Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa
File:                     2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa (raw, json)
Hash identifier:          tnY5pO0g5SHUJlIKXV3CH4lNBDW+IvgkYOGkKQ+10tM=
Subject key identifier:   74:5C:27:6C:F2:8A:7C:70:F0:62:EB:08:E0:DD:C7:65:7C:35:52:A5
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D4A8FAFB4270CC0A4A0E79C90
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     398391
IP address blocks:        64.226.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:af:b4:27:0c:c0:a4:a0:e7:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=03c9ebb4-24f0-4b47-abdb-7a925acb0bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:d3:5a:ff:11:4c:e7:b9:b1:96:a6:03:f0:
                    85:28:87:3d:d4:f4:83:cd:16:72:35:4a:bc:cd:f9:
                    6c:ba:4b:d7:eb:91:f9:99:37:80:bc:2a:4f:2e:30:
                    b0:ee:3d:61:31:be:0a:f4:d0:ed:7a:00:45:1f:c6:
                    6e:bc:3f:05:79:bc:14:6a:b9:2f:33:8d:cb:8c:99:
                    c5:da:fa:bb:7a:33:1b:10:c6:cc:c5:15:3b:6e:71:
                    b8:51:01:38:20:39:59:c0:89:8f:e5:a8:53:2d:71:
                    df:92:0b:2a:f2:d6:95:9d:e7:63:90:7f:ff:9b:ce:
                    e2:6e:84:60:40:7f:41:30:02:f4:a9:30:98:7a:29:
                    0f:97:72:ee:7b:50:b6:2c:a8:d8:2c:7a:0a:5d:7b:
                    a0:36:97:9e:c4:4c:b3:8f:e6:74:f1:03:64:6e:3c:
                    95:79:50:bf:7f:44:0b:de:49:46:dc:af:0d:14:d5:
                    c3:9e:8b:9d:55:e8:32:60:d1:1e:be:9c:3e:3c:7d:
                    1d:26:b8:92:25:10:e3:c5:d2:f7:f0:2a:4a:4f:6f:
                    c7:2f:d3:31:64:70:80:48:ca:40:4e:b8:69:bc:3f:
                    dc:9b:c1:21:57:05:04:2b:c2:ad:a3:c8:fe:0f:b2:
                    46:74:71:b5:47:7f:eb:85:63:4f:7a:68:82:39:93:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5C:27:6C:F2:8A:7C:70:F0:62:EB:08:E0:DD:C7:65:7C:35:52:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/2e6de5fb-ee74-3bf2-a31f-5e449e7bfdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:4a:71:70:63:9f:a8:35:46:70:dc:f7:6a:a1:4f:d3:e1:
         b1:4a:6e:99:6a:75:3e:72:53:cb:34:4b:fd:a9:78:43:06:68:
         75:bf:c7:7c:61:00:98:13:ae:9f:96:39:89:fb:83:d1:3f:ec:
         c8:1f:5b:83:db:93:4b:5b:a4:46:89:dc:a2:b8:a9:03:3f:bd:
         8a:b3:c0:4a:d9:4f:7f:ab:0f:07:80:29:51:17:7e:c3:48:c5:
         0a:74:62:5a:b3:71:0c:f9:96:d5:71:63:f7:1b:f6:f7:d1:95:
         83:2a:6c:e2:15:73:ae:cf:fc:d0:4a:dc:ed:64:9d:38:42:dd:
         76:c6:6b:62:08:8d:16:46:2d:3b:98:d3:de:d6:9e:c0:24:56:
         68:76:f9:78:88:b7:ec:20:c2:07:97:06:d6:b6:95:8c:74:e7:
         42:79:aa:bf:b2:ea:38:1d:5f:93:04:fa:19:86:d1:94:f6:01:
         47:a6:66:92:8e:5f:a7:f2:41:e7:ee:6c:2f:ea:a0:cc:3d:8c:
         ae:4b:66:24:55:e6:f2:23:6c:52:9b:a5:c7:32:54:f0:56:88:
         e2:75:6b:d6:37:31:05:83:4a:d0:48:a2:92:db:6c:b6:5e:de:
         a9:6c:5e:09:21:38:fe:27:5a:99:b2:3f:a4:1a:09:2f:cc:10:
         33:b3:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:29 2026 by rpki-client