Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2efd78bb-6809-3975-a5f5-59701d190d3c.roa
File:                     2efd78bb-6809-3975-a5f5-59701d190d3c.roa (raw, json)
Hash identifier:          qrHGouSooQCsWouwsRnmaTeQrWzfYuBlnvkuU4YfXfc=
Subject key identifier:   E4:C3:71:5A:49:0B:7C:C3:44:AD:EE:EC:D4:30:E1:61:97:1D:20:CC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E98A1BB8104DC90F96AFE8700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2efd78bb-6809-3975-a5f5-59701d190d3c.roa
Signing time:             Thu 23 Jul 2026 16:57:15 +0000
ROA not before:           Thu 23 Jul 2026 16:57:15 +0000
ROA not after:            Wed 21 Oct 2026 16:57:15 +0000
asID:                     6079
IP address blocks:        64.204.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:a1:bb:81:04:dc:90:f9:6a:fe:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 23 16:57:15 2026 GMT
            Not After : Oct 21 16:57:15 2026 GMT
        Subject: CN=e06cbba2-b5cb-48aa-bf0b-7b2039364c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:a1:8f:d0:d5:a2:a5:2a:a8:4a:c4:cf:90:
                    f0:c7:e0:ad:ec:7c:76:d4:9c:30:c6:ed:cd:f9:5e:
                    bb:d3:ed:cf:2a:e5:5b:19:9b:b1:5d:ac:af:58:d8:
                    c9:b7:97:62:55:db:4c:04:9a:5d:d1:6a:5d:33:7a:
                    c0:17:37:a3:53:d9:38:f1:3c:70:7f:03:7b:6c:e8:
                    24:08:5f:44:bd:84:2b:31:d4:32:75:cf:7c:f3:20:
                    a0:f9:ac:3f:d1:37:e6:cb:a6:02:03:ff:31:c8:86:
                    1b:b7:5b:bd:d6:f8:db:59:65:4f:ab:d8:50:cc:b4:
                    7b:c7:93:6a:15:43:ea:a1:e5:35:db:de:4b:14:5b:
                    d7:f9:2e:ae:fe:8e:59:87:9c:9d:ec:30:7e:30:0a:
                    9e:1c:3b:33:f8:19:79:b6:90:bf:a0:d7:55:5a:8d:
                    40:0f:f0:e8:71:ac:56:85:1b:c6:b7:d6:8c:2e:b6:
                    01:f4:5f:96:b7:c4:b0:df:40:92:e6:56:22:fc:96:
                    bd:65:a8:3c:48:7c:a0:93:ce:03:0b:3d:bd:2d:d0:
                    b0:35:57:6a:8c:95:8b:91:ad:00:9d:46:e5:6d:c9:
                    dc:b1:71:ec:1d:e3:a5:8d:5d:3d:21:5c:99:51:88:
                    20:d1:6e:01:fe:d0:fa:44:40:59:71:07:3b:24:27:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C3:71:5A:49:0B:7C:C3:44:AD:EE:EC:D4:30:E1:61:97:1D:20:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2efd78bb-6809-3975-a5f5-59701d190d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:b2:98:3f:95:fa:0d:8f:f4:2e:96:2e:d3:6f:93:f7:aa:
         d6:59:06:73:8d:08:b2:3c:99:2c:a9:b4:43:5a:5b:97:f2:e4:
         2a:b9:0b:e3:3c:98:05:49:af:28:f1:0b:47:52:27:89:8b:63:
         43:0e:50:15:af:8c:94:4e:66:f1:99:51:a5:93:c6:70:48:ef:
         56:47:d5:4d:81:dc:22:71:69:d3:c1:7c:60:12:c0:1d:49:a2:
         06:6b:39:cd:45:97:fc:f1:3e:bf:fa:85:d0:43:a8:ec:75:aa:
         3b:c2:ea:f1:64:d4:a3:cf:52:61:de:6f:79:cf:51:2b:b3:48:
         6a:f4:ff:14:b5:76:68:4b:34:91:ec:ca:56:00:fb:39:8d:10:
         2a:44:56:eb:a0:9e:f2:04:bd:88:c5:5a:aa:a4:e9:97:58:01:
         a8:4a:d8:51:96:ec:81:56:7e:07:3b:01:61:90:0c:25:5e:5c:
         e1:18:b7:b9:28:04:91:ed:da:c9:29:55:96:99:e5:31:f6:42:
         da:07:79:d3:a3:1a:ef:de:ca:04:98:b9:2d:22:24:f7:fa:1f:
         c4:68:e5:2c:43:3d:b4:65:44:bd:3e:f7:10:6b:2f:93:02:83:
         67:a2:e6:f0:e8:6a:7b:f0:76:75:79:71:2c:25:d2:2b:26:9f:
         99:7d:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:07 2026 by rpki-client