Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/2ff067ce-0282-3523-acb7-16e0caa34012.roa
File:                     2ff067ce-0282-3523-acb7-16e0caa34012.roa (raw, json)
Hash identifier:          ZAGng+MzqMWlzLV9L8weZnXlhR8xJh3fYfsMhYXCkSU=
Subject key identifier:   E1:86:4B:58:DA:20:7D:B6:13:79:EC:92:CD:4D:6A:39:99:4E:BA:9E
Certificate issuer:       /CN=9c7abcd7-8ab3-460c-8950-f024e1b500dd
Certificate serial:       010D0C9F4328584F4974EA35D37AE12D91614500
Authority key identifier: 47:0B:25:6D:0D:34:8D:EB:7A:79:BB:41:B9:72:37:10:EC:38:EA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/2ff067ce-0282-3523-acb7-16e0caa34012.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        64.187.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ea:35:d3:7a:e1:2d:91:61:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7abcd7-8ab3-460c-8950-f024e1b500dd
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b8bbc570-041f-4554-93b0-f2d81cd6dad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:d5:eb:5e:0f:90:35:1e:f0:f5:e0:5b:32:
                    04:ee:a0:af:9d:75:35:34:b4:4c:d6:6a:a4:b1:5f:
                    62:85:4b:9e:a7:85:fd:a7:c4:0c:3e:15:3b:e0:f4:
                    d4:92:ca:cb:aa:1f:76:ed:ea:74:89:80:29:47:aa:
                    ad:8d:c2:50:f9:e5:88:f5:c7:65:62:ee:86:0a:f6:
                    01:68:47:e2:6d:9c:72:2a:35:d2:2b:f9:d8:77:b5:
                    d8:c3:88:7b:f8:cb:65:0d:25:bc:06:e4:1e:34:6e:
                    fe:6c:38:df:43:bd:4f:7d:a8:23:07:60:b3:52:b4:
                    dd:86:a7:4d:c7:ca:56:25:d7:9b:77:a0:c9:05:d7:
                    94:d8:2b:88:b2:88:cb:fe:ad:b1:2e:99:39:65:ec:
                    ee:25:8c:0b:4b:ab:0f:5f:16:5d:20:e4:6f:ef:d2:
                    5e:10:d6:39:d8:68:34:4c:f8:bd:a8:59:3b:23:37:
                    e7:bd:5f:fc:ba:87:51:63:ed:4a:a7:4a:aa:5b:80:
                    4d:0b:ed:34:15:60:d6:0c:57:23:45:49:e7:ba:f6:
                    f1:fd:57:f8:f6:93:63:f5:ce:a6:1d:32:86:71:70:
                    d5:bd:6d:f4:b6:fc:b8:f3:0f:2b:4c:d6:79:37:48:
                    97:30:d2:08:9c:4e:37:08:2b:a7:2c:c8:8d:54:ac:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:86:4B:58:DA:20:7D:B6:13:79:EC:92:CD:4D:6A:39:99:4E:BA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/2ff067ce-0282-3523-acb7-16e0caa34012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.crl

            X509v3 Authority Key Identifier:
                keyid:47:0B:25:6D:0D:34:8D:EB:7A:79:BB:41:B9:72:37:10:EC:38:EA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:01:4c:86:22:22:b2:6c:24:18:0c:15:f0:9c:df:f2:78:5b:
         1a:93:8c:ef:0f:63:d8:9c:fb:1e:25:a8:50:1e:90:d9:75:0c:
         42:cd:98:fc:21:77:35:e9:10:1b:f9:f3:87:9a:17:56:ab:7f:
         4a:87:38:b7:3b:87:1b:42:d2:87:cf:eb:a7:57:2f:c0:21:50:
         7d:b1:6b:04:05:c5:82:f1:04:24:d7:64:19:5a:a7:83:bb:e8:
         88:90:80:e6:4d:9a:d9:2d:d9:0f:6d:05:4c:65:8f:71:89:c6:
         2b:96:b0:40:5d:4d:17:eb:25:0d:9b:f4:3b:ed:d1:9d:49:d3:
         a2:ad:28:7e:cf:59:91:ed:8c:1a:f2:eb:9e:ca:37:e6:15:f6:
         18:0d:52:2a:75:26:44:f0:7a:8f:6f:e6:99:15:98:d2:e9:7a:
         c9:1b:1e:bc:2f:4f:05:7e:c7:70:13:f9:53:37:e5:3a:62:b2:
         09:8c:21:4c:a6:74:ec:d2:1e:7a:b5:c7:50:83:3e:d0:c4:87:
         24:a7:f7:e9:55:f7:9f:8f:cf:86:a0:1c:33:d9:47:6f:6c:64:
         56:86:b5:e2:5f:93:91:25:54:59:88:0b:c6:cc:d2:48:5b:ae:
         3c:66:21:74:9a:b4:70:cb:4e:2c:34:3b:27:13:c1:7c:ea:cd:
         f1:13:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:49:56 2026 by rpki-client