Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa
File:                     4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa (raw, json)
Hash identifier:          sYc5tHUwIqYnjRTzxdnbWa5iwt6cOHsNVOBop8HZaGI=
Subject key identifier:   4F:1D:72:85:F3:26:40:C2:73:9A:82:88:28:CC:05:C1:D5:1A:48:9E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6C5830364B4377B67D0EDE20
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     32693
IP address blocks:        64.204.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:30:36:4b:43:77:b6:7d:0e:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=c2763603-9f5a-44ba-b94b-bca6799bade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:5e:7c:43:4c:f7:0d:6a:bd:46:34:26:de:
                    1e:f5:ad:f6:13:c5:7a:3a:08:6c:55:f6:b2:2b:a5:
                    7a:01:d6:6b:32:b1:d6:5c:6b:7a:21:46:11:45:40:
                    07:eb:a9:63:af:78:fa:da:aa:26:39:9f:d4:22:d2:
                    e1:e1:2a:f4:3a:70:39:c2:e3:47:04:4b:e8:60:e8:
                    76:65:eb:80:51:d3:24:6f:36:ad:44:76:ed:66:97:
                    f9:2d:09:f9:61:c1:5d:3a:56:c3:29:d5:30:44:18:
                    dd:26:1b:d0:6e:1a:5a:da:b7:cf:db:0d:93:b7:29:
                    e6:3e:2f:1f:a6:66:84:48:d8:6a:3b:0a:35:08:27:
                    61:cd:9c:28:33:36:c3:4a:46:49:bb:23:f7:da:71:
                    94:32:92:5d:62:8b:03:38:ea:9e:96:f4:12:37:d1:
                    de:92:5d:22:4c:28:2c:fc:dc:5a:47:7d:c2:ac:3c:
                    de:05:b2:39:e1:a8:d6:f3:37:90:8b:6f:59:d1:e1:
                    c5:02:7c:98:17:9c:86:a2:81:ed:a2:39:19:c2:5a:
                    53:8e:a3:23:90:e1:45:72:db:9e:e9:bf:3f:3a:a1:
                    51:9a:98:af:a9:7e:58:c3:1c:9b:4c:ce:54:39:34:
                    3e:e3:7e:c8:09:68:4d:17:8a:61:56:39:7b:76:da:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1D:72:85:F3:26:40:C2:73:9A:82:88:28:CC:05:C1:D5:1A:48:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f1502d9-787f-3767-aec0-3ca6e6a6e539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:64:9e:07:e3:fa:4d:b2:17:7a:00:87:fb:a4:1d:fd:22:7e:
         0c:ca:f9:f4:d9:91:29:30:c1:75:9d:7c:1e:49:fc:6a:78:02:
         93:93:ef:cf:35:da:e4:66:2d:0f:d9:51:7d:38:5f:b2:d2:72:
         c8:b3:8b:24:66:0e:f4:26:79:52:27:04:a2:e8:77:c7:44:78:
         2f:b3:0f:23:34:93:e5:22:49:b4:a2:6d:c7:f2:3a:31:7f:1f:
         94:41:9a:15:48:e3:f8:24:c0:b5:6c:ae:8a:7e:e3:4d:c3:dc:
         03:05:b3:db:f9:ad:87:3e:05:20:f9:c5:ea:7f:f5:d2:fa:65:
         50:4b:4c:e9:91:fd:8d:58:8f:e8:fb:01:58:3b:90:af:58:38:
         c5:ab:44:60:8d:04:6b:6e:22:17:be:3c:86:96:59:49:9e:42:
         8e:68:96:35:08:ae:62:d5:5d:f9:7e:38:cd:c2:d2:c4:ba:42:
         c1:4c:9c:81:7d:af:60:5b:71:4f:14:d5:68:ea:52:00:14:69:
         55:09:43:55:74:f0:b9:c4:27:d1:c2:63:74:72:e2:3e:75:28:
         5f:da:81:ef:89:07:d4:78:57:43:0f:be:84:6f:7a:45:3a:78:
         ee:e3:75:29:15:0e:80:f0:bb:21:ee:0a:72:07:77:33:8f:e2:
         4a:32:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:00:12 2026 by rpki-client