Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ae3a8960-4214-3d7a-932e-4c5678583aa8.roa
File:                     ae3a8960-4214-3d7a-932e-4c5678583aa8.roa (raw, json)
Hash identifier:          xrXJ8xTB5X9+0likZq2HVttf5LX1HnP0eYX3lIcVEg0=
Subject key identifier:   23:D0:91:02:0E:4D:07:4A:52:04:8E:D1:2C:29:A0:8A:4B:7F:22:0B
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584DC83044B2FE1655CE08C6B8B0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ae3a8960-4214-3d7a-932e-4c5678583aa8.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     32133
IP address blocks:        64.98.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:44:b2:fe:16:55:ce:08:c6:b8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=81a08469-168d-4208-aa84-434e4e7eb4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:14:63:20:b3:f6:8a:1f:46:85:91:cd:22:
                    66:92:f1:27:a0:56:17:4d:a4:e1:7e:8b:0b:2d:3b:
                    a6:a4:d3:19:44:e7:2b:f9:ff:49:d0:03:93:ca:68:
                    03:87:0e:90:d8:47:39:33:9f:55:ad:f0:0c:c8:57:
                    77:2c:b3:65:b9:65:46:3a:4f:01:97:b0:86:66:f9:
                    59:45:1b:41:b4:df:8e:ac:1c:4c:77:4f:54:09:7e:
                    e6:fd:29:7b:72:ed:bb:59:a3:aa:4d:4e:85:cd:39:
                    0b:30:0e:6f:5a:ae:48:dc:7b:da:a6:cd:ab:fc:80:
                    1d:56:85:60:c9:2c:e8:2f:7d:be:b9:ab:ec:8f:d7:
                    75:cf:fa:99:b5:23:fd:de:a5:04:c1:a7:ee:73:db:
                    01:f6:1d:a3:9b:0d:c5:f8:f8:ad:5e:a5:21:70:a6:
                    17:99:e3:84:1e:a1:a7:f8:bc:38:9b:ed:15:c5:55:
                    f9:d6:fd:7f:a7:70:19:42:33:8a:ac:82:e8:cd:27:
                    b2:9b:b0:5a:68:fc:77:f8:2c:45:86:8e:5e:be:af:
                    ac:f1:fd:a9:39:d0:fc:a8:be:d1:81:09:06:3b:c0:
                    a6:e1:92:94:b5:96:ca:75:62:5d:28:49:d5:dc:26:
                    d1:e0:a8:aa:f9:2c:a2:62:55:bf:66:c5:c9:94:c3:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D0:91:02:0E:4D:07:4A:52:04:8E:D1:2C:29:A0:8A:4B:7F:22:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ae3a8960-4214-3d7a-932e-4c5678583aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:c6:c7:94:33:4e:23:87:fa:9b:37:e7:7f:49:85:c4:93:
         06:50:86:8b:79:9a:2e:37:3a:70:e4:03:40:05:bb:2c:20:cb:
         ea:8d:90:64:81:fc:04:04:24:de:48:0b:a6:23:4d:2a:98:be:
         9d:eb:f5:8e:73:54:d5:89:6d:68:98:cd:55:1a:82:3c:50:4f:
         3b:f5:30:3a:bd:b9:f4:9a:20:85:6e:c8:fa:9e:44:23:57:35:
         12:ae:1c:71:ea:2e:28:f6:5f:31:65:98:73:28:f4:46:92:a0:
         0b:fe:6a:8c:8d:57:52:72:cf:74:bc:7b:08:34:10:b8:ee:ae:
         2d:99:1a:fa:06:eb:44:12:15:25:d5:c0:d8:a4:c6:31:2c:d1:
         a4:27:e6:ee:81:7a:40:4f:35:54:f7:e5:cf:d1:d9:1f:44:cc:
         08:1f:de:fa:de:0d:e5:e5:d4:61:b6:a7:c0:e0:e5:44:6b:a9:
         dd:00:e8:70:d5:9d:c6:c5:00:b8:64:6e:1b:e4:7e:fa:c1:01:
         1c:9e:5f:a5:d2:e2:4f:98:e5:9d:10:b6:3e:8e:ad:72:6b:85:
         e7:1a:00:58:5d:16:13:02:b1:69:6a:5f:e3:95:19:58:4d:7d:
         49:10:0d:21:fe:68:e0:25:d2:8c:53:df:22:9d:b0:8c:bd:1c:
         b2:7c:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:58 2026 by rpki-client