Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa
File:                     0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa (raw, json)
Hash identifier:          LFlEUTZIxpd45EA71l7z/olpgEgqVuVWlOGmS7e5NOI=
Subject key identifier:   2B:04:A9:64:BD:81:5F:74:76:3A:AB:4E:17:20:BF:3A:2D:8C:83:49
Certificate issuer:       /CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
Certificate serial:       010D0C9F4328584F4976C67E1DE57A49B4310580
Authority key identifier: 66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22439
IP address blocks:        64.56.64.0/24 maxlen: 24
                          64.56.65.0/24 maxlen: 24
                          64.56.66.0/24 maxlen: 24
                          64.56.67.0/24 maxlen: 24
                          64.56.68.0/24 maxlen: 24
                          64.56.69.0/24 maxlen: 24
                          64.56.70.0/24 maxlen: 24
                          64.56.71.0/24 maxlen: 24
                          64.56.72.0/24 maxlen: 24
                          64.56.73.0/24 maxlen: 24
                          64.56.74.0/24 maxlen: 24
                          64.56.75.0/24 maxlen: 24
                          64.56.76.0/24 maxlen: 24
                          64.56.77.0/24 maxlen: 24
                          64.56.78.0/24 maxlen: 24
                          64.56.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c6:7e:1d:e5:7a:49:b4:31:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=72248ecc-893d-49a3-9ea1-eec410fd08ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:3d:9f:d7:99:63:4f:ab:b4:6c:b9:28:68:
                    be:43:35:a8:af:28:04:40:a8:08:03:70:b8:70:a6:
                    15:c2:c1:12:c6:93:01:70:94:b2:27:b0:66:4d:d1:
                    5b:18:63:09:90:05:c7:4c:a1:52:3d:3f:94:fa:77:
                    08:58:74:3b:b4:3a:61:af:74:93:14:76:be:73:77:
                    24:b9:89:68:05:3f:e4:7c:18:bb:c3:d6:66:cf:de:
                    38:06:69:1c:f3:cb:36:27:53:7c:2d:33:a0:bb:70:
                    21:9f:7b:bf:07:4b:64:65:7e:24:d5:50:aa:c3:a6:
                    66:00:f3:14:4a:85:e2:ee:bd:2e:81:23:f0:fc:95:
                    36:59:6f:fd:3e:fb:f8:7a:87:16:29:ec:6c:5a:e1:
                    cf:c0:95:eb:71:0c:2b:cc:ea:e3:af:f2:77:22:3f:
                    6c:65:1f:24:f1:f8:b7:59:41:83:bd:83:f9:62:e1:
                    75:d9:1d:84:21:8e:81:7f:90:c9:7f:be:4d:81:fe:
                    2a:95:f9:db:57:f3:cc:47:18:08:5e:4b:59:7f:91:
                    67:97:eb:4e:d6:41:4a:27:e8:b9:0c:6f:df:59:2b:
                    c6:0f:f6:d7:ef:a9:12:47:3f:83:99:ee:a5:7f:c3:
                    9e:54:eb:3d:a7:81:ff:5a:3f:07:02:c6:37:ed:53:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:04:A9:64:BD:81:5F:74:76:3A:AB:4E:17:20:BF:3A:2D:8C:83:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/0f6768c8-7364-39d1-8785-f9cdbf1448f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl

            X509v3 Authority Key Identifier:
                keyid:66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:eb:b7:1f:17:8c:7f:72:c7:97:57:06:d9:ba:5e:ec:36:1f:
         6f:c9:2d:72:c3:f8:31:49:d3:8b:bb:4d:a2:13:7c:8c:a5:71:
         d2:aa:81:98:de:f4:81:a7:83:7c:37:11:25:7f:26:31:32:9c:
         ec:21:18:f2:88:f8:4e:2a:06:04:a1:36:6d:80:15:00:26:26:
         c1:9c:bf:7a:39:47:93:b2:b9:77:b4:19:10:3c:ba:36:9c:17:
         5b:03:0d:4f:d6:72:d5:d8:43:3d:e6:4d:7b:ae:ed:a1:9c:21:
         c9:bb:74:08:b4:4e:6c:24:f6:68:d8:a2:66:93:27:5a:f4:c3:
         8d:cc:83:19:11:3e:a4:a5:bd:42:00:7d:05:8a:d8:fb:0c:72:
         34:6e:8a:51:e2:93:24:5a:e8:12:61:f5:8e:bb:07:48:45:34:
         0b:84:3f:91:52:61:47:17:c6:9c:e6:d7:be:90:03:bc:0e:6f:
         68:53:49:44:ea:f0:a4:5b:b4:2e:cb:4d:87:bf:d1:12:b3:af:
         76:f1:88:35:1e:f5:2f:88:4d:e3:ed:1c:ca:02:77:6b:15:11:
         aa:3e:19:1b:6d:db:03:32:9d:c4:df:e2:41:fd:ff:bd:09:0c:
         a9:24:97:82:03:17:f3:26:5a:c1:75:0e:37:fa:ae:a8:ff:5e:
         52:2b:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:14:31 2026 by rpki-client