Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e968da1-0b42-3771-996e-ab24188be1a8.roa
File:                     4e968da1-0b42-3771-996e-ab24188be1a8.roa (raw, json)
Hash identifier:          leoxpQv2p+9rzeCQ01EmKoTONel2o7A5YHihUV7LAow=
Subject key identifier:   0E:1A:DD:26:A6:B4:DC:07:A0:2A:DC:21:A3:C0:B1:D3:80:0B:04:D9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E09CB338A5A236F964919CD00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e968da1-0b42-3771-996e-ab24188be1a8.roa
Signing time:             Tue 02 Jun 2026 13:00:13 +0000
ROA not before:           Tue 02 Jun 2026 13:00:13 +0000
ROA not after:            Mon 31 Aug 2026 13:00:13 +0000
asID:                     205489
IP address blocks:        64.204.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:33:8a:5a:23:6f:96:49:19:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  2 13:00:13 2026 GMT
            Not After : Aug 31 13:00:13 2026 GMT
        Subject: CN=9122a999-d1a1-4f2b-be19-b4d2e01e71ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:33:b8:28:68:2c:c3:26:11:37:0f:d4:92:
                    c9:e9:38:a8:28:ea:61:75:fe:9b:f4:a3:a7:98:23:
                    00:1b:31:d5:37:68:d4:ed:fd:82:28:c6:28:5f:8f:
                    9e:22:c9:28:f5:22:44:92:44:c9:0f:fb:14:b7:17:
                    3f:62:8b:0a:e4:fe:60:b3:74:e4:5f:e3:ef:01:27:
                    0c:23:d8:92:47:64:77:5d:d0:19:f0:f7:28:d0:87:
                    02:a4:76:66:fb:7e:16:58:73:a4:63:de:9a:3a:17:
                    e1:50:49:9a:87:23:24:b6:d2:96:e2:60:87:58:42:
                    cf:c2:33:cc:c7:7b:ae:ee:f3:b0:92:56:dd:97:85:
                    88:97:bd:76:5e:de:d0:aa:14:71:38:6f:be:df:29:
                    50:f6:88:e5:9f:c5:4f:42:4b:b3:69:b3:4b:c0:2d:
                    bd:9b:cf:a8:68:e9:04:75:23:e2:36:2c:c4:3f:70:
                    f4:81:1c:fc:73:d8:f5:56:b7:81:aa:3d:62:3c:09:
                    89:1a:91:46:17:19:a7:6f:31:80:6f:07:dd:b6:85:
                    29:5e:da:91:3d:24:3a:76:c8:7b:02:01:9f:7c:ec:
                    59:38:33:d0:f3:26:96:ed:a2:fe:5f:f9:89:5e:18:
                    94:95:dd:27:c3:0e:d9:d4:55:17:49:6c:1c:be:da:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1A:DD:26:A6:B4:DC:07:A0:2A:DC:21:A3:C0:B1:D3:80:0B:04:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e968da1-0b42-3771-996e-ab24188be1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:77:60:7b:1a:d3:2e:7c:a1:53:5c:58:59:42:c0:43:43:eb:
         08:16:32:ac:37:84:c2:64:6f:36:80:d4:71:3b:1e:1d:e5:57:
         42:49:d4:a0:15:fe:41:57:ca:0c:36:26:d9:8d:7e:99:a4:2c:
         a6:b3:35:f4:67:7a:93:12:1c:14:8f:a3:f3:ed:62:f1:b1:33:
         d7:33:96:7b:33:c6:b7:d0:ae:ee:5f:81:d1:c2:f8:20:55:0f:
         5d:65:34:c1:ae:e4:1d:67:63:da:8a:7c:97:0e:ac:45:10:a9:
         d7:98:d1:f6:21:a0:88:66:1b:8a:a8:ab:a9:14:51:3e:ee:c9:
         b6:9e:fc:9d:01:10:03:7c:0a:28:ac:c1:30:cb:49:fb:45:bb:
         ba:9d:25:95:1e:53:5b:48:45:b9:b2:73:20:7e:f3:ca:d2:aa:
         ed:5c:eb:ed:d7:e5:43:b5:e0:57:75:d8:05:de:67:1f:d3:da:
         be:d7:53:62:d3:ed:09:98:ee:1c:44:d9:83:26:b2:35:a8:bb:
         d6:7c:9f:16:28:24:47:cb:45:63:99:36:71:9a:34:f1:78:fe:
         28:2d:8b:01:31:f5:ea:78:97:2f:33:4e:a8:76:7c:0c:0c:ec:
         a2:4f:da:4f:8d:01:b2:18:f2:e8:f6:a2:93:95:21:c7:ff:fa:
         e1:8c:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:27:25 2026 by rpki-client