Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa
File:                     0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa (raw, json)
Hash identifier:          FrUQSwPp+4KBg7mZgOBeXiUeywi8siXEQF5MyM9HWcI=
Subject key identifier:   7C:D3:CE:93:78:28:10:33:15:C9:BC:1E:15:55:22:97:50:B6:96:33
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584D359FBCE854BAE39ACBB33560
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22079
IP address blocks:        64.136.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:bc:e8:54:ba:e3:9a:cb:b3:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=d3f1b6e6-9ed4-4b5c-97d4-1ec0e79f84a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:57:a2:b1:db:3b:95:3b:f6:b6:bd:00:72:0d:
                    90:40:f3:ac:bc:d4:c9:e8:a5:e7:09:19:51:f5:f2:
                    54:6f:3c:d4:8c:fa:e6:74:66:a7:7d:d6:fd:33:22:
                    7e:80:a9:6f:71:2e:24:27:de:4c:ef:e7:ab:64:f5:
                    27:8a:99:21:32:71:b1:b8:59:a5:f6:7f:83:11:7f:
                    7b:89:ac:dc:6f:ae:14:eb:cc:75:f1:83:78:87:a7:
                    0d:bf:19:95:18:0b:d6:4b:cc:50:23:62:2d:a7:78:
                    c4:f7:cb:1e:8a:5b:79:1f:fd:86:d7:9f:11:a4:b7:
                    fd:9a:55:fa:22:0c:dc:ca:df:2d:28:94:95:bc:40:
                    70:ce:b7:ba:05:53:7a:69:57:f4:27:e3:8a:1d:6e:
                    1c:00:8f:92:83:6d:f1:e1:51:61:e6:79:31:bb:10:
                    f0:e1:68:ee:d3:e8:d7:30:40:50:75:f2:b7:4b:d3:
                    34:8c:ea:17:f2:7a:1c:ca:ae:c2:16:6c:85:c1:dd:
                    e2:38:38:ef:e2:4a:c6:7f:d1:80:6d:d4:90:b9:b4:
                    89:6b:19:d8:45:64:22:93:e6:89:17:d0:ac:4b:dc:
                    01:16:ea:0d:a9:3e:d9:c0:c1:31:eb:f8:01:dc:e1:
                    df:8e:f0:1c:79:7a:41:a9:88:13:ba:01:f7:4e:05:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D3:CE:93:78:28:10:33:15:C9:BC:1E:15:55:22:97:50:B6:96:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/0cc4d87e-877b-3b1a-8323-b19a1c9c6a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:93:9c:0d:e7:ac:35:04:f1:33:89:38:a7:8b:2e:29:8c:e7:
         1e:81:25:06:e0:b2:a5:f2:0a:82:2c:b8:c4:51:8a:dd:09:73:
         ab:5a:d1:94:1c:7f:9f:c6:cc:f4:73:c5:df:45:eb:b1:57:31:
         4a:61:d8:06:ee:e1:13:66:8a:00:ce:bb:b6:2a:86:c6:ae:55:
         de:39:28:61:fd:24:ad:4c:1a:07:07:0e:7a:a2:aa:58:b0:c6:
         73:80:d2:1f:17:a7:90:ae:7e:90:38:85:d2:e5:13:4b:0b:37:
         24:88:2b:82:19:b5:d7:5f:ee:5d:bf:57:53:45:16:7f:2a:c8:
         99:61:70:51:03:14:9f:94:70:40:3e:ff:5e:25:98:bb:d5:16:
         44:a4:9d:8f:12:4c:9f:94:06:31:59:38:2a:65:03:1e:ec:d9:
         69:5e:46:3d:69:a9:78:bd:58:1e:49:2d:80:0f:9e:80:49:67:
         16:e8:77:a9:d3:88:04:3a:ac:e8:97:7b:75:e1:a2:bc:a6:25:
         32:83:7e:ab:17:56:e0:3f:68:3c:7d:74:4b:3d:fd:6e:66:48:
         75:30:6f:cf:59:da:18:e1:46:99:7c:02:e6:2d:f0:2d:87:9a:
         bd:74:ec:1d:d0:46:5d:78:24:7e:18:7d:6c:dc:c9:0a:5f:2b:
         e9:37:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:52 2026 by rpki-client