Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fdf62a79-f98e-3db5-a827-0d986d2ae0cd.roa
File:                     fdf62a79-f98e-3db5-a827-0d986d2ae0cd.roa (raw, json)
Hash identifier:          wZRLEtesIwal3ER7Mr5UL63r9AeUM9xO/NYFmxb9WPc=
Subject key identifier:   4B:DC:30:DB:E9:D8:EE:A8:F2:57:F0:A5:C9:FF:39:2E:35:B0:C6:46
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584D9E1FB351EDF31F86F4253D00
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fdf62a79-f98e-3db5-a827-0d986d2ae0cd.roa
Signing time:             Fri 24 Apr 2026 23:23:10 +0000
ROA not before:           Fri 24 Apr 2026 23:23:10 +0000
ROA not after:            Thu 23 Jul 2026 23:23:10 +0000
asID:                     397630
IP address blocks:        64.16.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:1f:b3:51:ed:f3:1f:86:f4:25:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Apr 24 23:23:10 2026 GMT
            Not After : Jul 23 23:23:10 2026 GMT
        Subject: CN=ba824ad7-ec49-46a6-9b97-2f6a2a7a92a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:a7:33:60:32:98:53:13:fd:95:64:02:19:
                    ee:e5:65:9f:3d:65:81:bb:84:ce:c9:20:ba:1d:a8:
                    2b:07:81:f8:5a:f9:43:09:89:95:4f:4a:99:3c:50:
                    28:89:fc:c5:46:bf:b1:ea:2a:cd:ad:09:65:e6:7a:
                    e1:33:10:58:2c:a8:bc:46:2c:28:7d:81:69:70:b0:
                    a1:84:a6:9e:47:1d:fb:71:5f:78:2c:5d:73:fb:db:
                    ab:96:82:5d:5f:a9:6f:bc:53:3c:a9:19:ed:ad:a0:
                    36:7b:c4:59:9a:3d:5a:44:72:d7:fe:37:15:e2:dd:
                    5b:b6:60:d9:75:39:96:a3:b5:b3:41:ff:5d:8f:7c:
                    97:09:b2:f2:c9:34:74:9e:1a:c0:05:e3:54:2e:e4:
                    f2:f2:ab:f9:9a:78:02:af:f4:37:5d:c5:a8:a2:ef:
                    b9:13:de:53:69:f8:d6:65:c4:11:54:cd:be:03:74:
                    de:22:f7:a8:d3:2e:19:34:e0:4b:ab:fd:bd:67:5b:
                    15:e1:27:c9:b7:b8:f5:e4:71:07:f0:09:ab:fe:81:
                    2b:99:73:23:4d:f0:45:a8:76:13:77:c4:9a:c1:27:
                    68:fb:18:53:32:d4:05:bd:b6:38:7d:bd:ee:8f:77:
                    f3:c1:45:5b:ef:48:ae:a4:08:ab:b3:79:2f:0e:a6:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DC:30:DB:E9:D8:EE:A8:F2:57:F0:A5:C9:FF:39:2E:35:B0:C6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/fdf62a79-f98e-3db5-a827-0d986d2ae0cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:18:bf:54:ac:e7:3f:2a:75:31:3e:41:17:03:37:eb:ee:c6:
         3b:10:35:05:c1:09:0f:b5:03:1f:a2:d2:32:03:54:2f:af:99:
         2c:ac:6e:84:bb:c4:17:06:82:e3:aa:d7:99:df:c6:0c:09:bc:
         3c:fc:93:be:1a:01:89:8f:06:53:88:5b:34:e2:95:dc:c2:fc:
         2c:41:19:72:a0:48:bc:27:a7:b2:39:17:94:8f:79:22:b8:6f:
         ce:a6:2e:ca:80:d6:3b:f2:72:de:c9:e4:0e:8d:e1:ff:af:99:
         b8:7a:d2:29:71:4c:b6:45:7e:57:08:b2:d0:b2:fd:c7:d0:3b:
         87:23:f2:e2:68:20:5a:2a:8f:01:ca:02:bf:09:2f:c8:ad:be:
         f9:a3:2f:6f:e7:f3:36:57:2f:4a:6c:fb:db:d4:06:27:d9:03:
         60:cd:ba:29:43:4a:0d:9e:57:ca:b7:39:1d:fe:72:00:14:f4:
         fd:9c:c4:a3:5e:bc:ed:85:01:e0:c9:e2:f0:9b:ae:1c:d7:16:
         46:ed:0f:0f:a7:46:00:b1:0d:85:cd:f4:45:4e:71:39:6f:78:
         06:6b:c0:26:ef:aa:9c:f8:0f:41:f4:a9:57:5f:99:fc:99:ac:
         56:99:b1:9a:35:ce:2a:b6:94:70:b2:45:f4:13:aa:15:15:7b:
         01:e4:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:06 2026 by rpki-client