Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/834a07f8-afb3-34cb-84ef-3a68c12c2c29.roa
File:                     834a07f8-afb3-34cb-84ef-3a68c12c2c29.roa (raw, json)
Hash identifier:          XkTqedZ3B5R8FIMHHfWK4Qelw0SrKTVGq4qSLr+7glc=
Subject key identifier:   58:FE:EF:29:4D:4F:75:0D:E1:F6:FD:D2:19:A9:CE:87:29:C5:25:06
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DB62C6FC6F4BE86AC973DAAD0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/834a07f8-afb3-34cb-84ef-3a68c12c2c29.roa
Signing time:             Sun 03 May 2026 14:08:14 +0000
ROA not before:           Sun 03 May 2026 14:08:14 +0000
ROA not after:            Sat 01 Aug 2026 14:08:14 +0000
asID:                     834
IP address blocks:        64.204.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b6:2c:6f:c6:f4:be:86:ac:97:3d:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  3 14:08:14 2026 GMT
            Not After : Aug  1 14:08:14 2026 GMT
        Subject: CN=8c04fd87-7943-4486-8a69-563cbe0202d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:59:36:19:db:52:6c:c7:b5:9a:9b:aa:20:
                    79:fd:c2:3f:93:06:a6:fe:d9:85:fc:0c:a2:6b:cd:
                    d2:ab:0c:d1:b5:8a:ce:c3:e4:e9:b9:dc:33:ca:ff:
                    1b:34:86:63:b5:c2:74:6b:09:a6:5a:5e:29:07:6f:
                    a6:a2:3d:f5:14:ac:0d:50:0f:df:fa:9e:81:e8:a5:
                    4e:25:b4:cf:e9:9c:37:b9:80:74:40:40:57:f0:51:
                    75:b9:74:d9:3b:9f:4b:64:29:65:aa:9c:2f:31:8c:
                    82:10:b0:7a:45:05:66:65:e1:aa:00:11:6b:ce:38:
                    54:10:2c:3f:f5:25:f7:96:85:fe:af:e3:0c:c4:e7:
                    fb:8c:68:ab:88:65:a5:26:a7:df:81:4d:77:b8:fe:
                    4c:27:14:21:a1:a5:f4:46:b4:6b:b9:46:5f:f2:ed:
                    9c:ca:dc:e0:d3:81:19:ce:36:17:a4:d6:bf:cc:cc:
                    8a:38:41:e9:60:c5:01:38:75:5a:1c:18:aa:04:09:
                    4a:3f:9a:24:ce:5f:5c:d0:61:25:0f:93:a1:9e:6f:
                    ba:0d:b1:4a:ef:99:80:50:92:64:2e:77:82:19:ef:
                    42:ab:fa:1e:e9:59:ba:a8:97:d7:41:fb:4d:78:df:
                    5f:cd:85:80:bf:c1:d2:07:0b:30:f2:3c:de:90:cc:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FE:EF:29:4D:4F:75:0D:E1:F6:FD:D2:19:A9:CE:87:29:C5:25:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/834a07f8-afb3-34cb-84ef-3a68c12c2c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4c:52:7f:ec:42:e8:83:d6:15:fe:e8:43:c9:de:63:89:79:
         78:da:c4:06:d7:58:78:f8:ce:98:06:52:99:f8:a5:df:44:36:
         ad:17:1e:4b:b2:fb:4d:b7:63:fe:44:30:47:39:b7:93:53:49:
         ac:e6:b8:ac:64:a0:63:de:7a:c3:00:86:4c:e9:07:fe:2b:4b:
         8d:39:6f:2f:bf:6b:97:87:da:81:88:bb:1c:0b:31:e8:4b:95:
         b0:1d:15:e7:05:49:a2:8e:5d:ec:d5:82:30:c0:da:a3:b7:ea:
         1e:e0:86:25:b7:ff:70:53:13:ca:22:c1:eb:2d:e8:03:26:8b:
         07:bc:12:21:67:86:6f:7e:9c:d0:b1:e0:7f:83:b0:a3:1d:be:
         b5:3a:45:b4:46:98:75:b1:11:d4:ac:82:68:0b:45:a1:79:e4:
         17:17:dd:18:9f:37:46:c3:d0:55:48:3f:f8:e7:9e:5b:0c:63:
         f3:f6:be:cc:75:31:0d:50:3b:1c:8c:23:3e:41:7b:74:7a:eb:
         bb:d5:77:39:ff:da:0e:6b:6b:fb:5c:28:2e:3a:32:8c:bf:cd:
         a8:7a:eb:14:07:bf:61:05:d6:c9:3c:0e:2b:dc:33:62:31:1b:
         8d:3f:ab:a3:26:12:d8:32:ed:1c:ef:be:a9:65:d9:61:e3:1b:
         3e:f5:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:53:07 2026 by rpki-client