Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e69ee84d-1ea0-32c5-8b55-928ec0d29520.roa
File:                     e69ee84d-1ea0-32c5-8b55-928ec0d29520.roa (raw, json)
Hash identifier:          wfaQF+b1Q1pX5TCndP3vpPvktcQ3OpVfO0c2jCEBt6k=
Subject key identifier:   15:7A:CC:49:49:F8:E4:41:53:7D:CA:51:47:8E:B5:D3:F7:9E:AE:08
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6961EB95AA15C91E7A270F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e69ee84d-1ea0-32c5-8b55-928ec0d29520.roa
Signing time:             Mon 06 Jul 2026 18:45:41 +0000
ROA not before:           Mon 06 Jul 2026 18:45:41 +0000
ROA not after:            Sun 04 Oct 2026 18:45:41 +0000
asID:                     204765
IP address blocks:        64.204.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:61:eb:95:aa:15:c9:1e:7a:27:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  6 18:45:41 2026 GMT
            Not After : Oct  4 18:45:41 2026 GMT
        Subject: CN=ed4284a2-931f-4108-a5e1-e4cd56e05a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:7c:4c:b4:57:cc:04:b3:ed:87:8d:5b:73:
                    6d:8f:fa:fd:e8:d3:ac:62:70:12:af:87:ae:9d:24:
                    ac:a1:4b:5f:7b:87:e8:ac:2f:36:fe:5f:e9:8b:cb:
                    90:a6:2b:81:05:d0:4f:b2:c1:86:0f:ce:65:85:da:
                    da:0a:d9:b8:7d:99:b6:6a:b9:1b:11:45:0c:ab:84:
                    af:1b:a5:84:90:74:bb:f9:c4:39:59:58:de:22:b0:
                    3c:a1:e7:04:96:78:67:49:ee:71:2f:4f:1f:a4:5e:
                    28:f1:75:7b:ad:60:2b:26:25:59:6c:3f:e9:7e:f4:
                    b3:94:5b:74:62:d5:fc:4b:06:3b:f8:00:29:0e:7f:
                    a7:a2:48:0b:76:8f:1d:ed:65:46:b7:88:d0:dd:f8:
                    c0:7c:ca:9c:fc:35:a0:42:9f:02:aa:8b:60:ef:96:
                    b2:23:0f:30:39:a5:81:85:db:f1:1a:92:62:01:2f:
                    1d:4a:45:78:1a:6c:da:f3:5e:11:21:9d:17:83:34:
                    fa:42:cd:14:d6:ab:06:e8:f2:0e:ff:71:76:11:89:
                    10:72:e8:ba:a6:1f:16:11:b9:80:d1:85:ca:0c:17:
                    c2:a6:89:31:62:b8:10:a8:2f:e4:cd:3d:5d:51:2a:
                    1a:1a:6e:28:25:32:68:a8:c6:f8:7f:c6:74:49:6e:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7A:CC:49:49:F8:E4:41:53:7D:CA:51:47:8E:B5:D3:F7:9E:AE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e69ee84d-1ea0-32c5-8b55-928ec0d29520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:48:50:82:74:aa:bc:1d:41:05:8e:c4:a7:21:e2:67:19:01:
         36:d5:08:38:8b:4b:cd:85:9a:6d:af:9b:a0:7a:a1:f6:3e:11:
         70:ba:fc:85:20:be:94:32:83:9d:bc:43:6c:d0:57:a9:16:8f:
         f3:78:7a:c6:c8:b4:f7:51:46:80:6a:79:07:3a:1a:dc:13:82:
         14:ff:5c:f4:42:a5:64:1b:b9:a6:37:57:bc:3f:0c:bd:ec:f4:
         27:23:35:f1:88:db:c0:a8:d8:22:ed:2c:21:03:48:87:a7:d7:
         6d:d0:c7:66:17:93:33:fc:81:07:32:2f:44:8b:98:f5:af:be:
         c6:e0:01:1a:08:b2:3a:68:ab:19:3e:1f:f4:64:0c:80:0c:31:
         93:c7:3b:fe:7c:18:45:5f:8e:a9:40:75:c0:96:ed:89:68:80:
         00:34:f7:58:f9:56:85:c4:a5:ba:45:94:1d:28:69:59:e0:e7:
         52:67:ef:b9:2b:72:d0:d6:7b:3a:1c:d0:54:f7:ea:8c:5c:5d:
         de:d0:a8:83:5d:48:87:47:b8:3d:9c:4b:ea:68:f9:7a:3b:53:
         08:81:36:58:4c:b6:b1:cf:b5:d0:ea:5a:e6:13:bd:f7:45:99:
         f1:df:4a:7b:92:7c:c8:20:5f:a5:54:d2:00:d4:e5:13:62:6e:
         cc:47:33:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:53 2026 by rpki-client