Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa
File:                     43fa81ef-9a43-3b2e-8578-ff62facf5274.roa (raw, json)
Hash identifier:          OwLy4RGVZd/dmfr7troo1PYaNUtWaUj47UumlXUz0Xs=
Subject key identifier:   F7:29:EB:43:0B:3E:EB:A3:E9:B4:C7:EB:5E:E1:27:0A:0A:FC:3C:6D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5E79FDBD8E14A5F47298D100
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        64.237.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:fd:bd:8e:14:a5:f4:72:98:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=2dea5d67-d380-413f-b9e7-00efe2f96de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:0a:d6:e6:c4:76:24:cf:66:27:c5:63:47:
                    67:3b:0f:a7:df:8e:cb:0d:5b:c0:99:97:c2:62:0e:
                    5b:3e:35:b9:c9:6e:b2:e4:00:bd:55:7c:a1:ea:0b:
                    07:71:2c:0a:29:65:37:4f:ef:15:12:ff:b3:83:62:
                    b2:35:8d:b5:5d:40:92:2b:56:69:9c:85:d6:f3:3e:
                    10:02:e0:22:2a:ec:cb:6c:a2:4d:bd:08:f1:7f:71:
                    72:14:9f:27:05:64:3d:5a:b5:8f:8a:b3:1f:2f:73:
                    71:a0:4f:1a:58:fa:34:47:69:1b:f4:be:d1:85:46:
                    d5:36:07:96:21:68:1b:e1:f5:21:e6:5a:3e:60:4d:
                    2c:27:1b:9e:d5:e6:de:f0:cb:cb:f7:0e:f2:06:47:
                    df:25:00:fe:5d:ca:63:c3:53:2e:39:4f:a2:61:df:
                    af:64:92:0e:d6:44:68:e7:a2:2a:57:c8:9f:8a:85:
                    8b:15:23:72:45:17:51:f5:c2:86:ee:5b:58:7e:5e:
                    b4:ed:72:ab:80:a5:f7:94:8a:29:87:83:84:75:2a:
                    5e:c6:09:ba:39:72:16:40:2d:ef:da:1e:cf:78:09:
                    ce:c8:9b:d3:75:9c:90:d3:38:b6:e1:08:28:76:80:
                    b6:14:c4:2d:01:39:93:37:99:dd:c0:59:9b:df:90:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:29:EB:43:0B:3E:EB:A3:E9:B4:C7:EB:5E:E1:27:0A:0A:FC:3C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/43fa81ef-9a43-3b2e-8578-ff62facf5274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:38:54:df:e6:c5:55:ae:41:a9:4d:7f:9b:e1:2f:11:e3:
         83:f9:ea:54:29:9e:33:e3:9f:ae:01:a8:5a:b0:16:19:69:4c:
         6b:58:be:cf:cf:0a:39:f9:7f:2e:53:35:29:31:9d:6b:27:a1:
         52:3d:9c:21:14:31:53:7f:77:49:80:0f:63:8d:c0:28:28:fd:
         25:20:1a:e8:c7:d2:69:e0:5e:a2:36:88:9a:6a:0b:9b:4d:fe:
         9c:04:69:eb:dd:c9:65:a1:0b:d1:5c:b8:ed:a9:66:b1:51:de:
         66:60:9c:b0:2c:90:e2:3b:c4:fe:5d:fd:1a:b3:29:b8:eb:bc:
         56:72:91:b5:c4:ce:7c:34:e4:30:4c:77:55:97:27:3d:d4:e8:
         5e:7c:67:4f:a9:35:72:6a:fc:88:64:86:a4:cc:84:df:38:6a:
         59:42:09:9c:b4:36:44:a3:dc:34:0d:c0:65:32:52:9b:7f:e7:
         48:88:e1:4f:a2:48:fe:2f:bb:cc:c3:e1:a3:fc:75:70:09:1b:
         db:eb:db:f0:92:bc:b9:0b:e4:49:31:3c:38:bd:cd:a8:00:d3:
         3a:90:8f:7b:31:46:61:71:3e:f5:40:4c:0c:c6:db:a2:d9:c2:
         b6:aa:c4:66:df:ba:d3:06:d8:dd:87:ba:c0:2e:54:ff:01:93:
         32:fe:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:16 2026 by rpki-client