Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/d41e2dac-b44d-3a20-afad-fa376617ea3b.roa
File:                     d41e2dac-b44d-3a20-afad-fa376617ea3b.roa (raw, json)
Hash identifier:          nO1Cy14WRymEzm55tsfHvF3YfwiYiuctBu6U5YDyqxo=
Subject key identifier:   41:3B:27:37:C0:A7:1F:F1:A9:3D:A7:F0:24:1B:E1:79:FD:4C:87:AD
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584DB9567E083321D91BA926AF80
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/d41e2dac-b44d-3a20-afad-fa376617ea3b.roa
Signing time:             Mon 04 May 2026 17:20:23 +0000
ROA not before:           Mon 04 May 2026 17:20:23 +0000
ROA not after:            Sun 02 Aug 2026 17:20:23 +0000
asID:                     398391
IP address blocks:        64.226.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:56:7e:08:33:21:d9:1b:a9:26:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: May  4 17:20:23 2026 GMT
            Not After : Aug  2 17:20:23 2026 GMT
        Subject: CN=37309c55-287d-4457-aca4-ac66309e13e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:f0:c9:b6:11:95:4c:92:4b:18:f6:a3:5c:
                    61:d3:3d:c6:de:28:ca:d0:13:e9:69:27:5a:8e:26:
                    eb:8f:c5:c2:d4:9b:c2:0e:68:2c:f3:77:0b:1b:50:
                    97:e0:1a:d1:85:31:d2:f2:4b:e8:0c:d1:b7:aa:a0:
                    6f:0b:f7:8e:e3:76:05:eb:39:49:1c:1a:d0:a3:4a:
                    dc:e3:cc:32:94:48:6b:25:5b:59:3c:42:76:e1:73:
                    5f:c1:8d:fb:f9:04:08:90:90:10:d1:58:e9:f1:2b:
                    6d:71:92:d7:4c:f5:5d:77:09:30:3c:cf:db:e5:79:
                    e7:c3:92:d3:d1:cf:22:16:8c:93:c6:a4:d1:c1:47:
                    57:c6:7d:24:13:45:a5:c0:63:8d:ea:b6:ff:ec:49:
                    50:cf:cd:99:e1:db:11:62:39:a7:78:a3:4a:03:96:
                    1b:cc:f2:47:75:fb:6e:05:77:7b:92:94:a7:3e:ac:
                    ea:0b:db:44:03:6b:78:ce:a5:6d:cf:10:09:f8:75:
                    a5:9d:38:8d:a3:c8:0f:e4:fe:f2:3a:15:ee:42:40:
                    7b:eb:fb:aa:65:6e:64:13:16:ef:71:5a:14:ad:67:
                    f8:08:5e:43:be:dd:e4:0d:f7:ee:d7:95:d4:a3:d4:
                    3e:57:42:5a:06:c8:cf:49:a2:d7:30:dd:3d:47:43:
                    22:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3B:27:37:C0:A7:1F:F1:A9:3D:A7:F0:24:1B:E1:79:FD:4C:87:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/d41e2dac-b44d-3a20-afad-fa376617ea3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:fd:89:8a:29:5c:45:76:59:21:a2:51:e9:49:95:92:42:
         15:09:df:7e:51:c7:fa:11:a0:8b:b3:e4:ea:f0:51:35:99:41:
         e5:75:e5:bb:e3:f0:d2:76:dd:c7:23:0c:22:cf:28:c2:e3:07:
         db:fd:e0:3e:20:7e:42:e1:12:5e:5b:30:5b:1f:15:15:66:8a:
         1f:21:49:17:13:aa:25:28:21:20:e0:33:05:1f:24:7c:cb:c1:
         6e:b3:80:2b:93:b2:c2:4c:b2:d3:d5:f0:39:26:75:e6:22:85:
         9d:d3:f6:37:83:cb:d0:7d:1f:a8:6d:0f:4e:8a:78:7a:e1:8e:
         7e:e5:67:ed:7f:f6:60:46:4c:c5:69:35:22:86:05:34:d8:12:
         a3:c7:02:a5:eb:34:d6:61:48:23:c8:af:b5:e1:10:d7:31:a3:
         00:b4:f1:42:a1:bd:7d:3b:72:bb:ce:68:f8:48:61:f4:a1:fb:
         92:a4:ad:bd:76:61:44:21:d1:5f:7b:46:0a:14:4a:20:6d:97:
         d6:aa:86:9a:c5:85:a2:d0:a9:83:d1:9e:64:d8:9d:ec:b8:4a:
         4e:91:5d:d5:71:ce:a2:09:e3:ac:32:f8:e1:24:d7:6d:ed:b5:
         ba:eb:9a:7c:70:7b:9a:f1:d3:f4:57:86:59:40:f2:b9:a0:c7:
         6b:14:1b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:28 2026 by rpki-client