Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/45398614-e614-3b92-b592-c36e29d0a71d.roa
File:                     45398614-e614-3b92-b592-c36e29d0a71d.roa (raw, json)
Hash identifier:          xx/NInkcTI2mYNe/LNewvpVQoX8b5yTCyabcsxx3rAI=
Subject key identifier:   CC:6F:4B:4D:57:DF:9B:98:47:92:20:2F:AE:BD:B4:39:B9:03:1D:4C
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F4328584EA79BB9390999F006156889A0
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/45398614-e614-3b92-b592-c36e29d0a71d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        64.18.136.0/24 maxlen: 24
                          64.18.137.0/24 maxlen: 24
                          64.18.138.0/24 maxlen: 24
                          64.18.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:b9:39:09:99:f0:06:15:68:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=63a6b59a-b5b6-45eb-98b2-0eb0f905e772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:ba:50:d9:3d:20:95:21:88:e7:42:c6:0b:
                    0d:9e:cd:d4:06:43:23:dc:80:37:ce:82:4b:41:11:
                    b5:7c:5d:3d:38:3e:9c:10:34:77:58:3a:e8:bc:ed:
                    96:8a:c9:55:1c:e5:5f:52:ae:0c:d2:b5:db:d7:ae:
                    34:fd:60:9a:db:d5:1a:f9:fb:39:f6:56:70:c7:9f:
                    6b:7e:5c:a8:61:f9:c5:ea:bf:7b:30:13:5c:b2:af:
                    8b:52:06:ac:49:b3:8e:7a:71:b5:55:4b:d1:6b:89:
                    7d:51:89:7e:56:a2:75:0b:d2:dc:b1:c5:86:51:3c:
                    ed:16:60:1a:c3:63:74:52:ee:a8:16:5c:51:c8:43:
                    a1:ff:0d:7b:f5:c1:54:59:2b:ec:72:05:2b:6d:b2:
                    b5:fa:07:83:d4:4c:fb:4f:35:00:e8:97:7f:4b:53:
                    79:4a:96:19:f2:db:18:23:31:cb:35:58:6a:6f:8f:
                    ea:72:a6:d4:e6:72:b2:2f:63:c0:e3:21:87:6b:8c:
                    54:ba:c6:6b:23:28:2a:a2:bf:ab:36:e8:ab:e7:3c:
                    f0:f8:a4:c9:c6:ba:15:79:78:a2:ba:74:09:d0:5b:
                    95:50:19:fb:dc:a4:5f:22:8b:f3:85:3e:a8:80:16:
                    26:a8:b5:17:b1:1e:1e:b7:64:64:30:1d:64:35:6d:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6F:4B:4D:57:DF:9B:98:47:92:20:2F:AE:BD:B4:39:B9:03:1D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/45398614-e614-3b92-b592-c36e29d0a71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:08:b5:f7:63:69:f2:a4:b7:b4:c8:05:f3:c3:53:43:9a:76:
         58:5a:a9:77:0e:b2:63:3a:5a:22:87:74:5f:24:6c:11:f7:c9:
         81:03:ff:da:5d:87:d0:b1:4a:53:ce:29:09:87:81:42:ca:15:
         cf:2a:04:1c:f4:2b:55:e0:cc:9e:47:87:39:ee:89:65:f1:33:
         1d:22:cb:bd:ca:4c:6d:04:79:d6:7c:6c:a7:e0:55:78:ab:f0:
         e2:0e:e2:3b:c6:62:d0:1f:bd:17:97:56:8f:ad:d2:c2:b9:85:
         40:e8:66:4c:50:4c:51:1e:62:8d:18:11:f1:d2:c1:ba:e2:f0:
         c7:43:21:f0:bd:cb:d8:12:a0:89:f7:ae:93:f9:5a:c1:0f:b7:
         bf:0e:b7:a7:16:83:ce:39:db:b5:6a:b1:57:c4:3a:70:79:de:
         f9:ee:21:82:58:7a:ca:81:7b:1c:fd:a7:5a:a9:e7:7d:99:85:
         dc:4e:8d:65:fc:a4:1d:62:47:e6:52:b1:4f:27:d5:fd:9a:5c:
         c8:ab:b9:94:d1:a7:a9:15:54:b2:72:77:f1:14:fc:ea:f1:3e:
         b5:8d:cf:5c:46:72:5c:37:ff:17:00:01:99:e1:29:3f:cf:7d:
         f8:5e:c1:f2:43:ca:75:3c:0f:e4:2a:87:2a:8b:93:ba:af:c6:
         46:db:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:04 2026 by rpki-client