Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed7bff1-c24b-3100-81de-a9445e89c48e.roa
File:                     3ed7bff1-c24b-3100-81de-a9445e89c48e.roa (raw, json)
Hash identifier:          7EZFeo0V6kKkkPAalCjN/T4qteuOuAORrFCGu+StvJQ=
Subject key identifier:   58:D7:E0:BB:45:09:41:F9:70:A1:C0:F2:5E:25:7A:5F:59:8C:6F:2E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D117258428C81E8FED2817516
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed7bff1-c24b-3100-81de-a9445e89c48e.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     27424
IP address blocks:        64.62.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:58:42:8c:81:e8:fe:d2:81:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=193fdf93-0bd4-44d9-99de-fa8a3ee68469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:4f:b2:5a:b9:dd:bb:5d:f2:c3:66:29:0c:
                    6f:51:a9:82:44:3c:6b:dc:a3:7b:71:2f:cf:f7:ac:
                    05:4f:db:bb:f5:4a:d0:96:43:72:f2:4d:96:c4:be:
                    5a:5a:c5:f9:56:b1:93:f4:d3:fb:46:74:b2:f5:5e:
                    3b:c2:c5:d7:65:35:21:ae:f2:60:39:10:4b:b6:81:
                    34:6a:c1:9b:c6:2a:08:52:80:18:bb:a2:b5:8f:b4:
                    7e:e9:24:fb:3d:29:9c:9e:fc:6e:e3:97:59:a6:bd:
                    48:84:3f:aa:f2:f0:4f:cd:52:d9:f9:be:0d:89:84:
                    1b:ad:95:38:25:7d:0d:99:6d:6e:ac:4b:e1:cd:92:
                    f7:44:cf:12:c2:b1:bb:8e:04:67:ba:99:06:09:2c:
                    93:de:2d:3b:2b:7a:b0:ee:52:f3:20:8f:16:f0:fe:
                    1b:67:b2:5e:76:5b:7f:49:39:5b:ff:49:c2:a4:38:
                    92:3f:c1:af:85:b4:a4:e2:2c:39:4f:fc:36:bb:5e:
                    6c:4b:d2:6c:cb:e4:06:a9:69:89:07:8f:58:2c:20:
                    a7:ce:3e:49:64:8d:ec:06:d5:01:77:44:65:e4:eb:
                    b9:05:5d:84:db:1a:67:3d:60:03:a8:80:25:46:8d:
                    c0:ab:f3:89:7c:73:4b:29:20:f5:28:83:65:99:8a:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:E0:BB:45:09:41:F9:70:A1:C0:F2:5E:25:7A:5F:59:8C:6F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed7bff1-c24b-3100-81de-a9445e89c48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:2c:68:24:ff:63:6d:66:a1:fa:33:c1:a8:85:96:94:9a:
         a3:93:3d:65:9a:b6:32:03:ef:8e:06:f2:a4:24:24:a0:ac:9d:
         9a:5b:9a:fc:7e:76:17:d9:3d:34:70:ff:cb:97:a1:e6:73:f5:
         0d:78:bd:b1:c5:39:9b:f9:e2:80:60:56:76:b6:ab:58:fa:b5:
         c9:7f:da:fe:b0:a8:13:db:b8:bd:e4:e0:c1:28:45:d2:a8:a7:
         5b:7c:54:5f:02:f3:f7:fa:0d:1c:d0:92:de:ec:06:b1:9e:0d:
         35:e3:13:11:fb:bb:74:e6:d3:6c:1e:69:68:5e:85:06:ee:bc:
         13:6e:cf:78:ad:b3:be:b1:84:6c:2b:b7:d2:09:4e:24:2b:d0:
         da:e1:5a:97:0a:ac:33:d9:b8:70:0f:dc:d9:e5:35:ca:75:fc:
         57:5b:77:50:75:27:e1:40:1b:ef:45:b1:28:7d:eb:81:05:de:
         5c:8c:f8:f1:8e:3d:b1:70:f9:b0:62:84:de:f4:75:a4:2b:1f:
         2f:a6:d5:21:fd:b6:78:6f:01:af:53:6e:26:d6:93:a2:5d:9d:
         77:d5:9a:4d:b8:35:eb:72:0f:57:91:44:ac:77:58:13:b1:47:
         34:07:68:40:f2:df:55:34:02:36:d4:4c:9b:d6:21:99:7a:c0:
         d3:0b:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:18:51 2026 by rpki-client