Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/19411646-738f-3820-adc3-e89d989240e5.roa
File:                     19411646-738f-3820-adc3-e89d989240e5.roa (raw, json)
Hash identifier:          hXfZn1GEZXVMlUbycF5aXIi1iVkM44D67JZxxlqBFYc=
Subject key identifier:   96:BD:00:80:3B:F3:42:13:91:70:86:92:56:5E:33:A7:1C:1C:6B:76
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D98BA9ED1AE9B6F18DF0A8780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/19411646-738f-3820-adc3-e89d989240e5.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     3257
IP address blocks:        64.50.128.0/21 maxlen: 24
                          66.17.64.0/21 maxlen: 24
                          216.254.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:9e:d1:ae:9b:6f:18:df:0a:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=cfc75bda-45be-480a-8d9d-ebddf513e4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:70:bc:8e:e0:c3:ab:7a:46:b3:64:33:88:
                    c9:4c:a0:2d:77:4f:45:18:b2:65:33:c0:a8:d0:49:
                    ea:23:66:ed:3e:c1:39:ab:71:2f:79:f9:09:9a:27:
                    ff:c4:8b:32:f7:47:e3:7b:ca:23:16:cb:d6:9b:a8:
                    1a:0a:e8:e6:bd:23:b5:d2:cf:3b:1a:e5:00:06:b4:
                    3a:f8:85:76:7e:11:8f:9f:9e:77:db:99:c3:c4:0e:
                    7c:62:48:16:5b:35:e6:27:d2:c9:17:89:fd:e3:48:
                    d2:04:fb:f4:65:24:2b:ce:47:85:b2:c8:95:d5:31:
                    80:16:21:84:76:88:a5:66:5a:15:03:2b:b3:0c:54:
                    02:f0:73:a4:29:78:34:9f:98:b8:55:5c:52:d6:3a:
                    86:e3:21:bc:fd:62:bb:08:a0:f9:73:82:f4:d7:86:
                    74:1f:1f:41:a7:76:2e:84:67:3b:ec:81:18:9a:9c:
                    5e:7f:ad:b1:cc:1a:18:75:8e:56:9e:f3:8d:d3:bd:
                    cb:62:39:9d:24:ab:3e:70:fa:08:a2:bc:31:0e:7d:
                    79:ac:b3:98:ad:49:1e:42:3d:f2:4c:bb:01:c5:b5:
                    f7:2d:ba:01:77:b4:b5:3f:59:9b:45:93:9d:67:c8:
                    6a:9e:7a:d2:22:4d:ef:47:62:8c:a5:18:ee:6c:4a:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BD:00:80:3B:F3:42:13:91:70:86:92:56:5E:33:A7:1C:1C:6B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/19411646-738f-3820-adc3-e89d989240e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.128.0/21
                  66.17.64.0/21
                  216.254.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ef:a3:1f:32:81:3a:87:37:b4:70:df:5f:81:a9:55:26:53:
         1a:a5:07:a0:8d:fe:7d:5a:10:6d:b5:45:8e:90:eb:69:d6:1b:
         cd:fc:af:32:22:2d:a2:66:80:68:28:ad:12:b6:3d:01:f1:a4:
         88:ce:3f:d2:43:e9:97:ae:b3:db:21:38:ba:c0:d6:33:f8:db:
         28:13:ef:04:0a:bf:13:ff:48:72:a1:73:b9:48:8c:25:46:d3:
         1e:b4:e4:ab:5f:93:15:38:c9:2d:9c:2e:2b:f0:82:10:38:25:
         42:7d:8b:e0:e5:1b:11:b5:0f:74:76:ce:30:6b:f8:b9:61:b6:
         69:72:49:99:43:dc:f5:05:83:1f:ea:ef:58:d7:6e:17:84:9d:
         51:49:a1:27:4a:59:f9:da:94:22:7b:81:73:d9:e6:3f:98:f6:
         58:bb:01:cc:91:06:9e:3d:46:ca:61:6c:23:fb:53:0e:dc:24:
         66:3f:38:56:ff:9c:ce:a5:e1:f4:34:49:a9:68:54:5d:72:39:
         b9:5d:c3:a6:24:d5:fa:51:31:45:2b:a5:42:2c:f2:45:de:2b:
         39:81:64:14:91:1f:43:ba:7f:fd:9f:f2:d1:42:c1:d2:29:4c:
         0d:00:5e:4e:cf:dc:66:d9:e3:af:bb:28:cd:74:30:42:ea:99:
         fe:9b:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:58 2026 by rpki-client