Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/4df220df-13fd-3141-bfe4-bbe536c81ec9.roa
File:                     4df220df-13fd-3141-bfe4-bbe536c81ec9.roa (raw, json)
Hash identifier:          e4MapJdrfBwNKJf7coGW7jom1Dtlv+9lKdVe1BdesEk=
Subject key identifier:   A0:0A:7C:48:A0:45:AE:08:75:72:B8:9D:39:7A:05:1B:FC:D0:E7:0F
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584E921FA50067DD4C1CD9579F40
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/4df220df-13fd-3141-bfe4-bbe536c81ec9.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     22079
IP address blocks:        64.136.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a5:00:67:dd:4c:1c:d9:57:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=153f38d1-69d5-42af-af61-a5538eb4cb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:32:b8:40:0d:58:10:13:b8:b9:c4:e3:cf:6b:
                    01:e3:1b:54:bd:77:1c:38:a6:02:de:d2:cb:3d:d1:
                    02:82:2b:92:5c:af:0a:59:3d:94:71:e7:3e:0d:9b:
                    7d:96:5c:61:6d:b3:cc:8f:f6:16:e3:9c:20:74:cf:
                    f0:6e:fe:79:d9:a0:d4:f1:19:86:48:7e:af:be:e3:
                    55:12:13:4e:d4:51:c0:1d:22:30:ee:1c:06:7e:dc:
                    cf:1a:42:dc:4d:79:79:29:78:d3:eb:1d:5a:16:a2:
                    af:4c:e4:7c:4d:22:fc:73:49:41:06:eb:d6:8d:41:
                    4f:ea:33:a9:6c:92:2f:08:9e:e5:f2:5c:3c:c5:6a:
                    14:2d:23:a3:22:8d:da:28:60:84:f8:7d:7f:ee:5b:
                    aa:80:ff:16:da:84:1d:49:e2:44:fd:ee:b4:c5:05:
                    27:a8:c0:fb:f1:c0:b5:30:eb:74:d5:58:16:9d:5e:
                    84:dd:81:21:5c:32:07:1d:19:b0:0c:8f:b4:08:76:
                    03:a3:f6:9a:a1:a7:8d:48:9e:d6:eb:f7:17:af:af:
                    cc:e2:05:08:93:62:78:0f:1f:43:4e:3e:1f:57:52:
                    4c:6c:ab:e2:fa:00:c3:a0:f2:23:2d:8f:9b:16:ff:
                    73:94:30:1b:a0:ce:f6:0f:ec:31:d7:64:bb:fd:63:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0A:7C:48:A0:45:AE:08:75:72:B8:9D:39:7A:05:1B:FC:D0:E7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/4df220df-13fd-3141-bfe4-bbe536c81ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:10:83:47:7e:c4:63:e6:eb:ad:8a:60:9a:e8:1b:1e:d9:0e:
         00:9a:f7:3b:51:8b:f6:cb:9d:9d:85:87:bb:0b:b5:be:c5:c8:
         06:bc:43:ec:39:73:10:8e:e1:89:35:3d:85:ae:50:6a:07:fe:
         e8:a0:58:88:ca:c8:8c:9f:56:cb:a8:b5:02:de:ab:91:a6:cf:
         04:5b:d0:60:99:2d:c6:6b:2e:0f:94:a6:00:23:fd:de:5e:a5:
         53:66:c6:49:66:00:5e:67:cf:fe:1f:73:c4:ab:d4:f4:ec:16:
         47:d8:71:a5:f2:eb:ed:3f:66:43:0e:a9:4c:20:14:9e:2c:cf:
         ea:d2:c4:17:e9:e1:61:23:8a:f9:9b:53:fd:26:32:04:67:26:
         75:5b:c5:7e:74:99:22:c7:2c:77:6d:1b:f0:69:ae:c0:28:33:
         ec:be:f9:d2:c5:10:f3:4b:47:cf:41:6a:cf:0d:5e:e1:d4:57:
         88:5d:52:3b:69:43:54:a3:e2:76:5b:b8:17:83:42:bb:2d:29:
         db:b1:5d:e2:78:8d:dd:9a:4c:47:b1:fc:02:94:67:f9:87:0d:
         fa:8b:57:59:ee:b2:9f:47:a6:0d:ba:84:89:60:04:82:86:ea:
         87:b1:18:21:e4:dc:9c:3a:66:be:dd:9a:37:54:53:54:37:20:
         e4:4e:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:51 2026 by rpki-client