Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa
File:                     c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa (raw, json)
Hash identifier:          Zawxd+/GZ9IPGNsUWKdrBJBDJSdVHGez8Y+8tNHlO94=
Subject key identifier:   D7:16:77:FB:7F:19:A6:08:2B:D6:11:43:07:55:2B:3D:F4:84:63:E3
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584E8B24ED58BA391608953F93A0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        64.69.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ed:58:ba:39:16:08:95:3f:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=e6290cc7-36fb-48c4-bfe2-0d2897edca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:b2:30:d8:3a:41:17:33:e6:5b:a6:b7:16:
                    d2:31:00:e5:05:0b:90:66:00:28:b6:2d:26:23:26:
                    3a:46:f3:1a:d5:d7:b4:a6:40:b4:79:bb:a0:62:a1:
                    e0:9f:c9:89:9c:67:76:4b:63:51:e4:d0:4a:8e:61:
                    6b:fe:eb:a3:f3:2a:da:51:3e:12:6c:3b:e4:8a:ba:
                    52:79:2d:fc:e2:ac:26:34:4b:28:c2:02:cd:8d:aa:
                    68:dc:4b:42:1c:94:6c:77:dc:55:c9:41:02:70:a5:
                    58:37:a7:c1:da:03:b8:6a:34:1f:8d:27:4b:38:11:
                    2e:a0:f3:7b:d2:77:d3:6e:f4:de:de:6c:17:42:d1:
                    92:29:31:0c:f1:33:97:5a:47:91:55:07:02:4d:69:
                    69:ee:9a:f7:ce:a3:5d:89:65:83:6e:0c:67:43:77:
                    bb:4c:5a:62:9e:ba:68:1c:f2:27:44:66:c0:db:45:
                    73:6b:94:99:38:64:3d:71:1b:fe:c0:f3:f6:73:87:
                    54:70:b4:26:91:43:d8:cd:ad:8c:29:c6:6f:09:dd:
                    a7:52:eb:77:34:43:c2:1f:c4:0b:76:f0:e5:7d:aa:
                    e8:d5:1e:60:66:f6:43:be:4c:3a:e3:c1:2f:2a:10:
                    aa:6a:76:5c:1d:0f:48:c7:e9:1a:a7:39:84:c8:8a:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:16:77:FB:7F:19:A6:08:2B:D6:11:43:07:55:2B:3D:F4:84:63:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:4d:e5:b4:22:f9:39:a4:3c:3e:28:0b:53:f6:34:c9:0a:
         36:5e:3a:a6:06:80:23:2a:fd:c1:be:0f:7a:07:e0:e3:4e:34:
         3b:ab:86:4c:95:93:7b:9f:da:26:a8:94:05:13:91:55:6d:1f:
         8c:dd:7b:5a:4d:31:c0:fa:19:ad:85:75:64:6b:b4:b2:02:93:
         80:cf:a0:63:b6:3b:21:99:61:56:f1:5c:b9:08:bd:58:fa:a4:
         39:3f:c9:8b:69:2b:80:f4:9d:82:a2:f4:4e:be:c9:ae:71:69:
         d3:7a:53:46:6a:8d:eb:1e:6f:29:20:12:f2:17:6b:62:04:21:
         e9:c1:a2:79:d5:e2:5f:47:e7:fa:6a:88:c6:38:5b:43:97:d0:
         ae:f0:c2:f6:3e:35:81:ea:b8:ef:33:e8:b4:15:2a:18:06:d5:
         a4:e3:1a:ae:5c:3d:22:cd:72:e7:67:4c:c7:4f:50:05:fb:58:
         44:81:1f:81:3b:1a:53:37:28:47:ae:c4:1e:83:0e:f0:c7:f6:
         fe:ba:83:a1:2a:ae:fd:43:4e:fa:43:69:3d:37:a9:56:38:39:
         30:65:a7:76:61:6a:28:ec:b1:91:d9:62:be:53:e3:d6:34:c7:
         ae:13:7c:7d:cc:51:07:64:41:a8:07:bc:0d:2b:33:21:3a:99:
         50:56:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:43 2026 by rpki-client