Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05e68fae-293c-3f19-bdd7-6c87751a8fb4.roa
File:                     05e68fae-293c-3f19-bdd7-6c87751a8fb4.roa (raw, json)
Hash identifier:          IKJ1V+23rchb+tbnddc//lg5xdJMhxb+7MumwtmhnoI=
Subject key identifier:   6C:BC:D0:B2:0F:F0:D0:E4:52:FC:1F:2C:29:62:5C:4A:6F:FE:4C:50
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F20F79DB665497F71A6C8AA60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05e68fae-293c-3f19-bdd7-6c87751a8fb4.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     20115
IP address blocks:        64.105.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:9d:b6:65:49:7f:71:a6:c8:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=48d256a8-b29c-4eda-822f-2485a0b68430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:8e:aa:65:a7:fe:ef:28:4b:e0:92:3c:3f:
                    28:83:b7:48:84:11:eb:54:d6:3c:7d:4c:a7:43:0e:
                    98:f5:16:08:97:d2:4c:86:a2:9b:7c:2a:a2:e6:9f:
                    74:2b:5e:87:69:55:1b:ab:aa:16:ef:f4:2c:dc:2c:
                    66:e7:72:48:ee:8d:6c:76:09:a6:fc:4b:25:0f:f3:
                    fd:b8:78:41:20:13:e1:77:52:1f:dd:46:34:08:99:
                    ef:f6:2a:f2:16:bb:b5:04:a1:02:56:92:d3:5a:38:
                    7e:14:18:d9:e8:9e:97:80:c6:d8:15:43:f2:4d:05:
                    d8:ee:33:04:2a:32:e4:8a:53:c8:60:62:c1:6b:04:
                    87:e6:f7:17:60:91:f0:56:e2:67:3a:c0:f5:6f:a2:
                    32:9d:89:7b:57:cf:d6:11:7e:63:de:14:34:af:2b:
                    f9:54:df:32:16:a2:18:b3:3c:b5:fc:b7:fe:c2:8d:
                    53:17:9d:a2:2b:65:a1:76:11:1d:40:28:5d:4b:1c:
                    79:74:d9:94:b5:a8:29:21:c0:1f:84:1a:ff:c5:39:
                    7a:a8:62:3a:66:c8:29:be:dc:f2:02:5d:6e:f9:ec:
                    29:e5:cd:44:92:77:1d:d7:50:a5:30:47:c5:92:2b:
                    e4:f3:a7:3e:60:c9:94:f2:af:7d:01:b3:1b:bb:b4:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:D0:B2:0F:F0:D0:E4:52:FC:1F:2C:29:62:5C:4A:6F:FE:4C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05e68fae-293c-3f19-bdd7-6c87751a8fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.105.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:36:ad:d6:84:f9:2b:de:83:3c:7a:91:1b:d2:e4:f1:ff:34:
         c5:4a:ca:3b:bb:2e:13:61:99:bd:f2:41:51:0a:6f:67:3e:ba:
         cf:84:c7:eb:2d:c0:9e:b2:9a:14:21:e8:23:d5:73:d1:34:39:
         20:8c:da:10:ba:ca:8c:11:a8:6d:58:5f:a6:69:23:7c:52:94:
         f6:a2:bb:c2:68:54:ca:4f:bc:98:3c:1d:d8:6e:b0:a4:7f:16:
         a2:fb:ac:a9:7b:d6:14:5a:a3:37:b5:6a:95:68:dd:37:89:d2:
         a2:ee:dc:6f:24:b8:c9:3a:a1:7b:48:5d:e1:26:94:ae:1c:1e:
         2b:71:d6:5e:eb:54:98:40:78:10:b9:05:61:4a:83:37:23:c8:
         2c:42:1d:3d:14:ef:5d:83:2f:cf:03:06:8c:ca:85:39:98:ad:
         77:fd:15:44:e1:45:3a:7f:87:be:41:26:ca:aa:93:83:de:ca:
         80:6b:e3:df:c9:91:d0:c1:ed:19:37:e0:6f:56:4d:71:7e:fa:
         0a:9e:bf:49:d3:ef:cb:7c:e0:23:83:8b:b7:31:a1:9e:06:e3:
         a2:89:a7:66:e5:80:7b:fd:5f:5f:5c:d5:e5:92:c2:3f:06:44:
         af:ae:a3:39:5d:6e:3b:6b:e5:76:2c:17:66:d1:23:8c:c7:61:
         a8:da:1d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:14:35 2026 by rpki-client