Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/59ddf9d8-bb8d-384c-817b-19438280e9d0.roa
File:                     59ddf9d8-bb8d-384c-817b-19438280e9d0.roa (raw, json)
Hash identifier:          nZ8vsEaQnu9kAuQMt/lMblkhFDxX3PKDI/9MZyXtsYM=
Subject key identifier:   4B:F2:ED:4D:2D:B7:75:FA:BB:F3:2E:D2:A3:37:0F:C5:C2:D9:2C:2A
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1FB8B613178E8B04EAFB70
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/59ddf9d8-bb8d-384c-817b-19438280e9d0.roa
Signing time:             Fri 24 Apr 2026 23:23:13 +0000
ROA not before:           Fri 24 Apr 2026 23:23:13 +0000
ROA not after:            Thu 23 Jul 2026 23:23:13 +0000
asID:                     397630
IP address blocks:        64.16.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:b8:b6:13:17:8e:8b:04:ea:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:23:13 2026 GMT
            Not After : Jul 23 23:23:13 2026 GMT
        Subject: CN=757cbc42-8b68-473b-a9c9-844a4e9a879d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:80:36:c7:0a:d1:0e:39:2c:7a:f4:89:68:
                    13:6b:25:da:a6:42:3a:29:31:0d:4a:38:c9:85:16:
                    30:dc:af:99:de:27:66:a7:f8:bc:f9:79:cc:14:a0:
                    40:96:2a:1d:2d:94:0f:0d:e2:7c:77:af:77:bd:07:
                    74:fa:22:81:c7:64:e5:d1:3f:e7:38:2b:a1:10:1b:
                    8c:1a:0f:4a:fb:82:6f:69:9b:4b:8c:22:34:29:33:
                    ad:e8:b3:63:51:b5:e8:82:57:e3:35:f4:84:98:ba:
                    d9:11:cf:8e:a5:7c:7c:24:a6:bc:cb:0a:f1:5e:31:
                    93:bc:c0:1f:df:2b:e9:c0:2e:8e:ee:e4:ec:0f:bb:
                    21:74:1b:af:5f:2b:2e:e6:4c:a6:d6:87:58:f3:e3:
                    bf:06:8d:26:18:59:3a:4e:64:fc:81:1f:83:76:73:
                    12:d7:7f:de:b1:3d:b5:81:78:fe:8d:04:ac:da:7b:
                    db:4e:81:5c:3b:1d:a0:0f:dc:5a:1e:fa:cf:1e:e1:
                    dc:02:6a:fe:84:32:fa:4f:f4:73:34:5c:c0:09:bf:
                    0b:64:15:09:58:12:34:77:13:40:6c:d9:3c:a0:01:
                    66:4e:a1:7e:ff:a5:c0:12:cd:5f:60:59:de:72:db:
                    82:e0:0b:da:16:6a:89:40:4b:a6:e6:e0:32:47:98:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:ED:4D:2D:B7:75:FA:BB:F3:2E:D2:A3:37:0F:C5:C2:D9:2C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/59ddf9d8-bb8d-384c-817b-19438280e9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e4:a6:cf:e1:6c:7d:38:88:a6:b5:7c:9d:9d:ed:14:63:7a:
         cf:53:00:62:38:85:e6:5b:ed:8c:17:b0:9a:09:33:f3:9e:e4:
         a1:eb:8e:bc:31:50:f8:8a:78:46:ee:32:57:81:f9:4d:93:8c:
         65:5d:0a:31:b4:97:09:94:4b:1d:6a:91:1a:b9:16:c1:a9:40:
         f8:8c:49:f4:f4:2f:17:4e:55:f2:68:9e:d7:b9:53:cb:b7:39:
         73:46:05:d1:1c:ec:1c:de:b3:27:85:17:23:be:b2:f0:d8:26:
         e0:f0:5c:95:64:03:e1:95:aa:40:2f:17:66:88:3c:70:56:57:
         27:de:48:31:4a:44:dc:b0:df:0e:d7:86:c7:3e:9e:3a:3b:ee:
         ab:86:10:4c:10:f5:ee:0e:96:91:82:90:64:95:04:93:e8:c1:
         8f:ec:59:ee:81:5d:93:a2:3b:d4:49:6d:21:8f:8e:cf:b4:04:
         be:ea:c3:33:04:c5:ba:32:a2:37:64:ee:e0:43:27:b4:4e:22:
         ed:f0:ec:cd:05:95:a7:b3:8b:bb:47:c9:c1:61:56:3e:23:e0:
         88:f9:6d:d5:e9:53:c1:9f:16:6f:f6:fa:ec:88:c8:10:60:2c:
         5f:65:55:a3:15:8a:fd:4b:cd:4c:be:78:57:b0:be:ce:7d:dc:
         a3:63:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:47 2026 by rpki-client