Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/779aa2b9-e391-35d3-a3eb-8892b237104d.roa
File:                     779aa2b9-e391-35d3-a3eb-8892b237104d.roa (raw, json)
Hash identifier:          lnWMkoXuHrtuZSPt0859Ae5ax9vyKUwmbr02N6ck9rE=
Subject key identifier:   A6:EA:F7:42:97:35:9A:AC:58:EF:86:10:35:D1:0E:C8:21:8D:A0:C8
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E7FFA509FF2209E16234EB544
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/779aa2b9-e391-35d3-a3eb-8892b237104d.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     21928
IP address blocks:        64.133.0.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:50:9f:f2:20:9e:16:23:4e:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=d72d910e-bd97-4f5c-ab89-b329cf2a1ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:1b:d0:c0:0a:3c:c4:59:7e:74:04:d6:d9:
                    d0:73:9b:8a:80:a6:0f:dd:6a:a6:d6:60:2f:3f:2e:
                    cc:2a:1c:29:80:08:d1:c1:40:8b:ad:a3:74:4f:6b:
                    4d:ac:53:2d:1d:f5:5b:10:d1:f4:fe:12:a9:26:c5:
                    c0:c7:6e:05:ba:29:8b:d6:93:2b:bc:e3:f9:9f:cb:
                    93:5c:e8:c3:ee:79:3a:68:08:80:1e:2a:30:fe:04:
                    8f:9e:21:0d:80:00:71:ea:d7:c8:e7:c2:1f:3c:de:
                    dc:a7:0f:86:f6:c5:45:35:f4:7c:79:b8:95:d8:b5:
                    53:e9:e8:e6:64:0c:f2:ff:f7:f6:fa:ec:3c:e8:ad:
                    55:f0:61:e7:60:60:30:cc:19:fa:a5:a7:46:a2:fa:
                    76:7c:d2:3b:d6:fe:07:32:93:f7:29:e8:8a:02:c3:
                    e0:3d:59:d8:00:73:1b:e6:37:1e:65:2e:1e:27:59:
                    42:f0:49:99:bc:25:bc:8f:a0:1d:bc:f2:85:47:7a:
                    ac:8f:90:aa:ee:f0:fa:00:46:00:e3:8a:e8:a1:f3:
                    8c:c7:b7:4c:a6:f1:73:8d:75:25:be:db:68:87:35:
                    f0:91:a2:28:0d:2d:d6:93:95:99:ef:14:e6:38:bc:
                    91:32:e7:4b:6b:d9:da:13:2b:84:48:6c:b4:33:11:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:F7:42:97:35:9A:AC:58:EF:86:10:35:D1:0E:C8:21:8D:A0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/779aa2b9-e391-35d3-a3eb-8892b237104d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.133.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f2:11:89:02:63:1b:c6:91:be:48:50:1c:2c:79:93:7e:30:80:
         42:3b:c0:d2:09:5e:d6:db:29:97:e7:22:cd:5e:63:23:17:6a:
         6c:5d:87:0f:a8:e2:84:4d:15:18:74:c8:f2:39:7e:1b:18:89:
         57:08:43:e8:d2:f7:26:d9:2e:92:39:44:44:3e:1e:8e:5d:36:
         5e:9b:e4:6f:3f:89:43:a4:ef:c4:f2:ae:07:e3:a9:3b:27:f2:
         68:b7:c4:07:ff:7c:7f:bd:f0:82:c4:ff:c8:37:55:d7:01:01:
         a1:13:dd:59:43:df:83:4a:47:24:84:15:ed:d2:21:26:73:b1:
         49:ee:99:f7:fa:2c:59:0f:62:9d:a5:d7:96:1d:38:90:4a:4a:
         a9:23:4d:d8:55:a2:6a:92:23:f5:e0:49:c7:4f:32:f9:81:27:
         3a:08:a9:47:36:91:10:0a:c8:d3:a5:47:b7:ca:3d:76:dd:32:
         0d:7a:d2:03:75:36:94:91:7e:b0:50:96:d3:0d:c0:d0:70:47:
         bd:66:d5:b9:19:04:83:b4:69:0f:ed:47:9e:bc:9b:cc:31:75:
         fe:63:9b:cb:24:ec:eb:28:13:e8:50:c2:00:70:bc:84:a2:db:
         97:a8:37:4a:57:aa:72:30:4c:9a:9c:ed:44:fa:c8:f4:e3:90:
         60:62:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:08 2026 by rpki-client