Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6132289-3f09-35f4-afe6-da990d88ae77.roa
File:                     c6132289-3f09-35f4-afe6-da990d88ae77.roa (raw, json)
Hash identifier:          wmQVPGxecUYWTG32U3MqrhohNuuT4vvm1krCsreIKJs=
Subject key identifier:   21:1C:FF:60:72:AB:2B:C7:BD:C1:6D:53:47:89:B5:27:89:96:B9:A6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F63F41A2DC64D0462E3292C00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6132289-3f09-35f4-afe6-da990d88ae77.roa
Signing time:             Sun 04 Oct 2026 12:52:19 +0000
ROA not before:           Sun 04 Oct 2026 12:52:19 +0000
ROA not after:            Sat 02 Jan 2027 13:52:19 +0000
asID:                     834
IP address blocks:        64.204.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f4:1a:2d:c6:4d:04:62:e3:29:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  4 12:52:19 2026 GMT
            Not After : Jan  2 13:52:19 2027 GMT
        Subject: CN=d008517c-e1a3-4acc-908d-b6e16dbf26c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:fb:95:2e:7d:c0:4a:7e:8f:ff:6d:90:a7:
                    de:e9:cf:60:cb:ae:c4:91:19:bc:b5:5d:3f:74:0a:
                    6d:7a:b6:e7:3a:ee:62:6f:50:c6:e6:08:c7:25:e2:
                    2b:81:fa:3f:ca:3a:9c:22:d6:d1:83:0b:de:89:d3:
                    c9:34:1f:ab:b5:0c:e8:64:ea:3a:8e:41:fc:f0:58:
                    d5:8a:8e:a9:87:7a:05:8b:50:ab:af:c9:1d:2a:6b:
                    97:35:b9:ad:5f:c5:48:90:44:df:ba:b1:7f:99:f2:
                    be:c2:b4:3d:0b:d8:40:b9:f3:0e:4e:60:89:a4:aa:
                    db:46:f1:e9:f1:99:6e:5f:e5:df:e9:80:ba:ee:9c:
                    c0:4c:f7:2a:a6:dd:6c:78:1e:05:b0:f2:50:4a:99:
                    f2:dc:97:b5:e7:df:1d:bc:59:11:80:4b:3d:57:57:
                    5b:b4:2f:a6:d8:29:43:da:2d:fc:7c:0c:7b:63:aa:
                    49:fa:46:de:73:75:19:94:12:5b:d8:d9:02:4c:72:
                    19:16:6f:e1:8c:8e:97:a3:8f:1f:ba:84:3c:21:b1:
                    ab:71:6a:04:85:b9:f9:3e:5a:21:34:1a:56:7e:ec:
                    8a:eb:68:e2:56:4b:c2:32:35:90:68:df:43:98:2f:
                    6e:2d:19:1d:64:bb:50:5f:d1:82:4b:75:84:62:15:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1C:FF:60:72:AB:2B:C7:BD:C1:6D:53:47:89:B5:27:89:96:B9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c6132289-3f09-35f4-afe6-da990d88ae77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:26:26:b6:a1:ff:29:29:e2:ac:a9:c6:5e:59:0b:c3:50:1a:
         2d:1e:83:e4:90:1c:a5:91:01:30:c1:84:d3:93:81:da:68:32:
         21:b0:39:12:41:b1:ff:69:a9:cc:bb:f5:dd:11:12:fe:e0:66:
         8d:d9:ba:5d:88:a5:a3:50:7e:01:5a:a3:a1:7e:60:04:cb:8a:
         83:4d:66:67:dc:9f:5a:20:d5:52:04:1f:ca:47:9d:51:66:68:
         cf:16:64:56:54:5f:a0:bd:97:0f:07:12:5b:72:7f:e0:ff:7c:
         bf:2f:9c:1f:63:50:32:70:8d:be:29:74:da:e8:74:99:c6:34:
         00:c2:21:29:30:fc:f9:25:9f:2d:da:14:c0:c5:a9:62:f4:c3:
         f8:97:d2:fc:16:38:4d:b1:42:00:86:54:41:1f:03:0a:5d:1b:
         5a:ae:14:77:3b:8b:19:13:8a:7c:c2:ed:01:c3:a3:a6:7e:2b:
         fb:b3:59:60:27:1f:99:a4:a1:ec:ed:8e:01:7a:cc:66:54:d3:
         ab:2f:41:fc:2a:20:ed:f2:bd:cf:bd:c1:7e:b1:f5:0b:50:ad:
         3f:32:12:70:cc:e5:73:09:3c:4f:2e:17:37:69:17:9c:a8:53:
         1d:6c:2f:54:93:fe:cd:ff:7e:f3:84:49:ec:c8:16:92:2d:93:
         a1:57:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:42:27 2026 by rpki-client