Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e166fa38-c361-3b5c-b4ad-b2527c6ad1b7.roa
File:                     e166fa38-c361-3b5c-b4ad-b2527c6ad1b7.roa (raw, json)
Hash identifier:          vIPZkSmhAh2pJY9tZXqsIIP0cA0cS0sESgQ5gYs6AOc=
Subject key identifier:   32:03:0F:9D:A3:0E:1A:21:29:0F:13:0A:2C:96:A7:DA:0F:6E:D1:EB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DC08068832A8158D2FE4DFBB8
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e166fa38-c361-3b5c-b4ad-b2527c6ad1b7.roa
Signing time:             Thu 07 May 2026 06:55:30 +0000
ROA not before:           Thu 07 May 2026 06:55:30 +0000
ROA not after:            Wed 05 Aug 2026 06:55:30 +0000
asID:                     834
IP address blocks:        64.204.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c0:80:68:83:2a:81:58:d2:fe:4d:fb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 06:55:30 2026 GMT
            Not After : Aug  5 06:55:30 2026 GMT
        Subject: CN=7a89a016-2dea-4293-bb8e-06b6bbbd8f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:4d:d6:e3:29:7d:82:68:02:ad:2b:2f:ac:
                    78:39:94:5c:94:3f:42:0f:08:32:65:39:f7:8c:2d:
                    86:d9:c4:79:db:d7:ff:3a:62:69:7c:b8:15:4a:54:
                    54:b8:4f:bf:04:6d:c8:ef:0c:17:30:2f:51:b9:79:
                    f9:24:b7:a2:92:4d:cd:79:59:ae:4d:bf:e0:a5:0f:
                    93:68:12:d6:f1:95:1d:e2:e5:59:8f:dd:e9:ea:fa:
                    8b:23:74:65:5c:32:af:aa:fd:ab:20:7c:f1:5b:98:
                    ad:89:f6:eb:9a:6a:65:60:a7:7e:e6:09:23:e7:8a:
                    81:4a:e3:4a:7f:8c:0b:2d:c2:d9:35:85:6a:85:99:
                    ed:aa:77:b1:fe:8e:71:b7:16:ff:12:4a:c3:98:3a:
                    d9:cf:fd:ae:ec:2d:d5:25:56:48:e7:12:87:ba:dd:
                    7d:b1:ef:7c:1e:32:63:54:49:78:a1:9c:1e:8c:65:
                    99:e1:35:e6:34:3f:09:dc:fb:31:75:76:ce:52:41:
                    5c:b0:c1:2b:4f:8c:2b:21:aa:01:5e:0d:cf:f6:f1:
                    2e:13:4d:54:8d:4a:4e:36:f4:9c:e3:ce:81:c8:90:
                    bd:33:b0:fc:ab:3e:66:75:cf:62:36:c9:4e:29:a1:
                    21:84:d0:30:63:07:dc:81:85:9e:8a:b6:3a:8f:2e:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:0F:9D:A3:0E:1A:21:29:0F:13:0A:2C:96:A7:DA:0F:6E:D1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e166fa38-c361-3b5c-b4ad-b2527c6ad1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:de:bf:d8:ab:f0:92:10:e8:d3:35:b1:c0:95:7f:e0:c4:4f:
         57:d4:41:9b:68:99:d1:62:73:58:a9:6a:2e:c5:8e:7b:29:7d:
         8f:c8:a7:9f:25:39:06:5c:7f:60:f5:51:94:37:81:22:5d:cc:
         d6:1e:ee:41:08:29:a5:e6:45:44:e4:69:2a:63:ef:c2:b5:80:
         73:33:0d:29:c6:65:eb:d9:38:b2:8f:54:ab:89:ea:9b:cb:d4:
         78:77:10:76:6b:9b:cd:32:ea:05:e6:af:75:e0:84:ac:f6:a7:
         87:c5:20:a2:2f:46:12:db:83:d2:38:e6:2e:b4:c1:ed:fb:fb:
         7a:d8:f9:15:e8:02:9a:a2:a9:ff:ea:cb:b9:ce:fa:d1:5b:45:
         3e:8d:af:4a:44:ed:2a:71:35:79:de:8f:3c:cd:91:88:a4:f1:
         c1:8e:fa:f2:78:b5:a0:64:39:76:d2:7f:33:b2:16:09:dd:74:
         17:bf:23:79:de:17:2c:a1:36:86:96:7b:58:e1:46:fd:53:ed:
         2d:74:1a:28:dc:3c:01:c2:7d:46:4c:8c:16:3b:f7:ba:e0:45:
         17:fe:11:f3:3f:03:7e:50:fd:43:7b:40:e5:82:5f:c7:07:fe:
         25:a2:69:f3:0d:10:b6:2f:72:53:7b:44:2f:ae:dc:09:eb:f0:
         42:44:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:33:56 2026 by rpki-client