Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa
File:                     15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa (raw, json)
Hash identifier:          lh6wCYFjyPRQZsIKmGZ/Vdv6ecc+5dVXG/WB8pdbyHQ=
Subject key identifier:   64:54:4F:82:8B:6B:85:47:D4:03:73:3B:39:4F:8B:48:CE:BE:27:DD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4C3DCA3252781625C7D86341
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        64.233.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:ca:32:52:78:16:25:c7:d8:63:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=bf8adbee-b719-439b-bfa6-53b2bd84f6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:6e:bc:c9:3b:49:28:2c:f9:60:08:f2:e1:
                    f7:2d:08:22:4c:f6:00:39:b8:9f:ab:34:b4:be:89:
                    7f:b7:2b:b9:43:bd:92:6a:21:07:e0:e5:a7:8d:ed:
                    d7:37:3a:0a:c1:4b:b7:59:89:c3:2a:3f:4b:e9:69:
                    ab:b6:b2:90:52:6e:7e:e4:00:d8:0a:fb:74:10:16:
                    b2:27:97:f5:ce:db:d8:37:eb:85:4a:06:4c:55:4a:
                    36:98:65:43:e0:15:b6:4e:f1:11:37:33:5d:cd:c1:
                    1f:9a:6d:61:d1:bf:19:56:38:11:50:ca:10:d6:0d:
                    b2:76:5b:be:51:b1:c5:9e:00:db:df:84:be:63:9d:
                    82:f9:ae:91:fb:42:80:96:b3:22:b1:86:52:c5:1d:
                    da:cd:53:57:ba:dd:9a:54:96:c0:45:0a:de:82:28:
                    ee:94:6a:0f:aa:b8:2a:60:b2:24:02:49:fb:59:10:
                    fc:68:31:b0:55:8f:a0:e0:c8:8e:51:40:59:25:4b:
                    0a:4e:99:68:d3:e7:b7:01:8a:46:d2:ca:5d:2f:82:
                    46:8a:43:80:00:2e:5b:73:60:e2:7a:1a:54:9b:14:
                    de:bd:db:8d:3b:60:31:43:81:20:ef:a5:74:e2:63:
                    6d:d7:f8:f1:ba:f5:7e:33:cf:34:ee:22:10:ae:5e:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:4F:82:8B:6B:85:47:D4:03:73:3B:39:4F:8B:48:CE:BE:27:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15dc1ec8-2cdf-3adf-ac4e-65664390e40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:98:6f:32:91:2e:98:1b:54:a9:6c:2f:12:95:84:39:54:9f:
         5c:da:54:cc:c9:9d:be:72:e7:b6:e9:dc:ed:9f:fd:2b:07:74:
         c2:de:f3:96:d7:67:35:f3:c2:f5:37:02:af:dc:e7:47:64:4c:
         56:96:0a:07:6a:b6:b3:a9:26:85:69:a3:be:99:a7:51:fd:31:
         f7:64:ad:14:e6:4b:c3:00:c1:5c:57:9e:dc:66:25:a4:28:0b:
         25:b7:e6:48:a7:5f:f4:2c:44:6e:74:75:e2:1f:ac:69:1a:c6:
         e9:ae:cd:f9:77:a7:1b:be:f2:35:29:48:3a:ae:d3:97:0e:62:
         bc:de:8b:6d:5b:f7:62:17:bf:a9:12:52:3e:e3:62:84:02:dc:
         f2:01:b6:24:15:da:52:8b:da:48:60:0c:db:79:f0:dd:67:41:
         63:a2:ba:df:30:c7:f2:00:67:d0:e7:b7:5d:49:38:c1:5f:c7:
         e2:79:fb:1f:b3:3a:8f:7f:85:34:63:7a:ea:30:28:be:47:86:
         04:c6:df:76:2c:89:5f:91:3a:22:9a:b6:a9:23:d0:16:d7:c0:
         ce:a7:de:10:72:0e:13:86:02:06:4a:7d:8e:a1:b6:86:76:4e:
         67:28:10:55:14:51:a7:87:84:24:ba:d3:4d:7c:5a:ff:8d:3e:
         5f:be:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:59:31 2026 by rpki-client