Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/27acee0d-e846-3425-a894-1bca0653ddd9.roa
File:                     27acee0d-e846-3425-a894-1bca0653ddd9.roa (raw, json)
Hash identifier:          LdG6JctngYWPRE+tAXoDFaqUPxmNAp4f5A1QQJ5+UgI=
Subject key identifier:   89:78:82:61:11:0C:18:F7:B0:00:1D:EF:6C:79:C0:1F:E7:47:3B:C5
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E8C8A4C6966BA6BB7A35ED3A0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/27acee0d-e846-3425-a894-1bca0653ddd9.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        64.33.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4c:69:66:ba:6b:b7:a3:5e:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=2c617171-0225-4007-b157-6d1d90771b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9f:93:d9:f2:dc:06:53:73:5d:c3:7a:e9:dd:
                    42:b3:83:ab:dc:e7:d3:03:76:08:c2:b2:6a:72:09:
                    5a:3a:51:13:3b:a5:3f:7a:82:83:6b:39:fb:5e:b9:
                    a2:ee:c7:d9:7e:5c:b5:44:37:80:99:4f:df:63:45:
                    10:03:0a:8b:ef:3d:19:65:9e:6c:39:7a:df:66:34:
                    f7:52:47:8c:7a:ea:8c:3a:bc:9c:a2:67:15:37:83:
                    ee:22:af:db:0d:8b:aa:4c:e7:ce:bc:a2:79:54:c5:
                    7c:4c:28:21:ff:35:59:52:fe:bb:f5:82:5c:e0:14:
                    dd:b1:02:cb:91:f4:d2:f6:89:03:fc:0c:bf:a4:e4:
                    dc:f3:0b:fd:ee:ed:dc:bb:4f:22:37:74:2a:45:b1:
                    fc:53:55:e6:18:1c:b1:16:01:bf:bd:b4:a6:bf:13:
                    33:4e:eb:77:72:32:ae:54:47:6c:db:c8:ed:c0:a5:
                    6d:09:59:9d:ee:39:c5:a3:bf:b6:d9:21:ba:8a:54:
                    26:e9:88:29:8e:cc:21:22:b5:64:f1:a0:1e:12:c8:
                    76:90:57:f0:e2:d4:66:f2:ed:0d:f1:a3:fa:6d:40:
                    05:5b:95:54:6c:6e:82:d6:8c:4d:8d:ce:41:15:1f:
                    97:68:9d:76:85:06:ac:cd:38:c3:5f:63:8d:61:87:
                    77:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:78:82:61:11:0C:18:F7:B0:00:1D:EF:6C:79:C0:1F:E7:47:3B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/27acee0d-e846-3425-a894-1bca0653ddd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:90:d8:93:de:f3:c9:66:77:2a:3f:d5:2a:55:cf:c5:10:
         ba:45:2c:f7:ef:ca:40:09:83:bf:25:21:b4:7c:63:0c:4f:ee:
         d6:e9:d6:d1:2f:2f:de:60:a9:a3:24:69:1a:e7:06:61:82:14:
         5b:65:99:00:83:61:ec:d4:1a:83:87:59:09:a0:65:4e:21:86:
         0f:69:2f:4d:e1:ff:96:a4:1b:56:3d:09:b3:08:6c:8e:62:13:
         df:24:9d:15:99:55:2a:7e:34:0e:6d:08:08:67:4f:ae:93:64:
         1f:df:83:67:f9:8a:a7:b4:47:8b:15:3d:45:52:1c:97:82:f4:
         1d:c9:9f:2b:5e:bd:8b:81:d4:3c:88:58:59:41:4f:17:4e:63:
         ef:91:b9:04:bf:54:60:59:0c:e6:4d:ea:c7:eb:51:36:7e:1e:
         dd:7b:22:6c:07:1d:07:80:62:33:3e:c1:37:e8:02:ec:27:63:
         9d:2b:0d:2c:9a:a1:b7:ac:05:d8:4b:6c:69:5f:6b:7e:ac:80:
         d8:f2:fe:47:62:53:78:84:48:0b:13:f2:2d:63:8b:06:e7:46:
         d5:cc:96:6c:e2:a8:47:8b:2c:c7:39:d8:11:7b:ef:ab:b1:0a:
         37:57:63:84:1f:6a:e3:2a:8f:29:eb:1e:50:d5:00:b2:e5:f2:
         b2:37:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:12:09 2026 by rpki-client