Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa
File:                     b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa (raw, json)
Hash identifier:          RdnuZpsxIbRjaIecznTflSci3/BDWIoOo2fvLhNyzmg=
Subject key identifier:   E7:8C:71:CB:7A:8D:16:43:06:77:4E:34:85:ED:BF:21:86:78:68:42
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584F3CE2824A0862616C1BFA6850
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22351
IP address blocks:        64.88.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:82:4a:08:62:61:6c:1b:fa:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=eb7e386c-2e68-49a7-995a-d61734bab881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:02:90:99:f7:20:eb:cc:6d:ba:f2:d5:8b:
                    3d:a6:91:70:1a:e0:80:06:bb:dc:37:4f:04:f2:08:
                    99:42:ff:2e:55:37:9d:41:5d:63:c0:71:ec:a0:81:
                    6e:07:1c:01:6a:b2:30:de:da:52:5d:f2:07:27:50:
                    a4:aa:fa:ed:52:6b:35:60:25:14:4e:54:df:7d:21:
                    79:26:b2:e6:db:84:2c:12:72:0f:77:2b:eb:10:06:
                    2f:f9:58:81:fa:e3:5b:e9:7c:9e:c7:15:cd:78:2c:
                    4e:58:b4:8a:2a:ec:45:ac:cf:3c:00:2b:fc:ae:f9:
                    07:ae:32:ad:0d:b2:0b:a3:b5:2b:86:9b:bd:6f:00:
                    98:34:62:ee:8d:7f:e4:cc:d0:08:32:98:fe:69:06:
                    5c:2f:d9:d7:92:a4:1f:70:21:2b:53:2a:75:f1:0d:
                    5b:38:14:05:5d:41:30:24:82:41:0c:1f:83:58:9d:
                    06:45:16:98:0c:1b:8f:14:cc:1d:0e:82:61:9e:4e:
                    9a:74:6a:66:fc:c5:20:1f:3b:b8:8d:95:64:b1:ce:
                    aa:de:11:cd:03:a1:1e:37:85:96:f0:3a:53:69:9e:
                    b7:5f:1f:f3:cc:68:f4:b7:36:15:f3:9b:9d:56:c1:
                    ca:62:d0:c3:00:65:30:78:05:b0:48:7f:d2:dd:e8:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:71:CB:7A:8D:16:43:06:77:4E:34:85:ED:BF:21:86:78:68:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/b656e733-9bdb-343b-8ef1-c0b9d5eecbb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:53:f2:d9:62:61:7c:3e:de:a6:41:25:1a:8c:1b:39:c8:
         57:cb:4b:95:75:3f:30:35:46:56:c0:0a:4c:7e:65:42:36:24:
         db:01:61:82:b7:3c:a0:f3:03:a1:9a:76:4e:6a:d6:fa:e9:41:
         5d:49:7f:c2:63:10:5d:9c:4e:bc:23:98:62:0a:ea:6f:7a:1f:
         de:a1:56:cb:b8:d7:b9:9d:b0:93:13:85:59:52:6f:f0:27:58:
         3f:7c:9c:e2:6f:32:8d:52:a8:32:ca:7b:f4:c1:e9:eb:66:20:
         b6:86:32:ce:56:bb:cf:8a:73:d6:9c:dc:66:20:17:a5:94:10:
         59:6b:61:e5:7a:f6:cd:f7:4e:3d:39:77:ad:ea:a9:ef:f9:d2:
         9f:0e:86:16:f9:a7:09:73:61:52:1c:b8:19:c1:22:58:fb:c6:
         86:14:6a:e7:52:02:70:92:dc:a8:f4:d9:16:67:f4:ec:c8:16:
         07:e1:4e:1a:5c:46:0d:b3:52:6e:fd:8e:ed:d5:5c:46:df:eb:
         55:20:5e:ad:fc:79:2e:df:0c:bf:09:2e:13:8f:bd:6a:a8:2d:
         85:8e:c7:f3:d1:7e:f4:c7:9d:ae:c0:23:4b:2a:21:a7:54:34:
         7b:06:de:5c:2a:26:ff:c8:17:f3:94:26:59:83:5f:ae:62:5e:
         1f:4d:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:42:01 2026 by rpki-client