Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa
File:                     2ddd424e-b220-3461-a805-5aa7ad17482d.roa (raw, json)
Hash identifier:          ikxRhAayUtu4kh0Eky5gA0z3VnOEtX7jrn7pknVageQ=
Subject key identifier:   6E:F8:B3:8E:35:18:EB:9E:00:A8:8D:03:73:A2:00:B7:71:AC:24:59
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584D492A6E944901C284A23E1900
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     5511
IP address blocks:        64.79.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6e:94:49:01:c2:84:a2:3e:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=e8387104-75a3-4bef-b1f9-a42161da7ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:d4:47:76:6f:59:c7:e4:ab:85:73:70:dd:
                    e5:6c:0c:48:08:25:43:e8:b1:dc:8c:02:3e:1d:d7:
                    f1:8f:a7:cf:da:15:5d:6c:2c:b1:12:de:13:f7:96:
                    06:99:62:5c:fc:30:b2:33:3b:20:48:34:81:c3:ee:
                    40:a6:85:34:6a:e1:c7:b0:9d:53:c0:fb:2a:15:72:
                    6b:b3:56:0c:24:96:db:c8:71:d5:e5:d6:43:c8:97:
                    13:bb:a3:ce:16:ce:0a:e2:52:4f:c0:dd:e9:de:b2:
                    06:12:51:69:6c:08:ef:67:db:fe:75:d2:6f:f7:e1:
                    51:94:95:a3:82:2d:df:ab:9b:06:26:02:ae:a9:2b:
                    4d:1e:cf:23:ac:27:b3:d1:d3:3c:4f:e1:da:e0:df:
                    e0:df:3f:b9:cf:9f:a4:10:4e:57:e3:1a:82:7e:77:
                    fa:b3:5f:3e:ad:cf:2b:6c:fd:ef:b4:15:d9:d4:3f:
                    e4:6d:ad:fb:fa:13:95:a6:c1:9e:72:e9:99:7a:e2:
                    8f:66:18:84:62:44:84:71:1f:a9:77:9f:52:6b:ab:
                    fa:de:08:b7:8c:25:c6:ee:3e:7e:7e:1d:5a:5e:df:
                    b5:eb:fe:78:ee:7f:e3:c9:fb:27:c4:ff:16:e4:57:
                    67:e1:41:46:e0:be:35:0d:e3:10:fc:a5:f6:3e:da:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:B3:8E:35:18:EB:9E:00:A8:8D:03:73:A2:00:B7:71:AC:24:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b7:47:40:e6:cf:7d:a8:4c:60:02:8c:34:aa:0d:4b:63:d1:
         ed:4e:89:67:f5:9c:7e:1a:89:58:9e:9d:56:3e:27:84:37:88:
         6d:d2:99:0d:c9:b2:aa:1a:f0:18:db:53:b5:ef:05:29:07:ce:
         f5:9c:99:25:f8:82:5b:28:bd:c1:16:66:6a:4c:9f:59:4b:ed:
         41:0e:ea:cf:96:cc:26:bc:f2:06:16:4e:07:b0:1d:dd:02:d8:
         32:7b:24:4c:a2:3e:18:c1:21:15:91:2c:c2:a8:c7:55:9f:77:
         6b:2c:57:ad:8a:f5:9c:c9:d2:da:fc:46:71:64:f1:2c:7e:78:
         e3:73:4e:95:94:bc:18:b9:a9:d5:4a:18:7f:03:0f:b2:7d:62:
         45:9d:dc:25:07:8d:21:1b:3a:fd:2e:aa:1e:34:21:0c:40:07:
         39:91:69:18:c6:98:39:a0:9f:eb:7f:11:98:9a:40:79:a4:db:
         0c:5f:00:1b:83:97:72:af:3d:97:f4:27:1d:39:ea:d5:64:19:
         c4:0a:45:47:1f:be:31:15:4a:52:b5:1a:bc:34:de:15:fc:5c:
         a1:ff:de:53:d8:b3:60:58:d2:f3:96:e4:85:7f:a5:55:d6:0a:
         fa:d1:5a:3d:dd:35:74:2e:36:ce:96:5d:20:19:64:29:86:8f:
         d5:18:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:31 2026 by rpki-client