Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64c95936-e5a2-37c3-ba17-85af18ee415e.roa
File:                     64c95936-e5a2-37c3-ba17-85af18ee415e.roa (raw, json)
Hash identifier:          AXQj55oljHsskgfcNw+kFxqMQybMIfdueU1ROIMbO9s=
Subject key identifier:   F3:1C:B4:51:6F:1E:EA:E5:54:76:70:EC:4B:28:5B:F2:E6:DB:A6:83
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584DC8305C989F54A00E565DAD80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64c95936-e5a2-37c3-ba17-85af18ee415e.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        147.224.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:5c:98:9f:54:a0:0e:56:5d:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=4ef73ec3-d503-474c-9bb8-bb6392922ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:93:10:6b:b9:8c:14:60:df:c7:55:3b:d8:
                    dd:18:70:0f:22:f6:72:79:c9:83:0e:92:20:2d:d9:
                    00:69:d2:34:4e:b0:9e:f6:57:7e:ef:3b:e9:10:f6:
                    48:72:30:84:72:78:bb:eb:01:ec:5e:a7:6a:45:00:
                    fd:94:f4:f2:de:db:14:b2:da:0c:27:b2:f9:99:27:
                    e1:45:8e:9e:f1:92:51:37:f2:e7:83:04:a4:be:00:
                    3f:f8:98:f5:4d:f0:32:c8:23:5b:67:76:d6:a1:18:
                    f0:44:95:6e:97:a9:d6:68:ea:69:a6:d7:a4:f7:40:
                    a1:1e:db:81:56:aa:5f:97:c6:1d:73:07:59:77:7c:
                    e6:07:cf:b6:09:11:e2:ea:f9:aa:66:c7:0f:73:6a:
                    a6:cf:cd:3d:42:c0:de:91:4f:35:58:d5:e5:99:41:
                    84:9a:e1:01:a6:7e:be:81:98:08:ab:b4:18:ae:a0:
                    f7:d6:74:48:0a:5e:9f:ba:4b:36:0b:5e:06:a1:20:
                    de:d6:dd:8f:38:d2:6c:92:14:57:64:a9:27:e8:de:
                    a3:d4:dc:e4:12:55:ff:8f:3b:32:ff:19:cd:4f:78:
                    0e:3d:37:d2:2d:5e:8a:3c:24:ec:7d:67:42:de:fa:
                    6e:26:d6:b5:27:e7:6e:5c:70:74:27:9a:01:d8:2d:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1C:B4:51:6F:1E:EA:E5:54:76:70:EC:4B:28:5B:F2:E6:DB:A6:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/64c95936-e5a2-37c3-ba17-85af18ee415e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.224.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:d1:88:b3:96:31:42:5a:c9:c1:4f:33:c5:b3:eb:6b:3e:
         15:ad:53:5a:cb:1f:bb:6b:c2:cf:46:b2:c9:c6:bd:b5:e4:05:
         71:fe:54:b2:48:95:6c:92:b9:31:e7:2f:ac:0b:d9:a4:20:b2:
         87:44:26:5e:b1:7d:ca:67:20:0d:9b:74:92:55:29:70:6b:d3:
         75:a5:5b:d5:7d:67:52:27:fa:a4:39:0c:c8:84:6d:4a:e2:91:
         67:9b:b4:18:36:fc:1b:62:4d:d0:08:04:c5:c7:ef:22:df:a3:
         7f:93:c2:17:f6:79:43:ea:fb:7b:53:d5:eb:c9:79:c3:3c:7a:
         41:55:a9:f7:ee:7d:4a:dd:31:42:58:ea:4c:09:7e:46:63:72:
         74:bc:39:25:26:d0:35:0d:94:45:55:21:ab:39:bc:6f:71:c6:
         18:ed:30:19:c3:ae:e2:52:70:e0:01:93:4d:35:d0:73:2d:fd:
         bd:a8:40:31:3c:0f:dc:7d:ca:54:b1:cd:c0:af:4f:bc:91:99:
         17:ac:cd:ae:59:97:b1:7e:a2:fa:d3:f3:60:53:eb:e6:ff:52:
         d1:67:f0:39:45:8f:66:a5:ab:1c:54:50:0d:6f:88:06:f9:6a:
         6f:54:11:79:ff:cf:88:a4:38:73:bb:49:68:73:25:65:55:97:
         d7:46:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:38 2026 by rpki-client