Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed7bff1-c24b-3100-81de-a9445e89c48e.roa
File:                     3ed7bff1-c24b-3100-81de-a9445e89c48e.roa (raw, json)
Hash identifier:          R8eTMkbovmrmVzn0l4JXz1KjAIWeo/4ztXAaVkNf4ic=
Subject key identifier:   24:81:A9:36:5A:AA:A8:C1:2F:CD:76:2B:E5:B1:E4:70:E3:14:67:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA79515E1434FC75344E5C380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed7bff1-c24b-3100-81de-a9445e89c48e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27424
IP address blocks:        64.62.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:15:e1:43:4f:c7:53:44:e5:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5a71ec03-7769-4ed1-91f3-6f366d51390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:96:c6:43:97:2b:25:d5:f5:6e:94:06:72:
                    82:53:6b:be:3c:81:f8:c2:48:b7:04:22:e7:57:6e:
                    cc:3c:b4:1e:6b:cb:bd:da:43:5b:39:ff:5c:3f:47:
                    3b:27:8b:bd:5a:67:b8:9a:ad:bf:9e:96:cc:54:6d:
                    86:53:c1:98:50:85:a4:97:65:6d:61:9b:73:cb:9f:
                    57:3f:7b:53:80:6b:64:ca:60:60:26:af:81:46:84:
                    0e:b2:38:0b:ea:97:72:87:e2:83:dd:22:64:ce:44:
                    75:ab:4f:34:76:02:53:61:78:ac:a5:89:7b:9d:1d:
                    a8:0e:62:22:51:82:ce:55:89:1f:7f:41:66:b5:03:
                    df:72:60:95:90:cf:81:c0:de:15:86:e4:13:19:df:
                    bc:21:2f:3f:d1:12:01:a8:b3:5c:1b:45:b2:b4:c5:
                    7b:fe:c0:1d:fd:c5:48:6d:b8:14:58:ce:2e:73:23:
                    c0:5e:25:c2:ce:a2:85:22:9a:56:7a:33:a2:40:5f:
                    0b:d2:14:5b:97:a8:0d:c7:0e:d6:48:e3:eb:f1:78:
                    17:26:04:22:50:d9:1a:38:02:fd:19:0f:2f:49:85:
                    af:9e:45:4c:13:61:a9:da:3a:f0:c3:45:df:25:c7:
                    72:83:d3:23:74:2d:47:61:23:20:50:d8:23:23:1f:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:81:A9:36:5A:AA:A8:C1:2F:CD:76:2B:E5:B1:E4:70:E3:14:67:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ed7bff1-c24b-3100-81de-a9445e89c48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:ce:df:bd:fe:c0:28:7d:ae:b8:95:64:90:36:54:c2:50:
         0c:ac:52:18:5c:5d:ef:d4:f4:2c:20:f9:da:11:b0:58:d3:fc:
         3d:cd:d9:2d:1e:3c:08:e6:96:e4:05:a5:40:88:d7:59:20:b1:
         ce:1e:23:c0:e7:6c:70:7b:a3:5d:bc:38:05:19:cc:72:e4:92:
         fd:c4:f0:3e:ab:75:50:eb:18:8d:e6:3a:98:df:33:9a:2c:d2:
         14:15:44:c6:e7:31:0c:0f:ea:f3:d8:2c:fe:cb:70:38:fc:7b:
         8f:d5:96:f6:3c:5b:b4:6d:c3:7c:02:61:35:c9:78:2f:bf:1b:
         f3:5c:6b:cd:92:f9:3e:4e:a2:06:cc:a0:12:31:be:cc:1e:4b:
         c8:08:29:e9:8e:33:56:18:5c:69:aa:dc:86:25:fb:ed:88:99:
         11:46:4e:b2:a3:2b:d2:c8:ae:9b:2d:91:0e:1a:53:a9:c7:16:
         a8:53:51:b2:c4:f4:38:5a:1e:b5:ec:44:ad:b4:91:4e:b8:2a:
         33:c5:96:83:c9:c0:c1:db:a2:d8:90:e8:87:73:18:2f:6e:52:
         04:88:e7:92:36:41:c6:97:ce:41:51:c4:18:28:f5:0f:83:cf:
         39:b8:9c:38:37:16:9c:64:8a:aa:94:0a:0e:51:b6:25:fe:bf:
         c1:58:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 06:53:02 2026 by rpki-client