Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa
File:                     c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa (raw, json)
Hash identifier:          asdP+M2uok2Mi5EmOmnjEE9QtxM5bIMM1ddfaJzlLUw=
Subject key identifier:   6F:97:B0:10:FD:2F:C2:95:54:52:6E:15:9E:05:57:74:F3:71:AF:18
Certificate issuer:       /CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9
Certificate serial:       010D0C9F4328584E4F1F3CF6E8C6D98F90615180
Authority key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     394911
IP address blocks:        64.66.244.0/22 maxlen: 24
                          172.82.12.0/22 maxlen: 24
                          206.183.136.0/22 maxlen: 24
                          207.90.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:3c:f6:e8:c6:d9:8f:90:61:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=bfeac9ca-569f-4330-a2f7-0bf2451ec36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:ad:e3:2e:59:08:db:0f:b3:6e:f9:3a:50:
                    56:b0:b9:63:ce:39:2d:c4:71:9d:43:f9:86:39:26:
                    94:3d:b5:ba:ef:cc:ed:f0:1c:25:07:46:25:04:4a:
                    89:b9:8a:e2:a2:ae:2f:2f:f9:28:27:bc:8f:fb:98:
                    84:55:5a:4e:38:08:93:5e:a7:e6:24:09:4b:e7:75:
                    08:99:ae:ca:fe:e2:9f:9b:95:37:b3:d3:11:33:0d:
                    17:0b:be:82:cb:df:e5:51:91:b1:c2:61:d0:df:e9:
                    74:fb:65:cc:1a:bf:fd:43:f6:98:67:f5:9d:1a:74:
                    95:29:f6:a1:96:20:08:a7:c0:fb:04:8c:57:4c:66:
                    d2:1a:05:45:cb:6c:7b:0d:c6:72:b1:f0:f8:9c:eb:
                    54:ff:da:33:df:1f:61:72:da:48:ca:e5:cf:a5:3d:
                    6f:c3:7e:eb:3f:74:61:3e:03:f2:10:41:c7:16:94:
                    e4:6f:e5:08:17:06:b5:3f:07:71:65:e9:19:4c:07:
                    9f:4d:90:5c:8a:a1:2c:00:3a:bf:b9:81:8c:4a:1f:
                    49:d6:ca:80:9d:89:e9:26:39:eb:2e:a7:b8:20:fa:
                    67:ac:b4:1c:ce:7e:0a:08:c9:ae:30:13:ea:b1:a7:
                    f5:7b:83:40:f7:21:b7:4d:16:9b:4d:2d:88:06:85:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:B0:10:FD:2F:C2:95:54:52:6E:15:9E:05:57:74:F3:71:AF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/c24db57b-191a-3c0d-9ec9-9b6fa7f1d67e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.crl

            X509v3 Authority Key Identifier:
                keyid:56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.244.0/22
                  172.82.12.0/22
                  206.183.136.0/22
                  207.90.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:7e:ca:56:bd:17:d1:15:d5:92:2b:38:66:e6:3a:5d:d4:
         11:b2:27:e8:1f:21:dd:7e:24:c1:aa:ab:f9:3f:11:89:88:3c:
         a5:89:66:d2:57:41:df:f4:e8:c1:91:ef:d2:57:a6:8a:28:1f:
         f1:c7:38:80:e5:78:ad:b5:d7:7c:91:7a:7c:99:a4:d6:43:3a:
         6f:b3:38:6d:d8:7e:fd:59:a4:b1:51:9c:40:f8:6d:06:6f:fe:
         2c:ac:6a:78:e7:04:85:b2:03:44:58:97:5e:e8:ca:a5:28:85:
         51:b2:41:d1:cf:11:04:4c:e3:ec:78:00:6e:e0:d1:f9:2e:2b:
         bd:99:5a:e4:92:9b:97:75:a7:18:79:d3:c1:69:fe:dc:fa:ff:
         ea:f1:dc:19:ef:c5:f5:fa:18:1d:e8:e4:9a:76:30:50:1c:94:
         5c:67:00:7a:94:47:94:70:ba:c8:78:31:d8:c1:fb:b4:b5:eb:
         1f:94:3a:c5:c8:fe:81:17:ad:fd:4e:35:b4:c3:b2:f2:65:48:
         28:df:70:55:71:29:51:be:cf:b9:f8:cc:31:cd:42:8d:9c:2f:
         88:92:b9:cc:46:e4:ad:b7:10:70:2d:d8:ae:cc:27:fb:4e:81:
         6a:af:9d:a4:7f:00:36:15:35:23:96:a4:a0:c3:71:7f:43:05:
         2a:a3:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:31:09 2026 by rpki-client