Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6460297d-f097-3a1c-8f42-85dc46d24c4d.roa
File:                     6460297d-f097-3a1c-8f42-85dc46d24c4d.roa (raw, json)
Hash identifier:          C9FjRN5z33/cmYa0VVLpqYkW3Fw380CGFVppdgNPkT8=
Subject key identifier:   08:CD:89:AC:9F:C3:7D:5B:24:BB:98:6B:D1:F5:7E:FA:0A:31:E6:E0
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1FEEF3771E3A8A8F749C40
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6460297d-f097-3a1c-8f42-85dc46d24c4d.roa
Signing time:             Fri 24 Apr 2026 23:23:38 +0000
ROA not before:           Fri 24 Apr 2026 23:23:38 +0000
ROA not after:            Thu 23 Jul 2026 23:23:38 +0000
asID:                     397630
IP address blocks:        64.16.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:ee:f3:77:1e:3a:8a:8f:74:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:23:38 2026 GMT
            Not After : Jul 23 23:23:38 2026 GMT
        Subject: CN=b43d806a-9cf3-4a22-8de7-66e6460ce35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:d7:7e:54:a9:c4:d1:dd:44:cd:a7:ab:8a:
                    5a:18:27:df:9a:9a:2c:b9:f5:a5:ee:ac:05:4a:77:
                    17:f1:66:b8:6e:f7:5e:ff:7a:d2:b3:16:99:be:99:
                    3e:68:be:78:85:b1:cf:8b:09:08:96:b3:42:ca:67:
                    3b:e2:db:d5:07:6c:fe:24:6e:b6:ce:21:8b:d9:53:
                    a4:78:a5:ae:3a:24:e6:23:94:13:ff:ea:fe:dc:17:
                    11:a0:bf:ac:fa:3c:c4:c8:be:41:5f:fe:0e:98:c9:
                    8a:97:e9:de:b3:26:dc:d4:b1:96:e4:ee:06:7c:4e:
                    5e:c3:58:db:2a:9d:52:91:49:69:27:70:a0:46:a4:
                    21:b9:7c:8a:c2:a4:ac:b4:75:1b:df:fd:01:0b:1a:
                    c8:e9:8c:b6:46:7a:59:d4:f2:a7:7e:9b:e7:1b:cf:
                    d8:ce:60:a5:2e:d1:19:fa:f7:64:98:35:1a:70:66:
                    ee:8f:7c:c6:0f:9c:04:dc:1f:e0:ec:23:04:4e:c5:
                    3c:d9:d5:52:bb:df:b1:97:6e:98:99:ac:ec:9f:e5:
                    51:37:bc:37:aa:a0:c8:80:a3:b0:9c:33:6e:90:c6:
                    d2:ff:ec:7e:c3:73:b6:bc:8f:9a:e4:b6:f1:04:8b:
                    36:f2:27:32:ca:a3:db:18:f1:18:21:81:85:5b:08:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:89:AC:9F:C3:7D:5B:24:BB:98:6B:D1:F5:7E:FA:0A:31:E6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/6460297d-f097-3a1c-8f42-85dc46d24c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:16:19:c1:e4:f6:95:ca:fb:8a:55:b3:23:67:be:b8:21:
         4e:9d:a7:a1:51:21:99:10:fa:5e:a6:c6:76:9c:19:4e:58:34:
         cf:29:e7:4b:b8:e4:aa:f7:88:54:b0:a7:9c:1e:ff:8c:f2:db:
         54:04:9c:d5:7e:09:74:a9:75:95:5f:da:5f:25:ff:ef:a0:a2:
         62:1e:58:f4:7c:f3:82:71:7c:cc:fd:c6:53:4e:ef:c1:3d:d8:
         14:0d:bd:a2:49:f7:40:8f:17:5d:ea:77:2c:21:c6:ba:d7:03:
         1b:c4:63:d9:00:fd:c8:2d:d1:6f:c9:09:a1:14:0f:02:4f:bf:
         c9:44:0d:c6:ad:ef:86:57:96:2c:e4:56:75:91:ca:1f:1d:75:
         ca:27:19:cc:7c:8e:8a:33:99:9f:e0:0c:92:07:96:10:0f:5c:
         8c:c1:c8:22:41:69:3d:aa:b3:b4:19:a4:e4:7b:17:90:a7:af:
         f8:42:92:2c:e0:83:69:55:c4:d9:64:b5:70:0b:c4:fa:6b:ab:
         f5:76:7f:33:24:68:f9:2e:91:bc:ea:76:60:51:16:aa:4d:54:
         96:9a:8a:bb:b8:ef:83:0d:ee:63:f3:9a:04:c0:f5:e2:9c:0c:
         9b:13:19:86:dc:e8:ca:c3:b8:2a:79:e8:3e:f0:48:1a:0a:32:
         09:0b:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:43 2026 by rpki-client