Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7767ba9b-298e-3639-aca3-0b6d8b12d9db.roa
File:                     7767ba9b-298e-3639-aca3-0b6d8b12d9db.roa (raw, json)
Hash identifier:          1uFDaFjDemEZLZvAkuRcKX5niocnWbp+h1eeUVAsZUM=
Subject key identifier:   7C:DF:E2:43:31:C9:47:3C:68:6C:07:05:F5:01:09:67:64:A7:7C:72
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DB0AE5A1209C1678C12F06D80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7767ba9b-298e-3639-aca3-0b6d8b12d9db.roa
Signing time:             Fri 01 May 2026 14:55:08 +0000
ROA not before:           Fri 01 May 2026 14:55:08 +0000
ROA not after:            Thu 30 Jul 2026 14:55:08 +0000
asID:                     834
IP address blocks:        64.204.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:ae:5a:12:09:c1:67:8c:12:f0:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  1 14:55:08 2026 GMT
            Not After : Jul 30 14:55:08 2026 GMT
        Subject: CN=a0e1cdc8-12c3-4f5a-abab-53e551962fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:40:ed:b0:84:9b:fa:90:42:92:47:97:50:
                    8b:21:09:2a:e1:bc:3c:99:c6:61:27:01:7d:31:52:
                    14:64:6b:88:95:60:d0:36:16:ae:5d:4f:73:a4:b3:
                    16:dc:5e:5a:70:57:71:f4:0a:4f:19:ec:25:76:ad:
                    3e:96:a0:7a:bf:ca:71:45:09:99:98:0d:e2:80:9c:
                    b9:0e:51:f6:d1:f7:0e:d8:b0:97:34:28:c8:01:1d:
                    da:90:36:ae:2d:f3:c6:8b:6d:2b:02:84:8f:fe:6c:
                    2f:2b:e7:be:4e:6b:08:c9:36:a1:7c:53:75:29:fd:
                    c3:30:f3:fd:e2:3d:8d:e9:6c:91:69:f5:87:54:70:
                    fb:90:02:79:90:c5:b6:21:e0:a0:48:9b:f2:6b:37:
                    98:70:d1:26:2b:bd:51:af:1b:66:76:4f:7d:3f:e3:
                    b4:7e:72:33:13:bf:b1:9b:58:9d:ce:f1:50:bf:a0:
                    09:b3:d2:d0:09:95:00:ce:40:80:08:eb:2d:fb:25:
                    d9:09:2f:28:c5:d5:fd:3b:8c:bf:69:76:d8:51:ea:
                    4a:57:db:4c:5a:50:c3:e3:18:e9:89:a0:76:17:2e:
                    61:2b:6f:3f:48:1e:c0:24:a1:1f:26:a5:67:84:7d:
                    24:4a:4b:f7:d3:43:02:eb:4b:7e:86:0a:fb:27:3a:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:E2:43:31:C9:47:3C:68:6C:07:05:F5:01:09:67:64:A7:7C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7767ba9b-298e-3639-aca3-0b6d8b12d9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:de:cf:dd:dc:d9:8e:01:58:19:b5:40:61:36:2f:2f:d4:70:
         28:8a:5e:b4:9e:ff:d6:d2:ff:d4:4f:c0:6a:26:0b:7e:c9:ec:
         78:02:91:f4:3c:79:ad:fc:87:0b:93:bd:af:41:ae:b1:95:71:
         35:a8:45:c8:a9:40:4c:8e:61:16:30:4a:55:75:e2:bf:b3:22:
         64:75:69:d4:4a:6f:5e:d5:5b:28:8c:21:5b:31:2e:a5:c8:e7:
         92:d3:28:a9:fb:90:ea:5a:5b:b3:bc:92:04:06:a5:df:89:bc:
         58:e4:59:58:90:53:5d:b6:1d:89:70:1c:71:2f:67:ef:df:6a:
         8f:6c:51:e5:56:0f:d5:2c:01:48:4a:be:43:aa:34:2b:74:74:
         a0:28:94:3c:59:14:b1:7e:44:b3:c5:9b:0c:03:84:86:8c:d5:
         4a:d0:d2:d8:f5:24:64:d6:92:51:92:52:cd:96:95:26:46:3b:
         16:8d:bb:cf:95:ac:86:76:85:a7:43:f7:d6:7b:14:27:35:f2:
         51:b4:a3:29:e8:65:c1:6b:d8:75:27:4f:41:d2:23:78:9c:98:
         0f:f7:71:26:77:f2:4a:9b:81:f4:71:78:85:c0:94:36:d8:de:
         c3:45:cd:e1:49:93:c4:58:0a:18:38:45:1c:65:5c:f6:16:6a:
         a7:92:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:52:58 2026 by rpki-client