Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae6704e0-3327-367b-b2c1-98ca7e8524a9.roa
File:                     ae6704e0-3327-367b-b2c1-98ca7e8524a9.roa (raw, json)
Hash identifier:          0JuPR65vUmpH37Bd4YAROgerqwIuf24tkXZIi2guToA=
Subject key identifier:   50:B0:F6:19:25:F0:AF:87:E0:F1:7E:BB:8E:CF:12:7F:56:AC:F4:2B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E09CB0EFAF41822B453966CE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae6704e0-3327-367b-b2c1-98ca7e8524a9.roa
Signing time:             Tue 02 Jun 2026 12:59:56 +0000
ROA not before:           Tue 02 Jun 2026 12:59:56 +0000
ROA not after:            Mon 31 Aug 2026 12:59:56 +0000
asID:                     205489
IP address blocks:        64.204.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:0e:fa:f4:18:22:b4:53:96:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  2 12:59:56 2026 GMT
            Not After : Aug 31 12:59:56 2026 GMT
        Subject: CN=c975a198-e633-4c09-9b21-7b5ba7f21e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:26:71:32:5d:ab:b4:44:84:da:9e:03:2b:
                    c0:ef:b6:d5:20:de:d0:68:4e:34:f9:8e:94:64:3a:
                    c0:22:84:17:a7:88:d8:4c:6b:cc:57:21:92:f4:46:
                    76:8b:71:e6:2e:34:69:98:4d:0c:67:94:c6:dc:51:
                    df:16:4b:98:c7:c5:c1:65:05:dc:49:a9:55:d1:7b:
                    12:dd:cb:44:7a:e8:ea:6d:ee:2b:44:53:ce:3a:9d:
                    93:6f:86:28:6e:95:32:51:12:04:d5:ac:cb:d3:5c:
                    00:5b:3c:40:12:d5:04:d0:83:df:8a:00:2a:79:30:
                    4d:f4:28:49:5f:a1:63:ea:ba:14:c4:d0:38:a1:2f:
                    23:70:37:3a:4a:66:99:9d:d0:ae:c9:7c:12:08:22:
                    0c:7a:55:14:28:23:74:b7:67:9b:25:0c:e0:cf:da:
                    95:22:82:06:4e:94:cb:5d:1e:f3:07:a8:83:28:89:
                    dc:55:42:59:5f:52:7e:8a:e9:fd:b3:25:be:94:90:
                    83:7b:f6:df:80:44:75:a4:b8:36:bb:54:c5:b5:24:
                    25:76:fb:ed:63:b6:b1:32:47:4b:04:4c:10:bd:2d:
                    bc:74:88:b7:74:e5:55:9d:ef:00:32:db:45:10:f6:
                    f5:02:09:db:65:48:c2:a5:fe:d6:02:d1:02:49:fc:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B0:F6:19:25:F0:AF:87:E0:F1:7E:BB:8E:CF:12:7F:56:AC:F4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ae6704e0-3327-367b-b2c1-98ca7e8524a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:11:5c:85:5c:9b:93:9d:81:74:b6:21:a5:5f:35:ac:b3:ce:
         39:1c:e5:e7:d0:0b:4a:d0:1a:54:aa:58:26:e7:88:46:b5:5e:
         f1:e2:11:fd:2c:28:38:44:1b:cf:da:8b:91:7a:4d:9a:53:70:
         65:30:64:31:33:05:9d:66:d4:f7:df:db:42:0f:59:26:bd:59:
         fd:65:48:03:09:c1:42:05:7f:a1:03:a3:7b:db:b9:c0:1e:a6:
         27:54:33:77:e3:77:45:d6:92:78:05:ac:bc:cf:10:13:6f:ec:
         d2:54:9d:88:15:d7:45:56:8c:d7:a7:6f:6c:61:9c:89:53:47:
         a8:f5:bb:67:0c:9d:42:f7:bd:57:c0:43:2c:a2:d5:64:a6:09:
         f0:13:78:67:4c:42:33:8c:e2:0e:c3:ba:e4:59:9a:d3:2b:ff:
         ce:65:09:5c:ac:47:60:76:20:5b:25:b8:f4:06:fd:1b:ab:96:
         43:6d:76:55:da:ba:4d:3b:ec:ac:de:53:47:e7:22:53:a5:1f:
         be:f0:be:b9:a9:7a:37:ea:e3:18:73:ca:e2:73:b5:23:4b:42:
         e5:e1:4a:4d:0c:6e:37:73:14:c1:d6:ae:d2:7b:4c:7c:69:80:
         f9:72:11:56:aa:a0:25:38:48:b3:c1:8e:75:10:4a:94:cb:5e:
         82:e3:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:27:26 2026 by rpki-client