Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
File:                     bcb4a493-66dc-3f03-946d-1ed9d7088970.roa (raw, json)
Hash identifier:          Q9qUp3ArbNMUdZuQBp5DYsRaX5Zlel72LEWDrn5D+XY=
Subject key identifier:   90:9A:6B:95:31:CE:73:15:77:01:74:8A:29:54:72:9E:4E:F7:D3:80
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584D8EF557FD2A10873C6D4397E0
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396032
IP address blocks:        64.38.149.0/24 maxlen: 24
                          66.114.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:57:fd:2a:10:87:3c:6d:43:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=7489e02c-5e48-4764-9868-c0b0327eb3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:ee:f3:45:a8:0c:db:f2:04:17:25:18:14:
                    aa:ed:be:3b:95:76:c6:0d:ab:c9:92:bb:e0:d8:87:
                    36:63:97:e2:29:12:62:71:c2:1a:b7:5b:6c:a2:bd:
                    a6:34:f2:70:d5:8f:10:b7:70:93:68:b2:88:cc:8b:
                    32:a7:e8:fb:ff:04:7b:fd:05:a7:2e:fd:ff:67:aa:
                    eb:3c:50:b3:43:0a:65:e7:64:5f:20:a8:f3:a0:f5:
                    82:c7:73:65:47:62:6e:86:cc:ac:6e:1d:f9:47:60:
                    25:df:f9:ee:95:8c:35:99:64:ee:f0:f4:a1:5f:b4:
                    0f:32:5a:8c:fa:48:04:47:ea:df:26:a1:8a:75:15:
                    c9:ff:17:7d:03:80:8e:1b:fd:6e:c3:a1:d1:16:c6:
                    76:aa:59:75:9e:75:d9:4f:a8:91:8a:f6:d7:fb:26:
                    4b:56:64:56:69:85:d2:0e:f7:ec:73:c5:44:9a:69:
                    5f:07:a8:4b:e2:3f:14:3b:60:79:bf:cc:7c:72:9e:
                    8b:fa:d5:96:7a:cd:ae:b0:d9:64:b9:f8:7b:04:db:
                    e7:d5:56:d8:dc:6b:07:2b:82:11:e8:75:b5:53:0f:
                    b6:03:04:a5:06:d1:b6:0d:5d:fd:64:16:f7:7a:ac:
                    97:b0:a5:c3:6e:fa:f2:0d:85:0f:84:92:d2:2f:d0:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9A:6B:95:31:CE:73:15:77:01:74:8A:29:54:72:9E:4E:F7:D3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/bcb4a493-66dc-3f03-946d-1ed9d7088970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.149.0/24
                  66.114.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b6:90:44:cf:e4:12:59:5a:a4:53:42:24:aa:a6:5e:fe:84:
         f5:46:a9:38:eb:83:24:82:c5:72:f4:9d:19:d0:bf:2e:1c:3a:
         23:1a:6d:2a:40:df:4d:97:6a:a3:ce:e3:a3:07:28:e7:12:88:
         27:77:11:9f:fc:dc:59:1d:e2:86:d1:34:b8:81:47:be:b1:92:
         7a:53:51:80:45:d2:44:2f:20:ca:8b:f8:66:6a:b4:7a:ea:27:
         2f:36:5a:38:95:67:88:01:f7:45:c7:44:a3:d9:68:f2:26:d8:
         7f:4c:90:9d:ec:2c:99:2b:37:55:73:27:11:74:9a:22:cf:3c:
         c2:8f:8e:a7:67:e0:11:65:f6:51:30:87:5d:cd:f8:8d:b8:6e:
         65:4c:27:26:bb:5f:b0:b6:5f:db:8d:93:6d:36:8b:fe:26:66:
         e5:7a:2d:0d:a3:d8:37:b5:a0:17:4e:e2:09:38:31:cf:70:78:
         3d:31:0f:ba:8c:6a:3b:98:e2:37:b2:6d:23:32:e1:95:a3:81:
         b0:2c:17:ce:fe:53:70:38:c5:2c:4b:84:92:f0:bc:dd:41:db:
         fa:e4:47:21:e4:08:e6:67:64:60:6c:69:62:9c:16:28:9e:49:
         bb:f8:f6:14:bd:4a:56:26:70:11:43:60:78:d3:fa:57:c5:8b:
         74:dd:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:11 2026 by rpki-client