Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cea76e1b-2f5d-30e3-ba38-ab2641163263.roa
File:                     cea76e1b-2f5d-30e3-ba38-ab2641163263.roa (raw, json)
Hash identifier:          5HQ7VBrZvlYI1KlXwy500ZdNPFDK/aRVd5c5StXt0Rs=
Subject key identifier:   D1:62:EB:D1:D8:CE:B5:3C:06:49:88:2D:AF:EB:53:7E:65:37:FD:A2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E3601920463052B57FCEAC280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cea76e1b-2f5d-30e3-ba38-ab2641163263.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     212238
IP address blocks:        64.204.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:01:92:04:63:05:2b:57:fc:ea:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=9c6e2442-4d38-4069-9b5c-4294aff4d459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:87:c5:f3:58:b7:04:3c:90:75:ab:11:f4:
                    c3:c4:3f:ce:ba:c6:c7:a2:3f:e4:00:54:b4:50:43:
                    8c:0e:ca:16:b3:96:fe:19:11:f2:56:ae:5c:6a:78:
                    5f:71:7b:49:33:85:eb:30:ad:d3:b4:64:f6:10:b3:
                    72:21:e1:70:7d:98:bf:42:8d:5e:bf:b7:2c:89:34:
                    1f:53:a8:aa:9c:0e:85:6a:72:9c:9e:71:26:67:5c:
                    19:bd:35:27:73:1d:63:f7:9b:9b:b6:e1:21:0d:99:
                    8c:4a:00:2d:0c:ff:47:81:c5:14:63:92:12:4d:f9:
                    a8:09:ea:65:8a:2c:d0:a4:74:8a:7a:eb:57:89:92:
                    52:06:fe:d9:60:53:12:4e:30:49:d1:0c:f4:90:75:
                    27:4a:2b:73:58:81:3a:be:3b:6b:ea:91:fe:f6:66:
                    d8:e1:95:f8:72:65:b9:d7:26:bd:f0:ce:b5:0a:98:
                    5d:74:15:5b:11:b9:d0:34:65:74:3f:44:c0:7f:40:
                    02:d1:c9:66:3c:f0:a9:9d:1a:65:9b:80:c4:72:96:
                    3d:74:42:71:e4:73:fd:8c:8c:af:94:f6:b6:dd:09:
                    18:d9:b3:86:54:ef:4b:58:c0:f0:27:12:5a:e2:0d:
                    3e:03:c4:0d:79:bc:54:fb:df:52:80:13:b9:31:01:
                    ab:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:EB:D1:D8:CE:B5:3C:06:49:88:2D:AF:EB:53:7E:65:37:FD:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cea76e1b-2f5d-30e3-ba38-ab2641163263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:32:ed:76:eb:e8:1a:16:01:90:35:f7:7e:97:2a:18:ab:
         f8:92:41:06:1c:58:79:14:95:58:8d:6c:fb:99:3f:ce:f5:81:
         17:07:b9:a7:2d:0c:b2:b9:4f:41:c3:9c:fb:c4:74:ed:b7:03:
         06:47:f4:59:b7:30:6c:9a:85:a1:7d:6e:c3:ab:fe:26:56:89:
         df:44:9a:c6:b3:93:60:45:67:7e:f2:4f:d8:fa:79:6a:e5:65:
         70:2d:5e:9f:e9:79:e5:11:d5:c6:cc:17:cb:56:b7:1a:ad:c0:
         40:06:19:79:4a:c6:3f:12:d3:95:2e:66:77:21:f1:c8:73:f9:
         54:ba:4b:02:96:14:5f:5b:4c:65:84:a5:e6:0f:8d:46:fd:6c:
         3c:8f:42:8c:1b:d9:49:79:f5:c9:b9:c9:f2:a2:f5:67:ab:a9:
         02:4d:2c:7d:d6:f3:38:09:1f:c9:eb:69:91:5c:4d:ed:52:d3:
         bf:70:20:b0:16:d9:49:ab:75:3d:c0:39:12:f0:d7:97:ca:cb:
         ac:65:4f:b6:c8:7f:fc:b2:66:5f:f5:ce:55:29:91:80:23:75:
         bf:b0:15:b9:78:e0:55:f2:19:98:c2:f9:b1:98:1a:16:69:7c:
         bb:5c:e0:8b:24:22:d7:fd:2d:da:c6:2c:de:ff:8f:b6:cb:19:
         0c:7b:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:50:54 2026 by rpki-client