Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/652dc436-d851-3a10-b979-407e1f131d40.roa
File:                     652dc436-d851-3a10-b979-407e1f131d40.roa (raw, json)
Hash identifier:          BU66FFM1MVXowE/GU+tGyPnMRa31APb9ugXPCd42L3w=
Subject key identifier:   C4:D0:91:BA:55:8A:38:2F:55:51:CB:66:27:93:5E:00:41:1A:92:4A
Certificate issuer:       /CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
Certificate serial:       010D0C9F4328584E884ACD7A0D5D69DA28F83280
Authority key identifier: EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/652dc436-d851-3a10-b979-407e1f131d40.roa
Signing time:             Fri 17 Jul 2026 20:29:10 +0000
ROA not before:           Fri 17 Jul 2026 20:29:10 +0000
ROA not after:            Thu 15 Oct 2026 20:29:10 +0000
asID:                     213257
IP address blocks:        64.95.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:4a:cd:7a:0d:5d:69:da:28:f8:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Validity
            Not Before: Jul 17 20:29:10 2026 GMT
            Not After : Oct 15 20:29:10 2026 GMT
        Subject: CN=11778f30-c8de-4551-9137-d344c964c831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:66:e4:11:68:af:e5:9b:05:2e:b9:be:3f:
                    01:fa:0d:b3:f1:90:5a:cd:9b:cf:05:54:e9:56:84:
                    26:53:1d:ce:01:14:7d:7a:6b:e1:de:7e:82:03:35:
                    9f:35:99:16:21:2d:1f:00:5a:c7:02:f8:10:29:55:
                    a6:1a:f1:fa:be:2b:c4:31:14:66:d4:2a:2d:91:d3:
                    9c:f0:49:6a:27:de:bb:9b:8f:44:19:8e:c9:47:34:
                    fc:ef:df:d5:5f:f0:fa:2e:69:c8:cd:fe:d2:31:46:
                    34:dd:d3:bc:99:0a:0a:a7:a7:db:e1:1b:62:23:c3:
                    0a:c1:3b:4c:7a:78:4a:b5:25:87:72:1b:8d:57:8f:
                    64:24:d6:d4:5e:e0:35:1f:31:1a:3b:c0:44:7b:4e:
                    6a:21:78:fe:3e:95:17:e5:ce:9d:72:60:b5:a9:e0:
                    bc:98:5c:fd:6c:e6:75:9f:a7:49:8b:43:06:ee:f6:
                    97:dc:5e:e4:e4:47:c8:95:1a:50:0f:5d:f1:b5:ec:
                    7b:02:f3:da:80:33:51:03:3e:f1:5a:ec:66:8e:6e:
                    a4:30:50:eb:18:29:5a:af:6f:d7:b0:3d:a1:03:3d:
                    c4:26:c4:24:0e:e8:8a:94:d3:f5:05:c6:59:49:56:
                    d8:c6:9d:8c:43:e6:b0:50:02:c2:6e:e6:fd:2c:f6:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D0:91:BA:55:8A:38:2F:55:51:CB:66:27:93:5E:00:41:1A:92:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/652dc436-d851-3a10-b979-407e1f131d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.crl

            X509v3 Authority Key Identifier:
                keyid:EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:42:69:4c:e2:cc:3e:14:90:e1:97:5a:9d:52:57:8b:1e:f9:
         ca:cb:91:8a:3b:d8:03:95:fa:eb:b1:74:a1:15:f6:83:6c:e3:
         9a:46:8f:29:ef:ae:cd:fb:15:bb:54:de:16:91:e0:e0:ba:4e:
         8d:7f:40:a2:2e:59:65:b0:4e:90:40:eb:2f:2f:75:ff:a3:cb:
         fa:58:6b:35:74:ad:d7:e0:0f:81:81:2a:b8:96:8b:d0:c0:b4:
         54:36:fa:b2:32:72:55:a7:6b:0d:cb:7c:94:8d:8d:1f:18:7c:
         27:d8:29:77:42:64:10:31:b7:f3:a9:13:ff:0b:b5:00:f2:d8:
         04:fa:63:e0:56:82:aa:31:02:df:47:6d:79:7d:51:1d:fd:a6:
         73:6f:65:99:37:de:fe:ef:a1:60:cf:0a:6b:bf:8d:61:1c:d6:
         6c:f3:54:86:58:51:fe:86:b4:a6:6c:7e:00:69:07:6f:1d:60:
         72:1b:2a:c7:6c:40:41:e6:e3:d5:93:56:aa:19:47:61:ef:3c:
         7c:84:14:51:c6:c5:34:0c:74:2f:71:7d:d9:45:5f:06:ba:a3:
         44:c7:d0:ac:cc:9a:48:d7:a8:ca:c1:5a:53:81:cf:9d:23:fd:
         5f:41:08:49:55:cd:9d:f3:e3:e8:fe:40:fb:9f:33:c0:c4:a1:
         d2:fd:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:40:20 2026 by rpki-client