Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f828a7f-910e-3318-97e9-d14538dd4b81.roa
File:                     8f828a7f-910e-3318-97e9-d14538dd4b81.roa (raw, json)
Hash identifier:          7Y9avibz4DT0voKiYlohQ/KEkg+KNFXaBcxPlSL6o0g=
Subject key identifier:   13:06:53:A1:13:AA:DB:07:69:A8:D7:6D:43:CF:17:E5:3B:A0:93:80
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E0ABEB21FD2FE85827F90A740
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f828a7f-910e-3318-97e9-d14538dd4b81.roa
Signing time:             Tue 02 Jun 2026 21:10:49 +0000
ROA not before:           Tue 02 Jun 2026 21:10:49 +0000
ROA not after:            Mon 31 Aug 2026 21:10:49 +0000
asID:                     205489
IP address blocks:        64.204.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:be:b2:1f:d2:fe:85:82:7f:90:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  2 21:10:49 2026 GMT
            Not After : Aug 31 21:10:49 2026 GMT
        Subject: CN=f7deaad7-9a7d-41b0-a7d9-71511b26095b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:c9:e8:94:cb:c5:0f:38:c4:86:8a:89:c6:
                    74:69:3b:03:46:7a:29:90:a2:5e:02:d4:45:67:ef:
                    5a:91:04:4b:b1:59:71:e1:24:2b:48:19:03:6a:c8:
                    f7:d4:8e:2f:bd:62:92:a6:26:2f:37:ed:84:67:fa:
                    2c:af:a8:4f:19:d9:6c:91:4f:be:c3:21:91:1a:2f:
                    94:b5:81:88:7d:85:5d:42:fa:0f:68:9f:74:e6:bf:
                    de:7f:14:e7:96:06:9b:48:a8:33:a9:b0:d6:0e:c5:
                    31:7a:4c:f3:27:ac:b8:25:29:0e:05:fb:2b:c1:ae:
                    c1:0c:bd:46:53:bc:d4:ed:cd:c1:f7:76:ab:5a:1a:
                    d3:48:1e:3d:28:9f:7b:ac:41:58:ec:64:34:80:e3:
                    a4:19:24:2a:aa:12:6f:58:2d:a9:e1:b1:d7:d5:84:
                    b5:92:85:53:26:cb:43:0a:71:89:2a:39:0b:db:4c:
                    dc:f1:9d:39:be:31:dd:04:03:c6:29:c8:a6:38:ce:
                    9b:87:b5:4b:4a:41:b2:64:85:d0:95:c3:e7:8a:05:
                    d5:f5:68:8d:c0:f2:6b:62:a6:f8:ba:a0:4d:d0:3f:
                    f4:42:21:fa:73:2f:e7:fc:51:26:55:06:85:97:99:
                    cd:80:71:85:62:5b:28:87:f2:f5:06:5e:f6:c1:e0:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:06:53:A1:13:AA:DB:07:69:A8:D7:6D:43:CF:17:E5:3B:A0:93:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f828a7f-910e-3318-97e9-d14538dd4b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:ec:2c:97:48:84:c2:bc:ba:c7:f0:03:f0:f0:de:13:8a:
         ae:b5:1c:48:93:16:d7:26:8c:e1:d6:35:d9:d0:44:7d:e6:36:
         5e:ce:80:94:ae:52:14:7d:aa:87:fc:78:0f:f4:07:ae:c5:f0:
         4c:e7:04:ea:61:f4:c1:7e:b8:13:ed:43:77:72:18:b6:fa:4f:
         8b:96:1b:14:97:ad:9f:3a:a0:98:4c:f2:ca:8d:84:c1:ee:56:
         c3:54:dd:73:1c:11:f8:5b:4e:28:41:dc:a5:12:27:24:f4:c3:
         a7:74:9d:f5:59:72:8f:77:1f:11:87:cc:65:84:f9:1a:25:00:
         b7:1c:1a:84:72:97:04:e0:6f:5e:4c:26:34:60:75:f6:71:12:
         9a:d7:7d:33:3a:69:0f:eb:25:a5:bc:eb:c4:f7:1b:86:e1:d3:
         d2:41:d6:66:b3:5f:ae:f4:2f:93:61:05:d5:0f:da:39:69:1e:
         a3:19:16:b6:d1:3e:71:80:d5:aa:04:f5:67:70:4c:9b:ce:2a:
         3d:39:2a:8b:ed:f5:09:c7:34:f4:ac:18:0d:f5:6b:1c:83:e4:
         ce:33:52:a1:ec:0b:3a:d5:ef:97:d7:df:60:07:3d:7a:74:14:
         6b:f3:83:fe:a4:bf:16:10:95:90:80:63:ca:b2:8d:ff:54:c9:
         aa:04:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:27:22 2026 by rpki-client