Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/7d3fede0-23c2-300f-b263-5c4be97eabd6.roa
File:                     7d3fede0-23c2-300f-b263-5c4be97eabd6.roa (raw, json)
Hash identifier:          qUh+iNoCVaS1ABG/pn8XihsvXvzecfoA9tvWtS3pQmc=
Subject key identifier:   28:11:44:31:FD:F1:CA:57:2F:F3:0B:E8:64:21:55:D8:7E:4B:3E:FD
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584CB121C1FA1EE3C92B56BE58C0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/7d3fede0-23c2-300f-b263-5c4be97eabd6.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     27385
IP address blocks:        64.39.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c1:fa:1e:e3:c9:2b:56:be:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=2a4a71d0-38f9-42b3-be68-35b61d42137a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:8c:7a:86:dd:0a:6a:72:39:e9:a8:f4:f4:
                    52:60:77:08:ed:f8:43:88:71:0a:ff:e9:3b:ef:27:
                    f5:e5:29:81:12:ec:13:33:6f:0f:ce:68:e2:5c:5b:
                    45:28:8d:5c:2b:76:b8:14:4f:92:94:34:d0:fe:5b:
                    d3:b1:11:b7:51:81:7d:5b:00:4f:3f:f9:85:98:46:
                    60:6d:77:82:fa:c0:3e:71:44:23:08:9d:e9:2e:41:
                    cb:cd:3a:7e:b6:7d:0e:b8:14:0d:75:27:dc:2b:7f:
                    31:11:86:68:05:86:66:48:df:86:ca:f9:2c:a3:65:
                    23:a0:b9:71:f5:18:20:06:e4:de:ca:f7:86:d3:02:
                    7c:f8:5d:b5:c6:7a:e2:1a:7e:10:32:d8:22:c5:12:
                    3f:a5:37:5b:c7:97:9d:31:50:71:42:97:d5:ca:59:
                    93:fe:c2:f0:91:a5:5a:36:a9:17:51:93:d5:a4:ba:
                    dd:af:1d:61:f5:c9:57:d4:c9:2c:fc:65:8e:29:d6:
                    58:1e:0a:12:ad:77:21:a9:0e:3e:cb:ed:05:d2:0b:
                    f6:8a:b4:ba:5e:d1:a0:d1:ce:34:ee:97:d2:a2:4a:
                    bb:92:19:78:a4:d6:0b:3f:8e:6c:6e:89:72:c1:b0:
                    2a:8c:ec:85:39:64:8d:53:ee:43:ba:e0:94:53:b6:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:44:31:FD:F1:CA:57:2F:F3:0B:E8:64:21:55:D8:7E:4B:3E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/7d3fede0-23c2-300f-b263-5c4be97eabd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:08:db:53:e6:64:5a:1c:7d:57:e4:5d:fd:d3:1e:3f:29:81:
         6c:16:5d:91:c5:51:4e:35:53:50:a3:4d:e8:8d:d1:f0:67:d7:
         74:b1:fd:bf:85:df:02:f6:81:a4:67:31:52:24:b5:9c:f1:46:
         b0:67:df:d9:34:3c:91:9d:e7:07:57:c5:97:80:8f:26:bc:aa:
         8b:9d:27:c2:21:01:c7:60:89:98:e9:d2:7b:79:95:e0:e2:4c:
         8b:a3:4d:3e:f9:fc:34:70:89:f3:d4:98:21:da:52:f3:3c:ed:
         5d:1d:24:ba:94:dd:6c:bf:09:bc:5e:8c:3e:2b:29:b8:24:5a:
         c7:8c:69:8e:24:47:6a:f4:57:5c:16:80:82:09:3f:14:fd:56:
         97:b3:0d:1d:8e:83:4a:43:11:43:e3:24:0c:89:45:ba:6c:99:
         d4:be:4c:05:b9:4c:02:a8:4c:49:77:43:66:b9:c1:aa:6c:eb:
         1a:1d:b7:01:29:0c:cb:83:ca:8a:85:29:52:68:30:a6:0e:83:
         38:ea:8e:9f:0f:5d:fc:e3:b0:86:ae:02:4c:f2:ad:76:d7:a2:
         ed:4f:d0:50:79:f1:09:de:c2:b0:74:05:c9:57:8c:e3:e6:38:
         03:b8:4f:8a:c9:ec:62:47:80:62:06:05:b8:bd:60:aa:8d:5d:
         62:11:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:12:36 2026 by rpki-client