Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/246250c3-4d92-3501-b796-cb73ed3acdfe.roa
File:                     246250c3-4d92-3501-b796-cb73ed3acdfe.roa (raw, json)
Hash identifier:          sHtnzePvE0d5OK9P7zpoKCYzwAjZwQxicRVKr6T5pFE=
Subject key identifier:   CD:F8:ED:D0:C5:D5:DC:25:60:F4:3A:7B:E4:07:DA:72:14:28:5A:E1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5D90D5E79255E52E25F92180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/246250c3-4d92-3501-b796-cb73ed3acdfe.roa
Signing time:             Wed 01 Apr 2026 20:23:35 +0000
ROA not before:           Wed 01 Apr 2026 20:23:35 +0000
ROA not after:            Tue 30 Jun 2026 20:23:35 +0000
asID:                     398465
IP address blocks:        64.204.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:90:d5:e7:92:55:e5:2e:25:f9:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  1 20:23:35 2026 GMT
            Not After : Jun 30 20:23:35 2026 GMT
        Subject: CN=ab8428bf-640e-4112-a98a-a596fad2f098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:e9:27:19:69:71:35:a4:a6:27:55:24:75:
                    0b:cd:ae:f7:21:33:96:ba:2f:85:89:9a:24:58:f3:
                    32:28:7f:21:78:1a:97:8c:8b:6d:ff:77:b6:a4:6c:
                    84:c5:34:0e:25:e6:ed:bc:88:e9:e0:68:5d:07:55:
                    b0:ce:37:90:2c:a0:4a:33:aa:e0:15:79:d5:9a:04:
                    40:d8:64:27:16:6e:30:fd:78:c5:a5:3a:51:29:26:
                    09:e4:5b:db:b8:0c:b2:ad:3b:d0:fb:1e:3a:8c:71:
                    e9:dc:bc:f1:ee:b2:ae:63:44:d8:8d:c3:56:7e:3a:
                    88:61:99:93:64:4c:3a:13:46:36:80:43:fb:67:ae:
                    c4:7f:77:50:18:87:a0:9e:63:cb:ea:6c:92:3b:8c:
                    7d:5b:df:b1:7f:3d:ea:4d:70:28:a4:02:f5:a2:90:
                    ef:d2:be:aa:5a:df:f9:60:06:6f:6b:92:26:37:a0:
                    58:12:75:27:52:be:6c:06:4a:52:08:fa:d4:b1:fb:
                    77:16:7c:e0:a9:dc:f4:da:bf:de:16:9f:2a:c8:a3:
                    52:35:78:f0:78:8a:ed:18:cf:9e:ca:a2:c5:d3:fe:
                    9c:66:3d:ed:9b:32:93:14:dd:85:45:fb:21:29:5b:
                    9d:83:7b:93:6a:cf:b2:22:59:3c:2a:09:b1:af:85:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F8:ED:D0:C5:D5:DC:25:60:F4:3A:7B:E4:07:DA:72:14:28:5A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/246250c3-4d92-3501-b796-cb73ed3acdfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:31:58:37:86:b5:dd:d2:2b:a9:ee:1e:19:29:4f:70:37:68:
         96:21:13:54:67:f0:ca:fd:5f:35:40:b6:2c:23:f0:ea:73:f2:
         5a:a0:e2:bf:e6:75:73:1e:56:6c:df:9b:b5:5a:e6:7e:2b:c1:
         48:91:b2:2a:c0:3c:4b:8e:fd:19:42:8a:8e:5c:ed:6a:69:46:
         cb:c8:67:5b:1b:9e:d5:61:e9:33:82:f8:02:91:ce:17:16:a2:
         b7:3f:90:65:23:d4:25:ec:27:d2:b2:fd:4f:cd:9a:62:50:9b:
         c9:e8:d0:80:cb:29:4a:54:bc:aa:e3:7f:ca:6f:15:2c:d9:a1:
         32:35:3b:8c:f3:9a:6f:d4:94:3e:8d:5a:b0:60:33:d7:26:72:
         06:f5:8a:3e:e2:ba:7a:b5:6c:de:f2:eb:3a:38:f7:a2:78:51:
         80:de:6a:ad:8c:90:64:83:ae:b5:04:e7:43:10:32:33:0b:68:
         13:78:b9:e0:f3:4e:b2:99:f3:c5:3a:77:2f:e6:c7:78:02:87:
         03:f4:69:65:3f:22:e2:16:0d:7b:17:66:d5:84:3d:91:f7:89:
         29:b2:3c:88:d9:3d:0f:39:3b:68:0e:59:74:7b:66:eb:9b:70:
         33:a1:ed:7e:29:c6:29:c4:c0:7b:70:5a:6d:1d:ff:0a:56:ad:
         db:46:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:29 2026 by rpki-client