Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa
File:                     0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa (raw, json)
Hash identifier:          jwx7lFPewN/PZAmSvGVgnSqKJ6qFavEptb2f8pOl0c0=
Subject key identifier:   83:99:F4:E1:16:52:25:BF:33:50:F8:13:E2:07:85:ED:96:59:D1:FF
Certificate issuer:       /CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
Certificate serial:       010D0C9F4328584D98BAAD6EACBF63E9C35B675C
Authority key identifier: 80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     8075
IP address blocks:        64.13.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:ad:6e:ac:bf:63:e9:c3:5b:67:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bfdb746-47de-4f0f-9534-ecf378b217e4
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=358ae5e6-fc47-44b3-8211-ab0fe00a4135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:74:b9:28:0e:96:a0:33:02:87:dc:b8:96:
                    5d:06:c1:97:bb:1e:e0:3d:f7:ef:79:7d:a3:d4:ea:
                    b8:b6:33:7e:ba:b2:d2:78:ca:13:ec:3f:49:23:14:
                    80:40:a8:e6:76:89:c2:62:94:1b:72:2d:b4:17:d0:
                    7b:3f:e0:9c:cf:46:e1:b5:d7:63:26:ff:ec:9f:d9:
                    c7:00:d2:7d:6c:90:c1:63:e9:c1:d3:34:02:66:50:
                    e6:8f:9b:d6:27:07:4c:58:7e:47:d3:70:7e:20:20:
                    a7:76:60:f4:ac:a8:4d:88:65:f1:77:46:28:67:6d:
                    7d:5f:1a:43:ac:76:df:69:3d:95:47:89:48:4c:5b:
                    58:00:c0:84:fa:dd:1a:60:4b:aa:f5:7d:5b:72:3f:
                    94:6a:b2:2f:40:ee:69:5f:96:de:9b:e8:af:66:2d:
                    bb:52:47:da:42:c0:5d:d6:14:f3:fc:e6:b4:ed:29:
                    5e:c0:1b:6c:97:7b:d3:27:30:a7:38:40:c8:c5:62:
                    c9:53:f3:6f:d3:b2:45:ea:4f:30:44:a7:d9:88:4d:
                    27:47:2b:dd:2b:1e:56:24:81:1b:c2:23:49:c2:4f:
                    60:08:d8:54:4d:c7:d3:2b:ff:5d:aa:6c:60:8c:31:
                    d7:e5:42:3f:2e:6a:a0:ad:55:5f:a3:ed:95:54:b5:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:F4:E1:16:52:25:BF:33:50:F8:13:E2:07:85:ED:96:59:D1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/0dbd3604-5d38-3a2e-aaa1-1a83362c9c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4/5bfdb746-47de-4f0f-9534-ecf378b217e4.crl

            X509v3 Authority Key Identifier:
                keyid:80:C4:75:C3:F7:E4:55:62:89:B2:19:B2:F6:C0:E8:1E:30:08:AA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5bfdb746-47de-4f0f-9534-ecf378b217e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:71:28:92:24:2c:7d:c5:25:2f:f5:43:22:cc:b5:a0:5d:d2:
         d2:65:73:1c:c4:4d:72:2b:5b:ea:71:bb:83:77:8a:18:77:0b:
         6e:31:97:91:d1:db:b5:40:87:00:dc:1e:d8:92:81:16:24:37:
         e2:34:be:ef:2d:dd:eb:42:4c:4e:f2:23:f7:6e:f5:e8:18:b2:
         86:e5:63:0a:c7:bb:d5:13:b3:22:31:f2:ed:34:6b:68:fa:7c:
         05:51:2e:11:ae:8a:70:28:8a:ba:d3:6d:4b:a2:cf:45:63:b2:
         0f:71:4a:99:66:ec:eb:79:62:50:93:39:12:af:e2:10:bb:88:
         97:6c:1d:7c:e1:b8:33:b0:90:f8:84:a0:e4:e0:bc:a8:67:8d:
         f1:d3:76:d9:9f:7c:df:b0:eb:47:32:7b:9a:78:9d:9b:c7:39:
         2d:82:70:47:03:ef:d8:d8:01:07:0f:ca:20:98:e6:1e:0e:78:
         00:5a:09:50:e0:ee:d2:29:fa:ca:b3:f9:fa:46:01:9f:5c:76:
         1f:e7:59:45:4e:4e:5c:24:07:b1:be:30:f9:62:71:ae:82:1f:
         d1:a1:e2:ce:ed:b4:c9:9f:27:b2:da:13:c0:41:5a:95:94:dd:
         5c:3a:bb:f8:3b:86:5f:91:b8:68:b0:63:48:40:30:bb:f7:fc:
         8c:03:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:32 2026 by rpki-client