Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa
File:                     76185e0a-7b1b-3748-987b-469b3e03e06a.roa (raw, json)
Hash identifier:          RtBD9kH8m0swRiTkuH/NAyMGZiwFrFuHbIElB+yx7ss=
Subject key identifier:   1E:CF:0A:51:18:CA:13:42:AF:A9:4D:79:5F:78:D9:53:98:4B:4A:14
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D0912575F476A575A841616C0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     398391
IP address blocks:        64.226.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:57:5f:47:6a:57:5a:84:16:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=4145579d-f544-40cd-ae42-7498cb868ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:78:8d:11:4c:c5:41:d0:fc:4f:13:d8:4f:
                    dc:12:2d:77:5e:ad:fb:2b:fa:35:59:81:8d:53:c8:
                    00:db:53:0f:13:7a:2b:3e:5f:2d:7d:a2:28:8d:05:
                    a5:58:62:52:34:a7:52:44:8d:6f:4e:88:b9:08:a0:
                    d0:8f:fc:3a:d0:b7:16:da:e8:97:3a:c0:77:5e:64:
                    cf:3f:52:63:2d:cb:d5:2e:f6:da:73:5d:04:70:6c:
                    cf:b5:62:40:62:9e:b3:73:3b:bf:72:a9:66:76:f3:
                    ec:e0:16:88:84:89:76:7d:64:c9:08:e4:65:e0:84:
                    37:8c:60:13:ff:24:7d:0d:99:72:93:ac:4b:bd:a6:
                    14:f7:3f:91:10:66:1c:76:a0:e8:56:9d:07:cb:73:
                    c6:4d:ee:fd:90:85:ab:2a:26:ae:68:b1:c7:d9:5b:
                    01:fa:9c:2f:88:31:d7:20:58:19:d6:30:1f:57:27:
                    b2:4b:41:db:37:99:78:7f:88:0f:a7:6b:bd:ab:29:
                    63:ef:94:ec:0b:56:b5:a5:e4:c2:28:ba:4b:b1:e6:
                    34:6e:e4:c2:be:56:56:d3:02:42:07:d3:59:6e:c7:
                    6a:f4:97:33:8b:2b:07:7b:4d:87:2a:d1:2a:ff:67:
                    a8:09:7e:b7:bd:5b:9b:2e:81:fe:bf:ac:24:0b:88:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CF:0A:51:18:CA:13:42:AF:A9:4D:79:5F:78:D9:53:98:4B:4A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/76185e0a-7b1b-3748-987b-469b3e03e06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b5:f0:5f:1f:27:fc:7f:62:95:0a:68:64:58:03:e0:17:6f:
         52:c4:11:11:c9:a9:cc:02:87:75:65:8e:a1:79:ab:8b:20:ba:
         9e:de:e7:f8:42:8f:45:8a:1f:51:31:9a:87:8b:d5:21:d6:85:
         0d:f3:b7:57:c8:83:91:67:6e:87:9d:78:41:93:fc:93:a3:8f:
         39:2f:3d:78:4b:c4:9f:d2:11:ae:38:5f:35:76:2c:85:7b:61:
         24:38:32:de:bf:7b:c8:7d:37:8c:c4:3d:ac:92:83:94:ab:cb:
         7d:93:e1:27:41:1c:a1:1a:b4:38:da:b8:2c:08:b3:2d:6b:79:
         90:3a:e2:76:0f:6e:3a:a0:08:f1:50:69:37:61:85:86:1b:42:
         95:47:0e:40:ef:71:49:a2:a8:ae:3e:90:30:44:2c:dc:b4:02:
         71:37:bc:5f:f2:e2:09:6d:08:78:80:00:09:47:da:f1:49:53:
         12:32:c0:54:25:3c:c0:c6:e7:0e:b0:62:57:ac:3f:dd:2f:41:
         db:02:d3:c0:45:38:dc:cd:1d:0b:b8:49:d8:31:83:f1:07:6d:
         b3:f4:33:3a:de:dd:f3:b0:c5:8b:08:76:dc:5e:ea:48:a4:da:
         9b:6e:1c:50:39:ac:2d:55:a9:59:c5:95:89:3b:0a:d9:8c:90:
         34:d4:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:37:44 2026 by rpki-client