Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          Cy11D/+TpcC5fXuNicyyne6Hm1sja26Lc7jQPCV9vTc=
Subject key identifier:   6E:52:2E:F8:54:9F:2A:CA:A4:47:E3:28:62:15:A3:4C:C6:79:6E:2A
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F4328584D5E1A4A709318206BEFD2D49A
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4a:70:93:18:20:6b:ef:d2:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=db83cc8b-5314-40be-992b-0f5582298053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:07:f8:b1:13:ed:d5:f9:10:77:03:09:e5:
                    81:28:16:77:36:37:3c:5a:69:f6:21:24:d7:c8:41:
                    20:a5:2b:2e:a4:8f:e3:74:1b:93:03:d7:71:96:e1:
                    23:62:3e:eb:0b:a5:35:46:72:62:a2:b3:27:d9:2e:
                    2b:9f:93:38:39:73:fa:9d:6d:2c:fa:a3:5e:b4:26:
                    ec:bc:42:1f:7e:64:59:55:ab:e6:dc:93:15:a5:42:
                    57:fb:c4:7d:57:0a:f3:4b:90:95:31:5f:6a:56:7a:
                    cb:d9:32:0f:e2:c8:ca:b5:bd:b6:77:0e:86:49:3e:
                    0d:52:de:22:5a:16:0d:06:aa:dd:43:c9:92:03:94:
                    36:f5:4e:12:3e:d0:2f:bb:21:45:9b:af:8c:10:82:
                    f0:21:73:3e:1f:8c:ba:7c:f1:d2:91:a1:15:88:90:
                    b1:d6:33:8c:18:4e:9b:94:d9:a8:99:e1:0b:14:6e:
                    ee:b7:60:06:e4:d0:37:4f:2a:03:b5:7c:bc:44:65:
                    95:0d:38:77:79:7c:5e:6f:c0:2c:cd:67:fe:a4:fe:
                    c7:88:dc:d2:ba:b3:d7:6f:e5:39:e6:83:18:ea:19:
                    92:b7:91:5f:23:40:1e:ca:cf:2f:6a:1d:97:29:dd:
                    20:36:b2:a5:59:b2:87:f9:af:12:79:5d:96:e0:18:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:52:2E:F8:54:9F:2A:CA:A4:47:E3:28:62:15:A3:4C:C6:79:6E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:e4:79:1b:c7:52:a4:fd:5c:ad:4b:9e:cd:e5:be:77:59:
         2d:67:7e:07:fe:b0:08:5b:e1:84:17:c1:96:0c:66:e9:9a:79:
         47:0e:2b:94:2b:e2:6f:df:d4:6a:7b:52:fe:67:1f:21:50:28:
         ad:d0:04:5b:3a:1e:21:28:ba:5f:21:2f:fa:5c:6b:36:6b:00:
         08:33:37:01:c0:0f:96:e7:91:47:9a:01:6a:45:f5:53:87:87:
         cc:38:21:3a:45:a5:44:fb:c0:96:e9:e4:4a:1c:ee:25:1d:ba:
         50:1a:ec:26:ba:e5:a7:6a:f4:66:fb:cd:d3:72:e5:a5:3e:bd:
         15:2d:09:ad:28:89:3a:5a:96:2a:2d:cc:2b:f3:ab:c5:1c:98:
         5f:c4:e3:01:b7:3c:32:50:75:70:21:d7:24:0c:be:f1:da:9d:
         0b:98:29:56:61:16:51:65:b4:ce:22:a1:7e:a8:6d:8a:5b:5d:
         f4:68:ab:18:fc:9f:c0:3e:a4:ec:da:bb:9b:f6:c3:1c:c3:af:
         52:0b:39:3e:ea:57:12:7b:ce:a9:6d:fd:36:7b:0d:bb:96:b0:
         fa:b1:26:1e:37:c4:73:9f:17:04:48:16:ba:6b:64:57:71:23:
         f8:48:f6:ed:76:01:e9:86:9a:b1:4d:f8:2c:19:5a:ed:d9:9e:
         a1:d6:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 16:00:16 2026 by rpki-client