Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4cdd9b7-ceb2-32db-8a76-3c83ef1ddde7.roa
File:                     d4cdd9b7-ceb2-32db-8a76-3c83ef1ddde7.roa (raw, json)
Hash identifier:          EUj6jAy8SZ2niiEZCc/JIgqkXWxfsHVEYRurx1hYg4Q=
Subject key identifier:   C1:0A:F7:37:BB:4C:78:77:1B:CF:03:49:DB:1F:4B:31:22:81:EB:34
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F067239DCB3BCE75EFCB75C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4cdd9b7-ceb2-32db-8a76-3c83ef1ddde7.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        64.230.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:39:dc:b3:bc:e7:5e:fc:b7:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=a8c99b4b-a256-41b4-a7a7-f9cf268e7524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:96:29:0a:19:76:fb:91:7e:d4:ba:82:52:
                    df:b4:53:bb:13:2e:54:77:ad:c1:f1:cd:9b:19:9f:
                    04:1f:bc:17:b5:ee:96:9d:61:71:de:8a:1f:8d:03:
                    d4:c7:f8:b6:2a:19:f1:77:86:ff:79:d3:c4:b0:ca:
                    e5:0d:3a:56:96:da:2c:3f:a4:ad:7d:f7:8b:f5:ef:
                    41:9f:9e:dc:0d:2d:1f:f2:75:d4:e9:98:54:d5:33:
                    88:5e:81:67:7c:da:1e:b6:84:5a:5b:58:eb:a6:b6:
                    7e:33:78:4c:c6:59:ea:8d:df:74:d7:02:ac:08:01:
                    63:e5:02:b8:39:34:fd:06:3b:7b:be:26:78:fe:2b:
                    58:5a:dd:4c:cc:7b:3b:b9:db:84:09:ef:53:92:15:
                    81:0b:30:29:86:f6:5c:14:90:0b:ce:da:e8:2a:cd:
                    c0:ba:cd:38:cd:d6:b7:60:6c:d9:c4:b2:90:f6:26:
                    0b:d7:c0:c4:76:d1:95:89:d6:ec:f1:6b:ed:6d:c0:
                    3f:e7:a5:ed:dd:db:0c:80:37:88:e2:58:8f:11:76:
                    d6:98:8d:45:33:9d:48:ea:95:c1:c7:d6:7f:46:61:
                    b6:b2:66:9e:ef:3f:83:b5:5d:c2:b4:a7:4c:2d:c9:
                    dd:24:ba:64:ff:cd:80:eb:e7:d8:78:54:0f:4d:9b:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0A:F7:37:BB:4C:78:77:1B:CF:03:49:DB:1F:4B:31:22:81:EB:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d4cdd9b7-ceb2-32db-8a76-3c83ef1ddde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.230.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:61:6f:17:02:00:5f:7b:f0:64:75:e9:4c:0d:86:29:15:
         69:96:0e:7b:53:0e:a1:91:3f:27:51:7c:bd:b0:78:40:f9:61:
         6c:1c:53:38:92:68:08:7d:20:5b:06:8f:bc:51:be:f9:1d:c4:
         b7:bd:c9:5b:50:b0:a3:ac:1d:0c:df:e1:3a:4f:2d:54:37:a6:
         42:b0:7d:b6:bc:c4:23:c7:d6:1f:c4:83:71:26:08:2a:24:d1:
         a8:88:23:d3:08:22:a5:df:04:f3:be:22:92:ab:fa:b4:72:de:
         54:69:13:ef:59:0f:74:b6:42:4f:30:13:22:84:2f:71:38:07:
         e9:df:d0:fc:76:f3:8a:56:a1:8f:8e:e6:34:d1:f3:41:a2:16:
         61:63:e0:f8:5a:fc:15:34:69:bd:da:48:73:d8:9b:27:61:78:
         c2:b6:dd:26:c6:a1:e6:9a:e8:05:51:37:80:92:dd:d7:f8:0d:
         ea:4e:53:45:21:73:fb:a6:53:a4:df:ef:35:a7:10:86:e1:34:
         94:f1:f1:d6:00:d5:a5:eb:ed:a3:a1:97:94:cd:13:71:cf:f4:
         b5:2d:98:5c:9d:00:2f:d3:14:33:6f:9c:21:2c:ed:47:34:60:
         f8:17:79:2f:ab:f7:a3:f7:25:ab:87:9c:1e:dc:44:35:e8:e1:
         69:ad:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:00:06 2026 by rpki-client