Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/735e8635-272f-3ae3-b11f-29b3ad727ec0.roa
File:                     735e8635-272f-3ae3-b11f-29b3ad727ec0.roa (raw, json)
Hash identifier:          b5CrzMJRsETnaToLv0YDwGa6w15UQNtnITdz6ipMbbs=
Subject key identifier:   FC:EF:82:8C:CF:76:94:B5:85:89:DD:C8:AF:83:76:AC:05:4A:B4:61
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D69F5AB33C5F1709298E5E940
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/735e8635-272f-3ae3-b11f-29b3ad727ec0.roa
Signing time:             Mon 06 Apr 2026 06:56:27 +0000
ROA not before:           Mon 06 Apr 2026 06:56:27 +0000
ROA not after:            Sun 05 Jul 2026 06:56:27 +0000
asID:                     402252
IP address blocks:        64.204.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:f5:ab:33:c5:f1:70:92:98:e5:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  6 06:56:27 2026 GMT
            Not After : Jul  5 06:56:27 2026 GMT
        Subject: CN=d1873e01-4fc7-4e37-82af-caf219c8506a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:05:6b:8c:30:6e:1d:61:69:75:5b:33:7e:
                    82:74:e0:d6:57:6a:c2:02:f9:01:77:c0:a6:e2:e0:
                    aa:c1:c4:b5:ac:47:3c:df:b9:16:ae:38:d2:fb:15:
                    31:02:a7:77:ed:ba:82:52:1c:2b:f4:7e:e3:e6:27:
                    f0:71:a7:97:af:28:49:da:5e:df:5a:d8:cd:d9:67:
                    55:e0:a6:da:ca:30:25:10:fe:6d:8a:c0:6b:da:44:
                    b2:72:95:cc:20:47:f5:99:e4:67:7d:a0:ac:1a:04:
                    22:e9:6d:7e:95:3e:35:6f:c4:0c:0b:c0:8b:cc:b8:
                    5e:dc:80:0d:27:3d:3d:27:ae:71:d8:f1:94:ac:75:
                    c8:c5:a9:d8:23:32:10:4f:ca:6e:ae:d8:23:91:9d:
                    04:7c:f9:69:9d:da:26:58:f7:c0:16:41:3e:7f:28:
                    d5:86:cb:5e:1b:57:8e:e1:76:f9:18:65:51:e0:19:
                    9d:d3:14:71:e4:30:f7:e7:1e:92:3f:9d:71:cc:f9:
                    90:5b:34:be:c9:26:04:fd:a0:a1:7a:cb:d2:ba:4e:
                    84:58:87:8f:e0:e7:5c:fa:05:b9:70:ad:8c:69:94:
                    fc:b9:e4:f9:c0:3b:a7:99:c8:80:e4:6f:97:5d:ce:
                    a2:8b:2a:4e:b1:00:4a:d7:e9:2c:e9:eb:3d:7b:39:
                    0d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EF:82:8C:CF:76:94:B5:85:89:DD:C8:AF:83:76:AC:05:4A:B4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/735e8635-272f-3ae3-b11f-29b3ad727ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5f:27:7e:d2:13:d2:e7:d6:18:8c:5e:9e:ba:5f:28:f6:85:
         77:52:d6:f1:14:e7:88:92:b7:01:54:0b:52:86:c0:f4:54:6d:
         06:9b:51:75:38:14:58:e4:4c:bd:83:91:a8:1c:0b:9c:93:00:
         d0:bf:ba:60:25:66:de:8c:ab:dd:e0:c3:f0:42:60:aa:1e:a0:
         90:2a:46:e9:cb:5d:c3:b2:b6:6f:bb:33:54:81:c5:73:44:10:
         1a:24:a5:a9:f0:b7:bc:5b:61:13:87:b4:c5:89:b1:cc:9b:10:
         4c:b2:6e:57:47:80:58:a5:8f:ba:72:f0:be:71:6e:89:02:74:
         79:78:52:8c:26:22:f6:d8:60:7b:d1:2f:e0:91:62:8b:aa:b9:
         71:3f:0c:37:4b:8a:e3:ae:f5:22:97:34:ec:39:80:8f:64:5d:
         49:7d:d6:2c:0d:41:85:b6:4a:0d:0e:e2:54:fb:cd:19:7f:1d:
         07:4d:e1:9c:a5:2c:76:c6:11:12:28:d2:25:a9:63:83:f7:41:
         98:11:c6:95:a9:ab:c3:aa:ed:b2:1a:80:c6:41:5d:50:bb:1f:
         f4:a1:06:bb:a0:10:85:7a:91:6c:cc:b7:6f:ac:af:ca:91:86:
         f4:d7:ae:63:60:b1:f2:bb:c6:67:2e:b8:41:c0:6b:f7:62:5b:
         de:8e:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:10 2026 by rpki-client