Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/985a3156-438b-347e-97b3-dbc392e8a781.roa
File:                     985a3156-438b-347e-97b3-dbc392e8a781.roa (raw, json)
Hash identifier:          nmfgGX810imziFZsBY3UqHZk0MepT29MTtmWf/f1ajs=
Subject key identifier:   4D:55:A3:55:9F:66:58:42:D7:58:2B:95:52:D6:47:60:ED:39:3D:52
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1E98011F8320B5B0773A80
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/985a3156-438b-347e-97b3-dbc392e8a781.roa
Signing time:             Fri 24 Apr 2026 23:20:56 +0000
ROA not before:           Fri 24 Apr 2026 23:20:56 +0000
ROA not after:            Thu 23 Jul 2026 23:20:56 +0000
asID:                     7029
IP address blocks:        64.16.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1e:98:01:1f:83:20:b5:b0:77:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:20:56 2026 GMT
            Not After : Jul 23 23:20:56 2026 GMT
        Subject: CN=db8ecbbb-80e5-4f1c-ac19-05c27b1885d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:bb:a9:41:73:b6:02:2c:fd:71:be:9f:72:
                    51:a4:67:de:01:38:bc:bd:cc:19:7c:bf:5b:3c:26:
                    f5:94:a5:06:82:eb:f7:c1:c8:ec:e2:17:14:28:3c:
                    bb:a4:f8:6c:53:c4:d7:0a:3a:51:5a:c8:c9:d9:41:
                    48:1a:b0:46:bd:e5:60:04:fa:81:5f:3c:7b:6a:7c:
                    cd:8e:d7:da:4a:bb:9b:43:c9:c2:49:c9:1f:d1:0a:
                    d3:89:6e:85:06:8a:8d:79:80:84:c8:d4:92:9d:c0:
                    d8:b8:14:14:16:2b:17:e1:54:27:48:a1:fa:fa:96:
                    0f:1d:6b:8c:f3:bd:f5:a0:ec:69:bd:ed:44:21:d9:
                    af:ae:db:6d:fc:b7:fc:f6:bd:ed:00:26:3f:c3:fd:
                    31:32:db:b0:00:7f:3d:67:76:e9:d2:82:9b:ef:3e:
                    29:bc:26:2f:fc:cd:c0:aa:29:f1:ea:17:52:7a:38:
                    96:a0:16:aa:0b:ab:c1:0a:08:0b:bb:dd:98:ed:34:
                    66:03:6c:2f:9b:8e:8c:a2:bb:c8:5e:61:9d:97:84:
                    f3:dd:8f:06:d4:f6:26:70:3e:2a:cb:e0:80:78:ee:
                    f3:a6:e5:01:92:9e:f1:ac:d1:12:2d:c6:41:ab:9a:
                    b1:2b:70:97:ea:f1:a7:8d:27:ff:c8:42:03:42:5d:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:55:A3:55:9F:66:58:42:D7:58:2B:95:52:D6:47:60:ED:39:3D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/985a3156-438b-347e-97b3-dbc392e8a781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:7e:f2:04:b6:26:59:eb:63:0c:6e:6a:9b:9e:db:d4:22:
         8a:e9:50:7f:f8:49:74:70:1a:7a:2f:3d:3f:66:ba:d7:48:b5:
         61:02:78:6b:f6:ee:78:49:e1:a8:e4:00:92:02:21:14:33:01:
         ad:c9:9c:e0:c8:52:09:d6:c2:54:57:d9:ae:e9:b2:dd:6b:29:
         37:d2:97:1e:47:85:15:e7:63:30:5e:ad:14:5f:25:04:e9:80:
         1d:06:46:78:f3:8a:b3:a2:d7:ad:e0:c8:6e:59:3d:af:c0:01:
         e6:24:10:e8:c8:cc:46:a3:77:ea:2b:42:cf:3e:56:3f:a7:ca:
         6d:6a:7d:a1:8f:5a:c5:89:ea:f2:46:ab:e6:d3:a1:f2:43:9a:
         3e:e1:8b:db:d0:f8:48:3a:ce:2e:e9:dc:00:47:7e:c8:1d:0b:
         a7:16:3f:a3:f2:1c:52:3e:dd:5c:18:47:80:49:6c:67:db:45:
         6f:2c:18:ed:59:99:df:4f:31:04:55:b5:9d:c4:fa:84:a5:46:
         5b:29:4a:8a:69:e9:93:04:e9:30:8a:94:1c:c7:55:7e:3f:c1:
         39:5f:dd:55:f1:e9:42:b4:9b:5c:36:a6:8b:a4:15:3f:84:cb:
         1d:17:e3:02:28:7b:2a:c4:49:af:33:76:5a:ea:d2:9f:6e:4b:
         3e:d9:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:13 2026 by rpki-client