Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa
File:                     9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa (raw, json)
Hash identifier:          bXiQTbK9CIey3kQSZSvGttXSLOOhdC8VPQjg8VB8CpE=
Subject key identifier:   28:D0:22:CC:0C:6C:CD:FC:9B:1F:CE:2E:94:81:A6:86:CC:B1:7A:11
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584CD6D20C5B0440F01E714FD700
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        64.84.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:0c:5b:04:40:f0:1e:71:4f:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=78602dbf-e192-433e-a691-ce0fd2b6903b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:50:a1:6d:fd:b5:58:3d:40:37:4b:ec:f2:
                    01:16:08:7b:79:fe:34:2a:3e:84:b2:1f:5e:8c:6b:
                    5b:15:18:93:a0:97:f9:5f:a0:84:02:bf:47:82:e4:
                    1a:33:03:bc:d0:78:70:b6:d4:90:45:f9:f5:80:16:
                    b8:96:f6:16:5b:df:64:08:4a:6f:3f:08:5e:df:17:
                    58:d6:6d:15:5d:b1:13:13:3a:c5:61:d2:45:dc:f0:
                    38:4c:8c:49:52:23:b5:c9:32:4a:29:5d:7f:2c:a6:
                    81:4b:bb:ed:6e:5c:93:3d:1e:34:df:4d:31:7e:7c:
                    7e:f1:ef:0b:df:5a:86:9d:bf:99:d0:aa:91:1f:cb:
                    3d:f2:cc:8e:44:8a:94:e3:e6:c5:a1:74:4d:dd:b4:
                    d0:57:0c:97:54:2d:d2:8c:f9:6b:73:62:7d:4d:e0:
                    9b:c2:af:71:77:69:3f:e7:b5:a9:f4:06:f3:b6:3c:
                    de:5c:f2:6a:93:93:fb:4d:0e:9d:26:0c:e3:b9:b2:
                    b7:c1:6e:61:69:10:bb:46:71:7a:c9:06:49:d1:4d:
                    54:e5:38:04:df:49:41:a4:49:53:8c:48:ae:50:07:
                    09:93:5b:4d:ee:a8:e0:80:2c:fa:08:da:f2:bc:c3:
                    66:52:38:18:33:4a:5b:28:f0:74:bf:a3:3e:0a:be:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:22:CC:0C:6C:CD:FC:9B:1F:CE:2E:94:81:A6:86:CC:B1:7A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/9f85156e-f2d4-37b3-a63c-5c56e20c9f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:a4:32:8f:33:f3:d2:5e:ae:a0:87:8a:ef:e1:e1:79:3f:
         62:c0:8b:84:88:32:eb:84:20:46:ea:5e:0e:17:4c:ff:e5:4f:
         16:c5:42:ea:25:4e:e2:74:d0:2e:e3:b6:3e:0b:1c:df:c0:12:
         00:8c:50:9c:55:39:4e:f7:b3:16:47:76:44:57:16:ef:8d:5a:
         83:2a:5d:f4:d7:5c:0a:22:38:1b:af:43:63:39:61:c5:f1:f6:
         2f:17:de:fc:c2:ee:e4:cc:f2:33:e0:d8:38:cc:75:05:a8:9e:
         61:eb:65:93:4c:d8:b6:e4:ef:f9:18:0e:21:ab:34:0a:10:9c:
         52:74:e1:ef:6e:6a:cc:52:4e:30:2e:2d:60:0f:33:6b:e2:eb:
         06:81:13:b2:bf:e4:3c:20:27:bb:d0:65:43:80:e7:18:f9:ae:
         ce:d3:0b:2e:c5:f7:03:52:c3:58:49:99:c8:a5:15:86:f4:ce:
         31:75:e3:94:4c:b7:66:26:72:e5:ff:09:ec:1c:2e:31:ca:65:
         cb:03:da:67:ac:a2:5a:51:4f:a7:db:cc:aa:1a:74:9b:50:a2:
         47:e6:a1:dd:09:cf:63:e2:bf:cb:10:82:b2:c6:ec:a1:2c:e0:
         57:9f:06:b2:87:f9:b5:5b:23:ba:63:d9:8f:93:32:ba:4c:56:
         2f:ae:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:46 2026 by rpki-client