Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa
File:                     30a4f60f-dd84-3200-a318-54fb513afa8d.roa (raw, json)
Hash identifier:          BnyQJEjLpQxXkxLs57BEJsNbuBx68desqhubj+PKv6s=
Subject key identifier:   A5:B8:53:EA:F6:D0:DC:D9:44:E3:F3:EE:EE:66:4F:1C:AF:18:18:27
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1EBE5C35D52E1EE34A5B00
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa
Signing time:             Fri 24 Apr 2026 23:21:14 +0000
ROA not before:           Fri 24 Apr 2026 23:21:14 +0000
ROA not after:            Thu 23 Jul 2026 23:21:14 +0000
asID:                     7029
IP address blocks:        64.16.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1e:be:5c:35:d5:2e:1e:e3:4a:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:21:14 2026 GMT
            Not After : Jul 23 23:21:14 2026 GMT
        Subject: CN=d1a7517d-5e05-4e73-af84-622da36a8bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:59:98:eb:d5:ca:d4:c9:77:d1:36:67:b3:
                    79:59:b1:c0:35:d5:6e:44:b5:04:9b:f0:83:3d:e1:
                    20:52:2d:4a:6b:a4:02:8a:dd:e0:59:12:a2:cd:0b:
                    c6:e1:8f:16:2b:e0:5f:5f:ba:09:74:9d:4d:6e:21:
                    7e:54:bd:8c:26:f1:99:8c:30:a1:29:fc:96:8c:74:
                    7e:ec:74:92:90:1a:da:a6:52:12:0e:77:9c:55:32:
                    43:79:44:24:83:4c:9d:f5:a7:06:34:d5:fb:a7:b5:
                    31:41:22:07:46:0a:57:1e:8f:de:42:e7:4b:b8:55:
                    2d:eb:f1:c7:9f:45:95:24:cb:67:42:15:1e:1e:5f:
                    3a:bb:6a:fe:04:7c:97:6d:cf:73:9d:70:06:5d:87:
                    9d:b5:81:53:ee:16:57:92:2b:c4:44:6c:41:39:c3:
                    99:18:e4:84:e4:4b:83:4b:ae:97:21:71:8d:f5:40:
                    c6:72:71:b8:90:94:4e:75:d0:4a:84:cf:78:47:64:
                    ef:73:cc:36:7f:10:7a:f6:d8:45:85:62:68:17:91:
                    f0:a8:f7:78:eb:c5:f1:81:10:9b:4b:dd:46:f8:01:
                    64:18:ae:18:33:39:6c:96:a2:9e:29:21:35:84:3a:
                    0e:21:65:ac:87:7c:be:e3:c4:dc:ba:ef:fc:e0:b3:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B8:53:EA:F6:D0:DC:D9:44:E3:F3:EE:EE:66:4F:1C:AF:18:18:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/30a4f60f-dd84-3200-a318-54fb513afa8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:58:f6:f7:1b:e9:17:67:07:45:72:92:af:35:54:c6:3b:
         27:8f:70:0b:91:7b:9a:c5:6e:3e:e0:84:29:ab:60:d6:d4:9a:
         34:7a:01:ba:a0:fb:fc:d7:d7:ab:8d:56:7b:69:9a:b9:e2:ef:
         be:72:28:7a:01:42:7e:e7:b6:05:62:e4:79:c5:a7:70:43:d2:
         06:fe:3e:9b:1e:bd:80:2c:9b:16:3a:7d:e4:4c:d2:33:06:e8:
         dd:f6:a1:a8:12:d2:19:52:50:b6:a6:06:ee:19:ff:d7:95:50:
         39:06:a7:a7:fe:cc:1d:14:b4:91:db:bd:3a:ba:d0:6a:ff:e1:
         0f:b2:e1:b5:ff:a6:7b:f6:9b:b5:87:3c:05:0a:80:9a:3f:ae:
         13:03:a7:db:a6:3c:93:97:f1:31:24:61:9f:88:b0:12:7c:e9:
         a2:46:37:87:57:b0:42:77:aa:51:30:20:bf:05:b6:37:ea:58:
         1e:1e:3d:83:48:0f:ce:7f:37:4e:11:a4:82:49:0c:1a:ed:97:
         82:2d:39:7e:bb:c1:55:78:c9:a8:79:a0:0d:39:36:e0:c5:45:
         63:f6:26:87:60:a8:77:fb:74:a9:62:29:bf:3b:fc:81:47:94:
         20:55:73:46:ee:0d:2b:c4:f6:60:84:3f:b6:63:e2:51:cb:fb:
         03:50:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:43 2026 by rpki-client