Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aacbda94-1c61-3766-b5d0-b72a4818b252.roa
File:                     aacbda94-1c61-3766-b5d0-b72a4818b252.roa (raw, json)
Hash identifier:          4QOvpRkuFGO7O6i9uclv6g0OCVFd0dxsBXahnBrwIgs=
Subject key identifier:   6D:99:3A:97:DA:0B:41:18:B2:44:E3:10:79:B6:BF:30:9D:D8:20:D5
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584E991A55F34207AA33EA373700
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aacbda94-1c61-3766-b5d0-b72a4818b252.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     398391
IP address blocks:        64.227.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:55:f3:42:07:aa:33:ea:37:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=adcce874-5f59-437e-9620-65a8bf7f0b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:15:2d:27:77:99:83:27:73:ed:8c:4f:c5:
                    5a:d2:0a:93:4a:80:91:c8:f6:62:1a:75:de:79:f2:
                    4e:92:73:49:ce:4a:a1:af:1b:d9:d9:fc:31:9a:68:
                    14:74:e7:28:13:37:58:bf:01:42:ae:56:36:fa:37:
                    bb:a5:76:8d:d8:cf:9c:7c:0d:ea:8d:37:d6:95:65:
                    6f:7d:1c:b9:aa:1c:7b:c2:59:fd:1a:17:b3:a6:26:
                    ca:ca:c9:4c:3a:a1:52:7d:5b:bf:11:74:42:d8:e2:
                    e4:60:35:8e:54:97:c9:af:dc:fd:5d:c5:e5:ae:61:
                    30:bb:f9:43:ce:62:83:93:5a:26:1f:83:3f:80:16:
                    2f:f7:d5:ab:02:8e:8f:6f:4a:9c:f3:05:96:2d:b4:
                    d5:65:11:83:a7:1e:d0:81:21:e2:50:57:8a:a4:57:
                    52:1c:22:62:61:65:d6:b7:b4:ac:0e:4a:b5:c5:a3:
                    c2:8d:1a:c1:b8:49:87:ec:dc:82:f0:4e:d7:9e:46:
                    5f:92:6c:5f:6c:c7:fc:c0:64:50:b0:4b:d7:02:4d:
                    8a:e1:21:46:85:84:cc:aa:11:0b:21:7b:4b:1d:20:
                    a9:d0:3b:ff:7b:84:51:64:38:fd:d5:b7:3f:e4:98:
                    10:d5:c4:2e:02:84:2d:97:dd:c4:fe:07:34:6b:7e:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:99:3A:97:DA:0B:41:18:B2:44:E3:10:79:B6:BF:30:9D:D8:20:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aacbda94-1c61-3766-b5d0-b72a4818b252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.227.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:32:ce:0d:05:2d:20:1b:65:6e:41:79:0c:e5:8e:25:3c:
         68:0d:d0:3e:ae:00:ba:f3:58:7e:2d:36:52:99:a0:2e:71:24:
         9a:78:3d:8b:11:43:77:45:de:83:e0:c3:b8:61:18:3b:37:5f:
         4e:91:de:bb:d5:82:96:59:7c:78:e2:00:ce:9f:4d:2b:01:85:
         17:5e:f4:92:ed:c8:ba:61:24:90:0a:83:d6:88:de:4b:21:ab:
         4c:fd:09:a7:ec:cc:b7:5f:8e:84:de:ef:92:13:10:61:83:57:
         af:95:d1:88:72:3b:fb:2f:b3:c1:c7:89:c0:8c:8d:92:82:54:
         71:33:75:c8:a7:2a:12:7a:bd:3c:ca:90:fc:13:7b:ed:da:09:
         d5:1e:08:c0:2a:0c:c7:cb:57:4f:26:58:aa:89:0c:fb:06:7e:
         1e:79:db:e9:34:8d:e2:1c:5c:39:13:44:2e:70:b4:af:d2:03:
         21:a9:4f:a2:59:38:ea:19:02:6b:c1:a3:a8:0f:ed:de:77:bf:
         e8:17:43:14:03:e6:ca:70:ac:45:4b:0b:b6:df:be:dc:9a:f2:
         9a:18:89:3f:a0:a7:0f:8a:34:da:c7:14:c2:e0:23:44:c8:46:
         31:7e:08:fb:8d:14:8c:bd:08:cc:6c:5d:6a:a2:b4:6c:d6:82:
         57:7e:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:14 2026 by rpki-client