Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5753273d-cbb9-3c40-ac2e-30060c2cde21.roa
File:                     5753273d-cbb9-3c40-ac2e-30060c2cde21.roa (raw, json)
Hash identifier:          Kj+hXY+2TMckkLJUPKXwy2GcJkHpazjg9UJwPE1xmBE=
Subject key identifier:   13:29:05:CA:4A:DE:F8:36:8C:AA:CF:DF:B1:E1:D0:A1:45:F3:CF:17
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584E55B66E10B8715CEF0CD33A80
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5753273d-cbb9-3c40-ac2e-30060c2cde21.roa
Signing time:             Mon 29 Jun 2026 17:39:48 +0000
ROA not before:           Mon 29 Jun 2026 17:39:48 +0000
ROA not after:            Sun 27 Sep 2026 17:39:48 +0000
asID:                     397740
IP address blocks:        67.215.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:55:b6:6e:10:b8:71:5c:ef:0c:d3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Jun 29 17:39:48 2026 GMT
            Not After : Sep 27 17:39:48 2026 GMT
        Subject: CN=ffc23091-1e60-41ab-aca7-8faeaceb8425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:1a:82:1b:b2:8f:21:df:a7:b7:29:19:5c:
                    1c:f0:64:a2:f9:98:3c:1e:4f:3a:9c:3d:0d:7a:ce:
                    cb:35:c3:1d:f1:71:d1:0d:ef:f6:0b:4e:97:c5:db:
                    4c:b0:5f:ef:5f:f7:0b:1e:ff:5b:0f:61:5f:2e:c4:
                    39:94:ac:cd:de:18:75:b6:8c:71:24:46:c7:bc:d2:
                    fe:3e:67:d5:33:6d:0b:ed:90:fd:cd:82:54:50:68:
                    29:8f:af:d1:68:57:1f:3f:66:44:3e:b7:f5:33:97:
                    e0:de:3f:00:c4:19:ac:ef:b0:41:2d:e0:28:94:f0:
                    f1:fc:b7:b4:5d:9b:2f:42:74:17:77:b8:49:a0:83:
                    d3:22:a9:02:f5:97:87:5f:a7:c0:81:e3:83:77:07:
                    b0:8a:eb:ca:87:3b:96:f9:2a:f6:ef:f4:bc:96:98:
                    fc:2b:8a:40:6c:00:61:e0:e0:b2:29:89:ec:69:47:
                    b0:30:b4:77:a0:45:2a:2b:71:b9:6a:e2:5f:02:81:
                    31:7f:94:8d:dd:d3:df:a9:2f:74:a7:80:b6:59:34:
                    6d:8f:cf:10:ea:25:22:8d:67:6d:fe:e2:dd:a9:6d:
                    e2:66:93:11:06:2f:a4:11:7e:c7:db:04:96:8e:e2:
                    3c:ae:7e:e8:3c:01:b6:39:42:60:d4:3e:ce:6a:a8:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:05:CA:4A:DE:F8:36:8C:AA:CF:DF:B1:E1:D0:A1:45:F3:CF:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/5753273d-cbb9-3c40-ac2e-30060c2cde21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:f2:0d:26:5a:8e:78:df:be:f3:60:12:9a:21:8c:12:62:
         c8:3c:bf:96:f5:16:cb:ec:99:94:e6:91:31:a8:0f:81:ed:a7:
         8d:a4:4e:96:b1:0e:bb:47:a0:67:1a:ac:b9:d7:62:73:bb:7d:
         3b:a3:17:32:32:bb:ff:24:55:69:3d:e3:fc:81:87:0d:b8:8b:
         c8:ce:43:1c:fb:7e:19:31:03:59:6c:44:29:42:4d:fb:97:c3:
         5d:ef:9c:09:3d:2c:60:f6:ac:c9:c6:f4:3c:4e:f7:b9:cd:f7:
         ad:ad:d2:56:d2:9a:da:24:89:1e:bb:f3:68:e6:81:20:a8:e4:
         dd:7e:79:24:ec:13:26:ea:6f:95:02:f6:e3:f2:84:fe:74:e3:
         06:69:91:a8:a3:91:2f:82:df:78:f0:88:dd:5d:39:ba:86:f4:
         82:05:bc:d4:86:9a:66:f1:81:c0:63:f5:94:90:10:b1:86:29:
         be:9f:21:df:0b:d8:53:fe:92:92:41:44:99:cc:cd:5b:f2:39:
         77:98:91:d3:58:9a:72:04:3e:28:3f:f4:e8:75:7e:9e:32:79:
         89:8d:4b:fd:5a:76:9c:91:c2:c6:59:99:70:cc:73:df:6a:ba:
         a4:c4:85:bb:51:68:c9:e7:4a:1b:09:d1:98:62:91:60:2a:34:
         29:4a:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 01:14:22 2026 by rpki-client