Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
File:                     2f245cec-1abd-398c-a715-037e988d18d1.roa (raw, json)
Hash identifier:          uuaTON026FfmMm4jvdDU8o6FNGLmDqZZV7euns5m7Iw=
Subject key identifier:   E3:C8:29:53:19:0A:C1:EC:65:5D:98:60:42:F1:0A:0F:5D:E7:6D:05
Certificate issuer:       /CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
Certificate serial:       010D0C9F4328584E3E5F20C5088B6FE7BD319320
Authority key identifier: BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     10584
IP address blocks:        64.237.108.0/22 maxlen: 24
                          64.237.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:20:c5:08:8b:6f:e7:bd:31:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb44651-5c6d-4a02-8ebf-8c2812069341
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=11539cf1-de8c-4269-bcd1-971d7ac6479f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:a1:ff:35:ae:b5:e3:fb:64:aa:8a:89:6c:
                    d2:80:32:29:5e:50:65:d9:42:61:4c:f7:65:ba:c2:
                    fa:ca:4f:c8:37:85:56:47:58:49:33:3a:31:69:eb:
                    3a:3e:b7:42:3c:9a:55:05:33:75:94:29:4c:8b:47:
                    e3:7f:5e:71:5f:0b:74:a8:d0:df:ea:a3:9d:0d:17:
                    bb:a1:cc:f3:fa:55:42:28:f8:93:63:ca:a8:0d:21:
                    bd:be:bd:dc:af:37:65:d7:f3:27:f7:ed:64:cf:0b:
                    65:b2:af:9d:0b:d2:d2:2d:f8:fe:93:80:8a:3e:34:
                    19:04:22:ca:a4:7e:06:6a:36:b4:c4:c7:c4:17:64:
                    3b:c5:ed:5a:74:8e:a2:a9:9c:4c:04:fc:3c:a9:5f:
                    f1:c8:a2:27:f3:66:40:48:d3:02:82:fc:55:dc:af:
                    25:b4:93:73:37:cc:12:23:88:dc:c6:37:9a:7e:b5:
                    d4:ce:f1:6f:98:1c:12:85:25:d1:51:48:25:4b:76:
                    8a:9c:df:1e:34:4d:0c:de:66:29:04:91:e9:e1:17:
                    c5:13:03:5b:bd:02:61:c1:c2:13:e4:2e:18:be:54:
                    ca:2b:05:4e:45:8a:3b:05:eb:54:ee:46:07:e0:8a:
                    ac:73:4b:12:97:4d:20:f5:f8:66:1d:1e:f5:7a:4e:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:29:53:19:0A:C1:EC:65:5D:98:60:42:F1:0A:0F:5D:E7:6D:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/2f245cec-1abd-398c-a715-037e988d18d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341/ccb44651-5c6d-4a02-8ebf-8c2812069341.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D5:A3:F5:C4:39:13:0D:CE:DA:1C:EF:55:D9:CA:36:E4:8C:31:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ccb44651-5c6d-4a02-8ebf-8c2812069341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:71:f3:5b:41:db:2b:e0:2a:6b:ec:6b:66:e1:30:59:62:63:
         e8:5d:c9:eb:99:5b:b0:df:2f:16:09:a8:d6:25:d8:eb:cb:04:
         a7:a6:72:74:7a:a8:f3:72:83:15:90:56:24:a9:d9:c3:37:28:
         51:5c:62:7e:d0:7d:2f:aa:11:6b:c5:04:0e:a1:29:04:16:cd:
         89:3f:cb:f1:ce:68:d2:93:5d:9e:a7:2a:1c:af:19:e2:9d:50:
         6b:fc:fb:1c:20:7c:33:47:3b:c1:cf:14:dc:42:22:ce:32:2d:
         af:93:0a:b6:14:2e:22:d2:59:07:79:28:f9:d0:e1:7c:e1:66:
         9d:e4:07:6f:b4:20:3f:19:64:41:26:c4:ad:cf:c6:6a:d5:6e:
         0c:58:33:72:d0:ca:9f:63:0f:0d:96:a4:86:be:b1:e4:b8:c4:
         c1:33:d9:70:2a:06:39:bd:d5:e1:bd:51:ff:37:95:9a:61:08:
         a8:42:0d:e7:8a:c8:52:5e:43:0f:2c:64:9d:50:6b:8e:d5:04:
         07:2e:a7:79:ca:52:5b:24:0a:df:51:d8:94:86:dd:09:b4:66:
         17:12:89:6e:39:bd:85:31:12:4e:9c:6e:27:36:6f:da:cb:86:
         b6:00:ab:36:77:e7:5b:29:cb:1a:e8:41:41:ee:f9:f4:26:e2:
         d2:4b:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 08:44:20 2026 by rpki-client