Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa
File:                     35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (raw, json)
Hash identifier:          3eVsDQPMgwovVpog8LJOdEHPupeozdYRIKieEjsCHV4=
Subject key identifier:   D5:03:9D:2A:F9:C4:64:19:EE:79:B8:2C:97:2A:1B:AB:6B:D2:A3:35
Certificate issuer:       /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac
Certificate serial:       010D0C9F4328584EDC91F869C86F6F5B8AE6CC80
Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     23316
IP address blocks:        64.136.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f8:69:c8:6f:6f:5b:8a:e6:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=b25acccf-2090-4335-a494-009cdc914bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:af:6b:48:fc:a4:97:c9:56:60:c2:b2:cf:
                    72:3d:03:bd:e7:ba:64:28:ba:0c:dc:43:6b:bc:33:
                    e5:1e:50:3d:ff:84:e0:3b:e3:24:50:68:5c:32:27:
                    e7:f9:03:69:21:1b:50:ea:23:65:f1:02:a2:27:01:
                    0d:cf:4e:e3:18:1b:ec:03:94:70:8b:c1:4c:cd:61:
                    82:a2:fe:5c:77:fd:16:73:07:92:44:9d:23:a3:cd:
                    61:ef:eb:4d:ab:39:ba:c5:ac:31:75:52:c2:eb:02:
                    5c:de:06:02:c0:7c:85:44:34:8a:62:32:14:5e:9f:
                    da:78:73:ad:a9:be:83:85:85:ad:f9:73:19:64:b6:
                    b7:19:7e:62:74:26:9f:85:d6:3d:69:5b:de:65:ca:
                    68:ad:e9:18:91:0c:e9:d0:46:fe:d4:54:5d:30:e4:
                    e7:b4:27:75:c3:1c:f9:4f:86:57:f0:0d:b6:fa:4a:
                    d7:c5:69:95:4d:bb:1e:8b:48:84:03:7e:27:0c:1e:
                    da:78:6a:c7:75:f5:e3:55:72:49:a1:a8:be:2e:43:
                    d9:38:57:ca:7c:11:04:db:8c:eb:a1:71:2b:90:ca:
                    2d:6e:66:6c:a2:fb:e6:b2:7d:c8:cf:61:6a:ac:bb:
                    eb:af:4c:01:0f:b7:1f:3a:c3:23:eb:f2:1d:07:c1:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:03:9D:2A:F9:C4:64:19:EE:79:B8:2C:97:2A:1B:AB:6B:D2:A3:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/35c68db1-b27f-3428-b312-c03d86e4f9fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl

            X509v3 Authority Key Identifier:
                keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:47:1c:b5:54:5a:1c:97:df:1b:eb:46:d0:1e:fa:75:9a:
         63:af:eb:97:33:7e:fb:79:ed:34:8a:97:da:9c:1f:3b:de:0d:
         f6:2f:63:2c:a9:05:e1:77:8b:71:31:ae:a4:e1:54:49:0e:de:
         36:12:04:3f:70:66:a1:e6:5f:bc:35:0a:2e:5d:87:09:fb:8b:
         4f:09:a4:0c:5d:75:a2:98:23:bb:a4:ac:fa:8d:99:b0:09:9b:
         d3:23:9c:c6:c9:c9:1c:61:0c:0a:08:22:38:3b:e0:c1:3d:d2:
         85:f0:f7:07:25:74:22:89:99:29:c1:41:a2:78:eb:eb:9a:f2:
         7a:4a:3b:a3:5e:15:07:ce:d4:27:fe:f8:f1:7a:a9:48:5f:d3:
         40:51:80:ae:e3:fb:c3:a9:6e:3c:b6:f2:c4:b7:7e:9e:23:a9:
         97:fe:4e:9a:69:e8:82:bb:df:30:6a:c6:db:1e:4a:76:d4:ac:
         c5:18:2d:c9:80:5e:b7:66:36:b4:72:12:01:9b:ee:ca:f7:83:
         37:d2:ca:17:d6:64:4c:47:94:b6:6f:1e:43:ac:b9:7e:d3:0c:
         8d:08:4f:4d:fa:af:ce:34:11:fb:0e:0a:03:92:4f:69:c8:f8:
         e0:b6:96:ef:a8:30:1a:8f:62:57:d5:5a:4d:17:40:c3:ec:5c:
         bf:40:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:22 2026 by rpki-client