Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5cb9e08-7a84-3d02-b7fb-9f6da8bf0bea.roa
File:                     b5cb9e08-7a84-3d02-b7fb-9f6da8bf0bea.roa (raw, json)
Hash identifier:          x6GkMljQkU/RLLKhtdZbN6M0dPHEjfkoC0yH+K0pJGs=
Subject key identifier:   A7:9F:35:39:A0:BC:4D:82:B0:39:26:DB:05:EC:5F:0F:7D:CA:A7:9E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE921F24ACD941E4C64B6D480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5cb9e08-7a84-3d02-b7fb-9f6da8bf0bea.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     834
IP address blocks:        64.93.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f2:4a:cd:94:1e:4c:64:b6:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=fca14350-fac3-4490-b4b8-23b710000e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:e0:1c:30:f6:98:d9:17:a9:9c:4b:87:c1:
                    06:3d:f5:ba:58:98:17:14:49:69:58:c0:00:b6:aa:
                    9f:57:c0:1c:eb:36:0e:b5:b6:e9:f1:98:e3:bb:b3:
                    99:8d:72:7b:d0:c6:5f:33:27:78:18:8a:32:09:ba:
                    24:9b:4b:9d:73:7d:a8:43:40:60:02:e3:1a:61:b7:
                    69:54:25:43:f7:c8:93:9e:c1:f3:38:f7:0a:10:93:
                    37:f8:58:7c:2f:50:95:78:14:17:c1:45:f3:16:4e:
                    34:e1:c2:58:4a:55:e9:45:a9:00:b2:ab:6f:18:80:
                    86:cc:77:6d:7b:3b:90:25:b0:c2:d5:02:e5:d0:28:
                    13:35:14:77:33:c8:8c:3c:26:65:76:1c:34:79:29:
                    1a:0b:ea:1a:a8:3c:67:c7:eb:a7:68:00:6a:ea:c6:
                    b9:97:80:4c:c7:48:3c:ad:48:a6:3d:2b:c0:57:9c:
                    8f:d8:71:c3:c8:f5:d4:f0:0a:39:db:ce:c7:cc:fa:
                    72:ba:25:07:e8:dc:45:8f:b6:7a:a0:dc:98:df:40:
                    97:16:ff:97:1d:49:ee:24:0f:6d:21:65:66:7d:fc:
                    47:dd:b5:07:9b:ac:16:5d:57:b8:65:1c:27:c0:7a:
                    47:c0:c5:be:d2:59:c9:13:da:8c:bc:80:c3:f3:b9:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9F:35:39:A0:BC:4D:82:B0:39:26:DB:05:EC:5F:0F:7D:CA:A7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b5cb9e08-7a84-3d02-b7fb-9f6da8bf0bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:25:15:79:ce:8b:b2:10:41:98:2b:ef:49:b0:f6:a3:66:
         1c:73:c8:bf:b3:5d:14:f5:45:df:6b:1d:eb:34:07:de:93:d8:
         84:b0:01:b4:7c:09:fa:b5:a9:7d:7a:eb:63:d9:2b:ca:da:e2:
         fb:3e:14:07:c3:66:a7:34:68:d4:3c:b6:c6:0b:57:5a:6f:ab:
         f2:7b:45:33:98:08:a7:c0:14:18:24:b3:59:25:cb:60:db:ab:
         a1:52:77:44:f0:32:0b:22:e6:15:08:24:af:97:50:d2:4c:4b:
         b1:57:6f:1d:40:45:89:02:31:78:83:c2:5d:f5:51:20:1e:44:
         89:48:40:98:30:bd:aa:5e:f1:29:c8:0b:35:c0:0c:a6:5d:77:
         14:6c:bd:ae:2e:9d:2f:58:79:94:cc:e8:b2:b6:08:df:9b:bb:
         30:01:07:49:f1:eb:c1:ea:97:1b:f7:aa:0a:98:34:83:a9:4d:
         7a:d1:90:09:57:1f:1c:3b:1b:ee:0b:29:07:9c:2a:2c:8d:39:
         a5:d4:0d:90:d9:60:14:32:29:78:4b:56:b3:68:29:d4:98:0c:
         39:6b:b1:e6:79:9e:b5:f9:fa:a5:b8:fe:fd:d7:c6:da:0d:be:
         73:9e:cc:14:ed:0c:e1:d2:a8:7e:d8:f2:83:2e:7b:62:0b:42:
         39:94:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:13:27 2026 by rpki-client