Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa
File:                     af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa (raw, json)
Hash identifier:          5YFrTDF7+FG0vFf/81n1G3iS7Xv2LsGrKiqXtHQAbsA=
Subject key identifier:   DF:4E:B0:43:D6:96:BB:38:89:D4:6C:CC:D1:2D:CF:78:BE:02:01:9B
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584DB9567E15BA94EA703F1E84E0
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa
Signing time:             Mon 04 May 2026 17:20:23 +0000
ROA not before:           Mon 04 May 2026 17:20:23 +0000
ROA not after:            Sun 02 Aug 2026 17:20:23 +0000
asID:                     398391
IP address blocks:        64.226.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:56:7e:15:ba:94:ea:70:3f:1e:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: May  4 17:20:23 2026 GMT
            Not After : Aug  2 17:20:23 2026 GMT
        Subject: CN=f8091a32-5914-4957-bef1-297876e67fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:a7:82:c9:11:d4:c0:63:42:95:aa:46:a4:
                    2e:45:d1:39:cb:45:51:0e:0c:2f:1a:c2:1c:8c:a3:
                    bd:06:e2:a5:29:33:1c:c7:58:cf:68:a4:e8:51:63:
                    09:bf:e1:2d:90:a9:e0:0c:97:dd:ae:3c:1e:84:d1:
                    c8:b7:e5:7b:c5:17:14:95:f0:23:de:24:27:57:67:
                    65:dd:07:d1:61:73:57:36:37:f7:5f:22:b6:75:71:
                    5b:b3:8c:21:99:fb:1c:76:a5:2f:4b:87:b2:e6:9a:
                    b2:84:13:ee:dd:6e:10:7b:cd:67:6a:75:aa:e1:4c:
                    fb:7e:b2:49:24:7c:0a:76:f5:46:eb:8f:3f:ea:dc:
                    78:76:02:d2:b9:f8:d4:98:02:6e:af:1a:90:35:a4:
                    c7:8d:79:c1:27:e9:b4:73:40:bf:39:f9:7a:76:7b:
                    51:5e:27:5d:14:fd:f9:a1:3a:d6:7c:19:75:44:91:
                    02:34:67:0d:d8:81:88:ae:82:80:28:28:5a:e3:e3:
                    0d:c6:6a:88:72:fb:10:f7:4d:4d:ca:7c:99:93:a5:
                    0a:71:ee:90:9a:b9:40:8c:9e:87:c7:82:35:26:7b:
                    b8:67:ed:2a:e5:38:cf:04:7b:ac:6f:7c:22:8a:21:
                    cd:15:72:35:e3:41:c6:87:85:6f:42:4f:6d:03:bb:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:B0:43:D6:96:BB:38:89:D4:6C:CC:D1:2D:CF:78:BE:02:01:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/af7af33e-1c72-3e93-b4c6-dbaeaef521f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:da:9c:ae:69:3d:a7:33:7a:72:02:5e:a7:7d:87:c0:47:30:
         e3:f7:7a:73:ce:90:4f:fb:b3:b6:13:00:7f:cb:8d:ac:e5:ab:
         a9:1d:28:e3:fd:a3:dc:f4:16:5a:51:1b:d5:24:7b:44:e6:ab:
         01:25:18:48:c1:1c:03:23:86:88:9f:17:48:0c:62:56:20:fa:
         f7:6e:45:41:e5:31:4f:dd:77:d4:27:14:93:b0:b3:1b:aa:b0:
         cc:7e:47:d6:3b:5e:f7:05:f1:25:3f:72:f6:ca:b3:60:33:5a:
         bc:cf:0d:d5:cc:8a:16:85:d6:db:49:4f:b9:ce:50:b3:2f:63:
         b4:0e:67:ef:d7:75:60:77:01:8a:9c:4c:da:aa:3d:24:d5:34:
         e7:92:86:8f:ae:ac:52:ca:71:97:bd:c3:a5:02:91:5f:a8:ee:
         ec:93:e5:4a:67:50:4f:80:3f:f8:2f:65:71:c2:28:59:9e:f9:
         19:f0:78:c8:00:69:e2:85:da:ff:a2:05:49:db:6e:08:6e:39:
         d4:4f:52:7c:12:88:3c:bb:f5:2f:8e:66:b0:95:d6:f5:c1:b4:
         73:8f:66:4e:3d:e8:ba:b3:6c:0f:4b:f5:89:00:e1:35:b9:a1:
         99:32:fb:66:b9:f2:56:00:19:f8:49:30:47:5b:29:de:d1:77:
         57:01:ca:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:24 2026 by rpki-client