Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/90515db8-59ce-37d1-abe9-cc772ea2cc7f.roa
File:                     90515db8-59ce-37d1-abe9-cc772ea2cc7f.roa (raw, json)
Hash identifier:          8otoYD7oPYZHW3aJuQfn6u08TxLuOigzst1wBRc3/jI=
Subject key identifier:   FA:04:18:30:9C:70:8F:51:6D:10:3C:A1:D0:C4:A9:2F:57:1E:7F:37
Certificate issuer:       /CN=957017f9-0b2d-451e-bee3-85f42c50dde4
Certificate serial:       010D0C9F4328584D1F4A44CAC5C63034BC2D4800
Authority key identifier: 9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/90515db8-59ce-37d1-abe9-cc772ea2cc7f.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     26065
IP address blocks:        64.7.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:44:ca:c5:c6:30:34:bc:2d:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957017f9-0b2d-451e-bee3-85f42c50dde4
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=654c55f8-79fb-4ca2-a15b-9c35a50bb0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:32:af:f0:67:1e:f0:a1:42:29:75:31:24:
                    ff:2c:8d:7a:a2:57:e7:99:80:49:ac:d0:73:e7:6a:
                    44:44:23:be:60:9c:70:6a:28:34:fb:fc:c7:d0:ce:
                    06:09:14:d8:e8:f9:7f:bb:5e:b9:bf:4c:90:22:e2:
                    e7:d2:bb:1b:a2:89:8e:18:4e:0e:a4:9b:17:a0:2d:
                    4c:e3:12:10:71:d8:5c:c4:ba:2c:dd:1f:bf:fb:82:
                    66:2b:01:8d:a1:7b:13:0f:16:b7:d3:16:04:fe:81:
                    b0:f5:e0:7c:e5:da:22:44:19:80:dd:41:42:01:f7:
                    78:d6:eb:8a:2a:61:26:41:35:ba:ed:2a:ad:52:d8:
                    35:f4:37:fc:f9:05:93:10:6d:18:78:dd:74:da:2b:
                    a3:d0:30:a9:97:fd:c3:f3:b6:7d:80:7d:92:7d:cc:
                    9a:8f:9a:08:6b:4d:9e:bf:36:19:89:57:b8:fb:07:
                    d2:11:af:4c:ad:3a:41:fb:d6:bc:70:ab:ab:98:0c:
                    25:89:52:5a:3b:04:78:3e:9e:79:a0:2d:24:d5:43:
                    9b:9d:c5:3d:f6:cd:e0:db:f3:4d:ee:54:60:f5:7d:
                    9d:d6:86:a0:ef:72:8c:dd:22:f7:5f:b4:89:82:6e:
                    42:60:ba:50:8e:6d:eb:cd:0c:f6:15:8f:fd:20:d2:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:18:30:9C:70:8F:51:6D:10:3C:A1:D0:C4:A9:2F:57:1E:7F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/90515db8-59ce-37d1-abe9-cc772ea2cc7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:87:34:28:09:1f:d2:8a:74:29:12:e0:b3:62:1b:9b:0f:
         49:06:a2:d7:f0:8b:ca:1e:9f:f8:93:8f:43:7e:22:75:5d:79:
         78:0b:e9:1e:23:3f:f3:02:ce:40:94:b6:a1:ea:58:af:a8:39:
         9f:60:89:28:69:ab:1b:20:6a:f6:90:63:07:f6:48:a5:52:4a:
         1c:65:98:4e:df:26:ca:f0:ee:b7:a6:be:d7:63:e4:be:bb:2b:
         8e:60:1e:b5:d1:2c:af:5d:3f:25:df:5f:1a:eb:18:09:c2:42:
         c2:95:6a:7f:34:11:c8:28:0b:62:96:ea:b6:7b:08:bf:9e:9a:
         d6:53:9f:a1:09:f1:f6:fa:c1:73:03:1c:84:19:c1:94:d3:33:
         8f:89:6d:6b:fb:71:ce:65:b9:60:21:51:2a:67:6d:d9:b8:81:
         b5:54:13:33:da:c0:42:46:95:30:99:67:d7:83:fc:57:8a:be:
         8a:69:2a:3f:7f:41:a9:f5:38:11:80:d0:12:58:e5:26:cc:36:
         38:7d:91:57:36:15:ea:94:96:ee:15:8d:c9:21:c7:3a:5d:06:
         d2:db:2b:37:ba:2b:cf:83:2a:c0:11:3d:71:f8:10:b1:fc:f1:
         d1:f6:89:be:10:a4:4f:62:5d:38:86:3b:fd:04:7a:6e:9c:d4:
         8c:14:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:52 2026 by rpki-client