Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/5815aceb-897c-3337-bfa8-f646fc70f495.roa
File:                     5815aceb-897c-3337-bfa8-f646fc70f495.roa (raw, json)
Hash identifier:          ocCYW7TWuzDaWV2JHExDiiZJsaBWI0yI/wIjDllnKZQ=
Subject key identifier:   FB:7B:37:E3:63:FE:1C:04:ED:73:02:DE:A1:73:4A:16:D3:01:5C:CB
Certificate issuer:       /CN=ea2bb73c-6f2f-4644-b33f-c7248e5f53b4
Certificate serial:       010D0C9F4328584DCC6067EE94EF606A2430BD00
Authority key identifier: 40:C5:89:00:01:1C:25:5D:13:F2:94:67:C0:12:DC:00:CB:B8:A7:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/5815aceb-897c-3337-bfa8-f646fc70f495.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     401429
IP address blocks:        64.239.112.0/23 maxlen: 24
                          2607:ddc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:67:ee:94:ef:60:6a:24:30:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2bb73c-6f2f-4644-b33f-c7248e5f53b4
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=2fe255f9-a9a2-4492-b005-9d3e5337a7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:b7:30:3f:92:71:e5:85:45:3f:e0:47:70:
                    56:34:aa:95:a5:0a:d1:5e:70:a0:11:ce:9a:69:e3:
                    9c:d0:88:ba:4f:1a:a4:38:6f:6a:b7:9b:10:81:78:
                    a2:ad:4a:10:83:70:ef:ff:6c:8b:7d:0a:57:1d:9f:
                    dc:cb:91:87:09:20:1e:8b:03:f1:be:2f:84:92:fe:
                    ca:49:35:16:fd:ca:9f:05:dc:12:d9:ba:b7:79:6a:
                    64:f7:f5:d1:a1:6a:bc:de:fd:2d:30:3a:97:e5:32:
                    b8:1b:ee:5a:27:01:0e:f7:f6:5e:8a:35:e6:ea:97:
                    6e:54:d6:32:c7:63:1e:74:a3:61:1b:ff:34:e2:6d:
                    91:13:05:c6:2b:58:81:12:d5:13:63:e9:65:4c:5e:
                    46:a9:23:03:6e:5a:92:c9:68:ff:be:2f:ff:9c:fe:
                    0c:8c:87:19:22:0e:59:a5:ee:75:e6:2b:35:db:ae:
                    a4:b7:e0:98:9b:8d:61:58:1e:87:fb:e2:48:e3:3d:
                    a1:d2:a4:47:dd:b3:e7:ae:b5:76:41:d5:e8:33:f4:
                    53:24:f4:be:7a:5e:e5:2f:aa:6b:d3:1f:f9:dd:70:
                    fe:cc:37:63:2f:fe:e3:64:01:d0:c8:c4:be:80:ab:
                    a4:2d:ce:00:e6:cd:4c:59:dc:88:90:90:67:ed:a2:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:37:E3:63:FE:1C:04:ED:73:02:DE:A1:73:4A:16:D3:01:5C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/5815aceb-897c-3337-bfa8-f646fc70f495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:89:00:01:1C:25:5D:13:F2:94:67:C0:12:DC:00:CB:B8:A7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea2bb73c-6f2f-4644-b33f-c7248e5f53b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.112.0/23
                IPv6:
                  2607:ddc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:53:92:58:53:ce:11:b1:41:bd:eb:ee:13:6f:31:8c:3f:
         84:e2:19:36:d1:f2:2a:d2:0f:c1:68:47:e9:b8:e6:c8:66:51:
         9f:d7:d4:31:e6:c9:63:92:50:19:fd:56:00:dd:22:aa:c2:dd:
         58:c6:bc:f6:f8:39:49:69:e7:b3:91:28:34:bf:07:fc:02:05:
         24:77:fa:4b:3f:4c:48:e7:36:50:83:1a:25:b1:87:eb:dc:19:
         38:48:75:3f:86:74:b8:07:b1:b6:5e:fb:07:55:22:db:23:f6:
         16:8a:02:67:33:72:11:08:69:21:70:1c:7c:26:23:8d:ba:f6:
         04:0f:6e:3f:02:e0:59:bc:52:72:29:56:88:bc:c5:13:e6:0d:
         e1:24:79:31:0e:f5:86:d4:6b:a5:8e:40:b1:ff:5f:52:2c:f7:
         27:24:96:b0:fa:4e:d5:ff:a4:01:1a:1b:a7:79:97:d4:f7:4c:
         4f:02:a9:3e:78:53:2e:a0:ae:1d:39:2e:7a:09:0e:ae:55:96:
         15:d5:aa:13:d3:c9:ff:78:b4:bb:04:43:e3:8b:50:6e:74:38:
         97:64:ad:33:57:86:78:fc:e7:ca:f6:cf:56:72:c1:21:6e:47:
         f5:b0:8d:fd:64:14:5a:ad:91:9e:c1:23:9a:d5:ba:0a:ff:eb:
         42:db:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:23 2026 by rpki-client