Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47d4ce91-e1f7-37dd-92f0-d558ccd9269a.roa
File:                     47d4ce91-e1f7-37dd-92f0-d558ccd9269a.roa (raw, json)
Hash identifier:          YWCfPKxBTTjs3lhphO0MhxG67HqYO5r88c8uf+BBP+I=
Subject key identifier:   9B:DC:6B:60:9E:53:4D:41:83:F0:7C:B6:49:F5:0F:4A:E0:4E:71:21
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E66502C95A808C385AAC62700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47d4ce91-e1f7-37dd-92f0-d558ccd9269a.roa
Signing time:             Sun 05 Jul 2026 16:22:30 +0000
ROA not before:           Sun 05 Jul 2026 16:22:30 +0000
ROA not after:            Sat 03 Oct 2026 16:22:30 +0000
asID:                     152672
IP address blocks:        64.204.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:50:2c:95:a8:08:c3:85:aa:c6:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  5 16:22:30 2026 GMT
            Not After : Oct  3 16:22:30 2026 GMT
        Subject: CN=c70bf38c-d8da-4876-a301-0b1d6925ecf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:8b:55:86:66:51:c8:fb:09:7a:4d:da:da:
                    a4:a7:e4:ef:3e:71:99:e6:85:c6:e0:2d:52:5e:6b:
                    de:36:f9:ab:9f:f0:7e:84:13:a8:9b:45:30:be:c2:
                    2c:85:84:5c:21:99:2c:49:8d:b9:81:9d:07:0e:0d:
                    ac:10:8e:8a:ce:91:80:20:ef:72:a7:39:db:28:5f:
                    6e:f2:94:96:d5:d6:97:ce:5b:20:06:21:94:7f:14:
                    69:84:31:ba:08:47:51:fc:42:9d:41:86:73:03:52:
                    a4:a6:fb:c6:04:1c:c7:71:1a:e2:29:73:e9:11:3b:
                    ff:2a:b9:12:8e:36:7a:d1:86:89:14:ca:e6:57:84:
                    2f:6d:7a:5d:7c:37:48:f4:0e:87:32:54:9c:aa:1b:
                    0a:d9:6a:a9:71:7b:85:5e:8f:fa:d2:33:11:0e:aa:
                    93:03:08:e0:11:ba:28:30:fe:81:f3:3f:8a:86:67:
                    00:c1:9b:9d:4f:e2:70:b1:8c:76:4a:da:66:8c:5e:
                    70:1d:a3:62:52:e8:06:46:1a:33:d2:b3:54:90:2e:
                    38:e2:21:0d:86:ff:7b:f2:2f:e8:4b:b8:05:a1:f8:
                    28:4a:93:22:23:0d:50:6d:e2:c5:52:03:97:da:84:
                    e9:eb:a2:b2:c7:cb:e4:59:4d:32:50:e6:b9:65:61:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:6B:60:9E:53:4D:41:83:F0:7C:B6:49:F5:0F:4A:E0:4E:71:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47d4ce91-e1f7-37dd-92f0-d558ccd9269a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:22:95:55:ae:3a:27:82:98:05:ed:6e:5e:92:a6:b7:2a:
         25:30:24:99:01:d0:33:53:31:e6:df:13:34:78:f1:f3:98:2d:
         24:79:e5:2b:2c:1f:33:03:fe:46:0c:9e:07:24:d3:26:75:b8:
         e2:64:30:85:84:cc:69:3a:dd:bb:2a:60:50:8a:2b:b2:4f:23:
         9b:a6:3f:c8:64:e0:1b:f5:46:52:cf:9c:d0:da:67:7e:da:ff:
         13:34:db:c9:5d:bc:bc:cf:1d:b0:29:78:3a:91:af:5b:10:0c:
         70:4f:06:02:e3:23:77:f5:32:79:c7:a9:9d:a5:23:c5:6f:e4:
         bf:79:73:2c:f4:22:f6:8c:30:4f:e2:54:4d:35:9d:71:ec:c7:
         17:d8:33:2e:08:9a:08:1e:74:9a:69:46:a9:d3:f4:13:8c:ea:
         d5:00:cf:88:bc:35:13:05:53:13:1a:2b:15:3f:5b:f1:1c:77:
         54:5f:f1:e1:62:df:f5:7c:3f:eb:48:60:ea:ac:a5:16:2a:20:
         fd:3d:e3:9a:75:9c:d2:f1:bb:93:e3:de:36:80:a6:9d:06:da:
         fb:52:31:11:88:c6:31:29:86:8d:0b:cf:72:12:aa:ac:fa:79:
         15:1d:62:da:de:97:ee:ca:d4:f6:48:9e:9a:d7:da:ef:9f:ea:
         b6:ad:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:42 2026 by rpki-client