Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d023b812-8daa-3d24-bd91-f2605fc87bc7.roa
File:                     d023b812-8daa-3d24-bd91-f2605fc87bc7.roa (raw, json)
Hash identifier:          hRK2Gkh+3dDBfPXAIajYC8Yri5+AxI5OJgYKbTnYmnA=
Subject key identifier:   1B:05:EC:58:88:07:55:C3:80:44:40:15:D2:C4:71:20:A5:1F:B5:D8
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E201A8A109E14A80139E9E0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d023b812-8daa-3d24-bd91-f2605fc87bc7.roa
Signing time:             Fri 24 Apr 2026 23:23:59 +0000
ROA not before:           Fri 24 Apr 2026 23:23:59 +0000
ROA not after:            Thu 23 Jul 2026 23:23:59 +0000
asID:                     397630
IP address blocks:        64.16.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:20:1a:8a:10:9e:14:a8:01:39:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:23:59 2026 GMT
            Not After : Jul 23 23:23:59 2026 GMT
        Subject: CN=b08d50a2-7576-4236-8d7e-6f5353950bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:ed:42:34:a9:b3:4e:cc:54:ab:29:4d:aa:
                    bd:de:b5:c0:37:0a:38:48:50:0a:19:02:ec:c6:3d:
                    2a:7a:95:ca:d2:12:f3:95:ab:0b:6a:9c:ed:89:e7:
                    9c:95:27:63:e0:a4:5a:5f:ae:72:3d:79:14:15:33:
                    90:09:17:05:b1:77:24:d3:39:71:f4:e5:70:67:78:
                    1d:04:9d:cd:9a:d5:af:9d:e9:05:e6:93:d2:a8:a1:
                    db:79:0f:bb:a4:8e:d4:0b:6e:15:52:20:d1:d7:b7:
                    b7:2a:cd:a9:63:52:28:8e:32:a2:07:94:fd:1a:fd:
                    0c:8c:92:71:9a:ce:79:59:0b:67:ec:24:ca:a4:74:
                    c0:33:6e:0a:09:88:37:41:76:3b:ca:34:db:dc:bb:
                    d1:c5:84:f4:31:8d:50:28:fa:d5:38:74:e7:7e:f7:
                    7e:f3:50:37:7b:1e:f8:6a:c5:4d:f7:59:21:04:b7:
                    90:1a:7d:ea:46:a2:23:24:98:48:4a:40:0b:48:42:
                    74:9d:40:64:6c:a3:d9:d1:af:9d:67:f8:b6:ab:63:
                    2e:cc:dc:aa:0e:e6:a5:6e:2f:14:4e:89:6d:eb:cb:
                    6e:3f:f6:78:84:46:2a:27:2e:82:c9:5e:2b:ec:f1:
                    23:fe:75:c1:49:10:88:06:cc:e3:48:bc:03:a6:df:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:05:EC:58:88:07:55:C3:80:44:40:15:D2:C4:71:20:A5:1F:B5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/d023b812-8daa-3d24-bd91-f2605fc87bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:de:66:db:f0:b4:ca:b5:6f:5f:d9:15:c0:10:ac:73:45:
         a7:c6:8b:51:0a:52:e5:85:c1:f9:7a:3b:3c:b9:c9:db:56:f2:
         ef:0c:81:95:d6:07:8a:b4:fa:8a:61:72:80:c0:32:bd:ae:9f:
         43:ec:ed:26:3c:c3:7f:db:12:ef:e2:6e:17:4b:38:c1:e6:0f:
         29:c0:d6:78:6f:f3:60:05:96:f1:80:d0:2d:3f:f2:8f:b7:4d:
         f8:09:7a:f6:51:04:61:cd:59:8e:b5:d6:68:2a:37:04:e0:36:
         ee:d9:1b:cd:f2:3f:6b:64:21:91:8a:f4:fa:85:d6:7f:5e:8c:
         8a:8f:90:be:25:41:5c:c8:99:b6:81:44:c8:2d:95:76:48:4b:
         59:4c:99:f4:dd:38:7b:a2:f4:32:83:f4:58:a4:68:04:c5:0f:
         c2:4a:50:87:3c:c6:30:b6:18:6a:12:05:9d:5b:74:ca:3c:08:
         87:4e:7a:82:65:9d:a4:24:4f:f4:cc:6e:49:c3:0d:32:7e:f8:
         0a:57:84:49:86:fc:2a:dd:88:b8:2b:14:e9:86:a8:ee:f0:62:
         1a:19:14:f7:7e:91:54:5f:2e:d6:be:b7:4c:f9:18:ca:ce:33:
         08:99:0b:fe:77:97:27:fc:28:95:15:4f:84:fe:05:89:d0:11:
         ef:15:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:55 2026 by rpki-client