Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f63084d-48c5-310e-ae19-131313d29bdc.roa
File:                     3f63084d-48c5-310e-ae19-131313d29bdc.roa (raw, json)
Hash identifier:          ZsdBsrxfFmhaLUii++5z55DfqyEB8S8odFLe85GBc28=
Subject key identifier:   6F:D7:83:76:3A:60:5F:AE:E3:64:09:C7:A0:AE:50:95:EC:46:C8:33
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EEDA2D137B06952387D7D57C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f63084d-48c5-310e-ae19-131313d29bdc.roa
Signing time:             Sun 23 Aug 2026 03:43:09 +0000
ROA not before:           Sun 23 Aug 2026 03:43:09 +0000
ROA not after:            Sat 21 Nov 2026 04:43:09 +0000
asID:                     152179
IP address blocks:        64.204.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:a2:d1:37:b0:69:52:38:7d:7d:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 23 03:43:09 2026 GMT
            Not After : Nov 21 04:43:09 2026 GMT
        Subject: CN=10ec6bf2-7b8f-4e14-aca2-00f444ebd4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8c:f2:8e:16:b9:e4:87:b4:1d:6d:3f:af:9f:
                    2a:14:0a:2e:38:71:0e:8e:66:2f:15:25:39:08:64:
                    dd:d6:d0:22:86:65:7c:2a:02:ef:87:9b:56:e1:1f:
                    ff:97:03:c0:9a:89:6f:92:41:ca:d4:cf:2f:bb:9d:
                    58:25:97:2b:22:3c:cc:fb:b0:88:94:3a:84:3c:44:
                    a8:8a:11:6f:f5:89:b0:a0:ce:c3:09:65:f7:4c:37:
                    b4:97:75:78:f1:97:d8:19:2c:67:b8:cb:7f:18:44:
                    41:6b:55:26:8c:a8:95:3e:10:80:0c:b6:5a:31:7f:
                    08:5d:b9:87:40:70:96:24:19:65:1d:ad:22:23:5e:
                    a0:5b:8d:43:4c:97:3d:54:a1:da:b1:65:e3:70:61:
                    88:18:5d:67:7b:6f:01:17:6d:44:95:09:75:c1:12:
                    5a:4e:05:89:23:48:62:94:65:23:7a:3e:00:28:bb:
                    1e:3e:e5:ae:88:30:9f:a6:7a:6e:4d:c7:19:1b:a3:
                    d6:7c:d6:e7:5f:7e:4e:b3:04:c1:66:15:50:de:d7:
                    d7:10:0d:86:69:19:94:da:97:96:3f:2f:67:99:95:
                    23:b8:ac:36:0e:3b:8b:3b:25:03:61:52:a5:b3:c0:
                    57:d3:2b:f3:14:4c:9d:0c:38:9a:56:43:9d:57:5c:
                    8d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D7:83:76:3A:60:5F:AE:E3:64:09:C7:A0:AE:50:95:EC:46:C8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3f63084d-48c5-310e-ae19-131313d29bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:05:c0:ee:02:dd:70:6b:b1:b7:e5:a2:84:4e:3a:f3:c3:
         43:91:10:c1:9c:96:00:6a:22:38:0c:c7:90:ce:32:9b:b6:b5:
         11:af:c3:66:ae:b6:6e:27:61:0b:b1:f5:31:97:fa:5f:74:d9:
         11:8d:a6:c9:da:78:02:fc:8c:56:20:ac:09:3e:1b:02:56:49:
         8d:46:77:17:6c:46:a9:90:68:9f:71:5f:71:3b:c7:6d:38:1e:
         33:23:47:91:b5:28:8f:1b:1e:5c:f9:a2:33:bd:be:cc:ec:e2:
         9a:8c:47:e6:6e:0d:fb:ad:3b:08:a7:47:62:fa:f9:34:6f:7a:
         71:6d:7d:53:a0:f5:ca:0c:e1:6a:e8:6c:3b:38:df:85:97:95:
         b5:65:65:79:0b:89:ef:54:bc:c8:d5:55:ed:00:b7:d6:87:17:
         2f:ae:38:1f:2e:31:9e:80:c8:78:c1:57:ab:10:f4:b8:53:b1:
         85:89:78:bb:59:6a:de:dc:d3:42:ba:ee:8d:84:43:cf:c8:e9:
         25:94:b8:9c:82:53:2b:a3:b8:42:1f:76:54:71:9a:21:6a:5a:
         46:8b:bb:86:7f:93:7e:90:3a:f1:e3:43:00:58:7d:e4:3b:a5:
         04:d6:33:77:b4:5d:3c:48:fd:35:3c:ec:df:23:42:8a:bb:d9:
         fb:65:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:05:54 2026 by rpki-client