Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/609cd178-96ec-334b-bec5-940c4355a2fe.roa
File:                     609cd178-96ec-334b-bec5-940c4355a2fe.roa (raw, json)
Hash identifier:          jN3Db4v32egmmDWkzzgBTfby2QI7lfoYv4gHaWlqLy8=
Subject key identifier:   B8:62:50:D7:0F:1F:E7:C5:30:35:30:54:32:C1:02:D2:D4:82:AD:93
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584F49759465EFED54DBA182CC00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/609cd178-96ec-334b-bec5-940c4355a2fe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13760
IP address blocks:        64.239.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:94:65:ef:ed:54:db:a1:82:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=37d890da-83af-4986-ab4d-31f6fb8746db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:cd:66:58:24:a3:05:60:cc:8e:b7:88:40:
                    8d:81:69:06:ff:87:23:8a:4b:28:4f:fe:4f:3e:49:
                    e4:50:4b:ee:0e:34:fa:0e:52:ba:ad:b7:de:ab:79:
                    03:df:b6:67:98:b4:37:24:c3:78:b2:22:d7:9e:8a:
                    5b:99:89:e5:cf:dd:fd:1b:2b:dd:5f:17:80:0a:74:
                    e9:01:2e:37:59:3b:97:48:38:cf:1f:e8:ee:73:1e:
                    c5:cd:88:83:c9:4f:20:b1:e0:45:1b:91:4c:e5:d0:
                    ae:9a:3f:23:7c:31:e7:d9:bb:cd:9d:d0:54:3e:f5:
                    0d:c7:46:24:b9:6e:41:d5:f5:40:1d:3a:a6:39:e8:
                    7f:ed:64:4f:b4:0a:56:2a:30:59:24:4d:2a:b3:57:
                    07:05:78:92:55:77:01:d7:c5:b8:a4:28:4b:2b:9c:
                    9a:82:34:90:d6:42:34:e5:36:08:08:2e:45:a2:94:
                    9b:71:bc:b4:36:7b:79:12:ec:80:31:9a:f4:12:49:
                    b0:8a:64:ca:ad:a6:93:b6:93:67:97:58:32:ae:d8:
                    b4:5e:95:ee:94:f7:8e:6e:82:79:a4:82:cd:79:4f:
                    84:5e:64:8c:29:e1:19:8f:58:7b:53:db:6b:ac:52:
                    c5:7e:81:8f:e5:96:ef:d9:d3:a7:72:ab:58:29:a5:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:62:50:D7:0F:1F:E7:C5:30:35:30:54:32:C1:02:D2:D4:82:AD:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/609cd178-96ec-334b-bec5-940c4355a2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:e6:ab:ad:0f:45:df:3c:81:9e:98:41:e6:16:1c:6b:0e:
         10:c1:af:0a:73:23:b7:03:9a:07:10:66:91:e6:81:f7:88:9b:
         6a:2f:b7:88:3d:36:b4:7f:cc:7f:57:ee:da:e0:1b:ef:e0:f0:
         30:e3:64:46:6b:07:6e:7a:8b:3e:d5:7e:cc:b6:4d:7e:24:f4:
         de:2a:8d:34:ee:33:d6:00:be:1b:ec:0c:5e:b7:96:98:7d:1c:
         16:28:cb:1f:b4:28:e3:f4:2e:d2:95:e4:3a:52:96:96:a4:f1:
         01:a5:ae:fa:b6:30:2b:6a:34:63:cf:dc:8a:90:6c:6c:3d:59:
         b8:8b:a1:c7:0a:cb:94:da:83:1c:c9:23:42:82:02:0b:88:a4:
         2c:43:c1:2f:26:2e:66:88:64:c5:62:b6:c2:0f:01:ae:56:03:
         7e:3d:17:52:80:f3:4a:31:85:21:1a:65:d8:a4:25:05:f1:63:
         88:9b:f8:6b:37:fa:f0:d3:78:1d:b0:56:fc:33:b8:e8:0a:37:
         e3:9a:6d:69:e7:ad:2b:5f:62:4c:bc:68:9c:98:93:bc:0d:12:
         cf:7d:c3:e0:80:14:45:00:cb:b6:38:3d:fa:6e:db:e4:d8:2b:
         ae:6b:88:1b:52:6d:7c:1f:2d:23:0d:e7:6f:b1:be:98:33:07:
         c6:4b:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:51:37 2026 by rpki-client