
                    fd:66:63:4e:2f:97:44:87:32:7b:e3:43:44:25:44:
                    e9:49:e9:4c:70:cb:83:52:e0:ce:41:75:69:0f:5d:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:59:6C:DF:D0:BC:CB:D3:98:48:C5:B9:65:5E:DC:F0:DC:F7:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/21c964b9-add4-347f-97c0-9f1a9b15d2da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:2d:3e:ec:33:2b:29:07:09:af:74:86:8d:de:d7:da:0e:
         fe:82:b1:00:df:b2:5b:bb:37:52:ea:9d:5f:c4:de:b9:95:2b:
         10:40:4c:a7:34:6f:3a:76:57:ac:20:a6:05:8f:46:86:7e:97:
         84:43:45:3a:d6:9b:dd:68:bd:a2:42:f9:8c:45:d3:50:44:50:
         97:d9:dd:1c:03:9b:b3:b4:a3:cc:fc:74:ec:fd:54:2c:3a:74:
         4c:b6:5a:f7:d3:6a:7b:b5:00:60:33:17:84:16:66:8d:49:31:
         41:b9:de:e3:6c:d6:89:c6:ac:8c:a1:28:8e:64:08:28:f8:6a:
         96:25:df:23:6e:19:a6:36:b0:0c:53:0f:ba:1d:9e:0d:ad:23:
         38:1c:b5:1b:3e:a4:1b:7d:78:30:30:28:bd:99:4b:1c:c0:94:
         35:84:5f:3d:1c:75:38:49:c4:98:6b:2b:96:d3:ab:86:6e:c3:
         5b:68:53:6c:ff:e7:e8:f9:a9:71:f9:96:cf:ed:aa:7f:dc:96:
         38:96:fd:e0:66:53:e8:58:78:32:33:53:8f:a3:e5:5d:be:55:
         c7:da:d9:a7:ef:f5:6b:22:fe:91:5d:e7:52:2c:84:86:df:ec:
         7f:50:67:01:8a:05:32:b9:cf:bc:0e:5f:38:1e:39:c5:6c:b6:
         af:09:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:12 2026 by rpki-client