Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e924b8b7-20f1-3aac-a911-91539378a871.roa
File:                     e924b8b7-20f1-3aac-a911-91539378a871.roa (raw, json)
Hash identifier:          s/rMz77KPIMVnygjoEWyj3XFm0Zzf8x/OXkE7///PWU=
Subject key identifier:   12:DA:FF:57:48:4E:F6:7E:99:E0:E1:EC:3E:44:FA:8F:79:6B:C3:CD
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE6573E0344D1A7403B36AFE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e924b8b7-20f1-3aac-a911-91539378a871.roa
Signing time:             Thu 20 Aug 2026 13:00:12 +0000
ROA not before:           Thu 20 Aug 2026 13:00:12 +0000
ROA not after:            Wed 18 Nov 2026 14:00:12 +0000
asID:                     5650
IP address blocks:        64.205.152.0/22 maxlen: 24
                          64.205.160.0/22 maxlen: 24
                          64.205.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e6:57:3e:03:44:d1:a7:40:3b:36:af:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 20 13:00:12 2026 GMT
            Not After : Nov 18 14:00:12 2026 GMT
        Subject: CN=793c90b9-974d-4b0c-9e98-343d2213600b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:12:c6:1f:16:2d:72:75:2e:d7:2d:9b:31:
                    1b:69:27:ba:c8:8f:23:8e:cd:8f:8a:1e:01:34:e1:
                    ee:6a:cb:ce:70:ac:70:b4:29:2b:ab:22:92:83:db:
                    b2:c7:72:eb:1f:86:15:52:41:0d:af:ce:e6:f9:4f:
                    89:ca:00:58:fa:cf:da:cf:45:3c:3b:7f:d1:15:a3:
                    2f:31:03:a4:b1:5f:2b:04:19:f0:30:2a:83:ca:4d:
                    fd:f6:ef:6b:d3:aa:68:f7:79:73:0f:18:a1:73:98:
                    60:a7:79:90:39:70:35:69:09:e3:f6:69:6d:0b:cd:
                    16:e2:d4:c0:4b:0e:cf:9e:35:0f:8a:a1:69:08:2e:
                    79:24:33:09:02:16:61:ac:84:55:40:bb:c0:31:91:
                    ab:b1:82:b0:98:7a:79:f6:5b:51:fd:79:a5:33:8e:
                    cf:42:d8:64:3f:d5:6f:cf:ba:72:36:88:a3:8d:ed:
                    53:ce:cc:09:66:c5:b3:db:11:df:1a:d0:bd:57:41:
                    53:f4:26:fd:77:0d:b2:33:5c:18:cf:ca:15:a9:8a:
                    c7:ec:da:f3:e8:17:9d:bd:2a:33:c1:3c:c6:ad:1c:
                    6b:90:b1:03:8c:e5:51:b3:ac:df:5d:0e:d0:fa:9b:
                    a0:4c:73:bb:59:9a:63:3d:32:60:ca:9c:a3:72:68:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DA:FF:57:48:4E:F6:7E:99:E0:E1:EC:3E:44:FA:8F:79:6B:C3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e924b8b7-20f1-3aac-a911-91539378a871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.205.152.0/22
                  64.205.160.0/22
                  64.205.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2f:bf:cc:1f:7a:3f:56:28:5d:5a:2b:71:69:0c:0d:1a:13:
         97:75:ad:7c:03:5d:b9:f1:25:b6:ea:a6:b0:1b:c0:a0:3f:06:
         10:7d:42:6b:a8:31:a1:f5:94:3a:f0:a1:b1:ff:de:07:59:5a:
         16:2e:a5:bd:c9:8e:9b:31:f5:33:01:bc:38:17:66:c5:35:78:
         74:b1:65:31:6d:da:78:d1:72:a4:dc:f7:aa:c4:a4:dd:ce:41:
         a8:7c:1e:c6:16:20:92:24:30:38:06:b4:bb:97:40:7b:5c:7d:
         d1:cb:a0:98:80:c8:52:06:6e:95:58:5a:cc:d7:e8:9c:9a:3e:
         56:73:15:80:5e:d8:42:18:fa:cb:c0:a6:9f:93:2d:22:0b:cd:
         44:0c:ca:97:49:76:18:18:be:23:7f:e9:98:97:e8:02:52:eb:
         d2:43:d6:24:08:7b:22:c5:42:17:f6:c5:5a:15:6d:91:9c:80:
         a8:03:91:30:9f:59:f5:fe:e8:c0:16:67:41:b0:b9:c3:e9:fe:
         56:7f:0f:b2:6f:d3:f6:0a:7e:07:21:19:5b:26:30:4f:2f:e4:
         d5:be:7c:91:71:ec:e8:5b:89:1a:02:9c:84:ee:2f:49:bb:04:
         47:a0:e9:60:0b:cf:3d:f5:8b:22:fb:32:d4:7d:23:75:95:e6:
         79:f3:29:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:46:42 2026 by rpki-client