Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/22b39ec6-0cb2-3048-8f91-740b535c227e.roa
File:                     22b39ec6-0cb2-3048-8f91-740b535c227e.roa (raw, json)
Hash identifier:          aFeblmZi4n5WF06h3dOYgY5uJtOhByi9HOJxGgiVwdQ=
Subject key identifier:   21:B9:CB:37:8E:4F:2F:7F:CB:E8:EE:0E:9A:C5:9A:4D:FE:ED:89:EB
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584F480D32594AB845D50692EAC0
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/22b39ec6-0cb2-3048-8f91-740b535c227e.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     27176
IP address blocks:        64.44.97.0/24 maxlen: 24
                          64.44.98.0/24 maxlen: 24
                          64.44.101.0/24 maxlen: 24
                          64.44.141.0/24 maxlen: 24
                          64.44.142.0/24 maxlen: 24
                          172.93.131.0/24 maxlen: 24
                          172.93.190.0/24 maxlen: 24
                          172.93.191.0/24 maxlen: 24
                          172.93.193.0/24 maxlen: 24
                          172.93.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:32:59:4a:b8:45:d5:06:92:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=30790da0-dd6a-46c3-a030-bb1083ddcdf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:09:06:1d:98:9a:dd:2b:92:de:a7:c5:3e:
                    42:6f:7f:7d:47:29:23:b5:92:85:73:02:19:37:98:
                    df:e0:b3:cb:5c:2e:82:19:39:65:57:03:34:fd:4f:
                    f0:73:f4:eb:79:e6:de:2c:be:bd:25:17:5b:99:a9:
                    a1:be:9c:72:b3:1c:cb:e0:48:49:82:f7:76:e2:41:
                    65:ed:68:ac:72:7a:4f:bd:3e:6a:81:50:f1:bb:03:
                    4a:1c:8d:5c:be:f2:d6:52:f2:78:cd:14:e7:80:04:
                    9a:31:22:2b:dd:8d:2a:57:46:6f:2c:73:cf:7e:d6:
                    e4:76:c9:d1:97:2f:f1:4e:90:76:45:9c:26:c1:ce:
                    25:b8:10:70:0b:cf:89:e4:e6:6b:c9:ba:d7:a6:46:
                    f6:2c:9c:5c:6a:ce:75:08:a4:11:58:a1:ba:fc:8c:
                    81:c5:95:d3:ad:d7:d6:85:30:c6:88:7b:6d:4c:e8:
                    eb:af:68:24:b2:dd:5d:97:8e:b1:34:8c:d3:19:3a:
                    d9:19:d5:06:69:99:11:84:e8:25:c3:53:b6:90:e1:
                    6d:aa:38:6b:81:fa:e3:bb:96:78:e8:e0:e6:2d:3f:
                    e8:42:21:21:ad:57:59:22:3c:eb:c7:d4:7d:97:38:
                    32:4a:17:96:2d:cb:de:6f:d3:92:bc:c5:97:53:18:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B9:CB:37:8E:4F:2F:7F:CB:E8:EE:0E:9A:C5:9A:4D:FE:ED:89:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/22b39ec6-0cb2-3048-8f91-740b535c227e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.44.97.0-64.44.98.255
                  64.44.101.0/24
                  64.44.141.0-64.44.142.255
                  172.93.131.0/24
                  172.93.190.0/23
                  172.93.193.0/24
                  172.93.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ca:49:b9:5d:4c:30:7b:2d:9a:05:8e:ac:bc:97:19:54:e7:
         e6:81:20:5c:16:11:90:a7:7a:5a:bb:ad:e8:ad:65:99:42:c4:
         90:39:a7:03:a5:5e:c3:24:5b:28:78:41:8f:75:98:d0:78:76:
         21:68:51:df:3a:31:73:7c:51:c4:6f:37:c4:60:b3:8a:20:8a:
         85:bc:01:6b:c9:21:ff:95:87:1f:1c:85:92:a4:d6:36:04:7e:
         f5:bc:e0:f3:40:82:c2:30:72:b0:19:46:80:b5:c6:14:a2:c2:
         ce:4e:a0:71:59:19:1f:d9:5f:10:b3:15:36:a0:66:40:4d:65:
         ca:fa:9f:ce:c6:eb:a9:7d:d0:f3:de:1a:2c:c3:e3:99:05:a8:
         d9:3c:a1:d2:8f:fa:e5:74:ed:8a:89:1b:fd:52:50:89:95:24:
         fb:d7:30:3f:3c:5b:5c:cb:e3:52:6a:6d:4e:28:02:15:78:36:
         c1:78:28:35:33:4a:44:c4:52:09:78:2e:8f:de:dc:76:6a:24:
         92:69:38:ec:28:0f:06:d5:85:5b:0e:c4:81:5a:3a:58:3b:8b:
         4d:b2:14:a5:02:52:ae:08:36:c6:0f:a0:56:82:11:6f:4a:fc:
         17:b8:6d:3f:02:ee:22:56:13:b0:14:02:01:3b:db:47:a5:75:
         64:fb:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:51:06 2026 by rpki-client