Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
File:                     400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json)
Hash identifier:          954q5jBRqyqcXaORcQmvZY6W3Nz3N6911ZE3kzj2mtU=
Subject key identifier:   92:21:50:3F:6F:18:AD:6C:CB:13:51:E9:F4:5A:E8:40:C8:D9:A5:59
Certificate issuer:       /CN=f29fac19-e536-4e67-a788-6a1d4483389f
Certificate serial:       010D0C9F4328584ECD3727A5B66C14F697F5C080
Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     397715
IP address blocks:        64.4.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:27:a5:b6:6c:14:f6:97:f5:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=0eaf8285-8c2a-47d0-a1ba-7d3845a2e055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:0a:16:c6:40:48:12:af:5e:48:e4:74:58:
                    31:8f:5f:78:ff:c6:16:f0:4d:54:bc:0c:50:6e:71:
                    e4:e7:cd:e0:58:85:04:9b:38:33:1c:b1:09:1e:63:
                    f7:21:9f:8a:91:d7:84:58:8d:86:25:d2:67:6a:9d:
                    24:ab:a3:db:9b:f2:b5:08:82:ee:1b:9f:08:3e:62:
                    8d:8c:e9:d8:3c:7d:ca:a3:2f:42:dc:9b:45:3c:7c:
                    39:fd:e8:86:fc:f2:41:8f:f6:0d:f6:df:70:ea:bd:
                    b3:4b:77:08:6f:da:70:7d:2c:d4:c1:b2:65:2b:ed:
                    b0:2b:7a:ce:68:fa:f6:47:5e:3f:88:9c:fc:94:ce:
                    1d:71:1e:74:01:b8:0b:f7:cc:0f:1b:e4:e3:98:08:
                    6f:f8:9e:c1:09:90:3b:5e:22:53:c5:3b:88:06:48:
                    bd:e2:7b:79:31:3c:12:36:01:fe:89:27:5c:99:91:
                    83:e8:5a:1b:8f:c5:ab:62:01:62:43:89:63:75:13:
                    b6:eb:87:5a:57:4a:db:2c:17:0c:e3:83:0a:b8:44:
                    6e:04:93:96:a1:f3:0a:39:80:68:06:4e:11:cb:e5:
                    c2:c6:42:09:b2:82:2a:06:97:e0:2f:52:0a:ff:0e:
                    74:45:ed:60:32:1e:a5:74:5f:0c:7c:95:7f:44:f5:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:21:50:3F:6F:18:AD:6C:CB:13:51:E9:F4:5A:E8:40:C8:D9:A5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:78:df:21:ea:57:20:28:2a:1b:de:19:ef:e4:47:90:3c:c8:
         c2:dd:d5:28:31:51:b4:fc:32:f5:79:e7:5e:07:42:2e:5f:eb:
         6b:f0:36:18:9c:82:fd:1a:0e:e4:90:81:2e:f1:b0:6f:5a:74:
         12:2d:e8:4c:cf:71:f3:40:6e:41:db:b3:60:7d:de:da:bf:12:
         ad:b4:ca:ae:a5:93:46:30:47:78:55:96:22:29:b8:e8:6d:aa:
         da:39:8f:04:76:23:0b:8e:d9:0e:30:d1:9e:71:cb:0c:36:21:
         11:37:1a:8b:f4:7f:5d:d1:ec:5c:69:64:ce:95:8a:00:1f:15:
         ea:b9:e8:33:7c:c7:09:28:14:5d:64:35:96:f2:b5:a0:3b:56:
         c5:ae:70:13:55:53:62:14:f9:63:f9:67:e1:f5:c8:f2:a9:cf:
         d1:85:72:c9:97:b8:03:b2:a6:e2:5d:4f:63:f8:a2:49:b9:2c:
         42:45:53:d5:fd:98:53:97:63:c5:c2:a6:d5:8f:be:af:51:aa:
         f7:9d:f6:43:b2:e7:9f:5a:de:dd:eb:be:60:43:22:df:07:d7:
         d8:23:f3:a0:53:37:16:39:8b:a0:06:9b:d1:cc:b7:e7:c7:1d:
         f1:b0:94:7b:04:83:6c:1f:aa:23:a5:d2:af:71:ed:41:b1:55:
         be:00:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:47:38 2026 by rpki-client