Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
File:                     b5ad165a-44f2-3c04-842b-0842c295e9b6.roa (raw, json)
Hash identifier:          wqMAJp4p8JDFHQgTLtcRgvbCkasJlh/69Z5h3apZvVM=
Subject key identifier:   08:53:71:A2:81:D1:EC:28:36:81:72:DF:46:DE:35:4C:A7:92:4E:87
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584F655D773325F85F689A88A200
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11537
IP address blocks:        64.57.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:77:33:25:f8:5f:68:9a:88:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=6a42b3bc-5b45-473f-b0ed-8aec28c684d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:aa:ee:41:fb:10:6e:f5:4e:b1:c3:6a:04:
                    28:33:d4:2b:fc:94:bc:6f:90:1e:22:72:21:04:80:
                    82:8d:81:88:71:86:d6:44:41:07:db:99:4e:0f:67:
                    f0:94:43:a1:45:5a:42:2d:13:c9:c4:31:a4:f8:cd:
                    7c:2f:82:8e:ae:23:e8:47:5a:3e:20:ef:20:67:ef:
                    90:0f:7b:42:40:5a:47:ef:bb:d7:0b:53:fa:2f:4f:
                    b6:75:60:7b:e9:f6:88:82:0f:f3:be:cb:04:93:7a:
                    92:a3:5a:fb:2d:12:03:be:0a:e0:ec:ee:72:c4:97:
                    a9:40:47:5d:fc:d2:d6:2f:88:45:18:14:e8:74:89:
                    da:6f:b2:ad:aa:eb:93:0b:e6:c1:96:38:7b:e0:e4:
                    8f:30:d4:c7:d8:92:11:00:83:52:5a:0d:f9:42:d1:
                    20:84:40:7f:17:c0:18:5f:6a:27:25:6d:b0:43:4f:
                    57:f8:cd:13:ca:9e:a0:54:3f:1b:25:cd:c8:5f:4e:
                    56:95:d9:17:2d:7b:1e:41:4f:5b:dd:cb:4c:4d:28:
                    6b:90:c5:9b:5c:b2:ab:cd:c3:e7:7c:13:ce:52:58:
                    07:5f:cc:a3:21:e6:1a:43:34:85:89:e3:e2:8d:80:
                    e6:a9:97:16:40:42:3f:9e:39:19:3d:5a:2b:e7:38:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:71:A2:81:D1:EC:28:36:81:72:DF:46:DE:35:4C:A7:92:4E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b5ad165a-44f2-3c04-842b-0842c295e9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:63:f5:97:c2:3e:0b:67:b0:c4:89:60:e6:84:a1:1e:c4:dc:
         77:4a:e6:13:0f:41:00:0a:05:b8:73:45:58:3a:ad:12:b0:b0:
         6a:9a:66:fd:e2:08:16:54:c5:e7:06:13:12:a4:39:7b:eb:dd:
         fd:ef:26:86:7a:69:f9:45:59:10:2c:b7:2f:51:e7:1e:44:0d:
         bf:62:ac:8e:93:38:f8:f8:2a:dd:47:11:c1:74:50:8d:5e:a2:
         61:3e:95:b7:bd:d5:5b:2d:14:db:f3:c0:2a:e1:59:b5:82:e1:
         95:06:b0:70:3f:a7:ed:3e:0a:6c:a4:c8:2f:42:75:9d:cd:46:
         f7:cd:dc:eb:a9:63:23:f8:46:b7:1c:da:d3:15:ee:8c:7c:a0:
         39:e2:67:50:7b:05:17:76:d9:45:9b:b5:28:b3:19:ad:20:20:
         52:5b:99:8e:46:df:7e:0c:00:99:89:40:c7:15:ca:25:11:9c:
         ec:9e:cb:c0:33:fc:77:76:65:e7:b6:11:c7:dc:c7:c2:74:03:
         61:7d:4b:57:5e:59:bd:b4:cf:9d:2e:46:cf:25:6f:6d:d7:09:
         14:9a:47:61:1e:ee:20:2e:33:db:80:76:35:bd:a2:d0:4e:6e:
         70:bf:e1:0e:6f:5b:b6:2a:85:0b:64:35:49:de:b7:1c:b6:43:
         89:81:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:49:16 2026 by rpki-client