Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/245ffb8b-95a8-344f-a359-f4a4eb1e7492.roa
File:                     245ffb8b-95a8-344f-a359-f4a4eb1e7492.roa (raw, json)
Hash identifier:          VDiy/vaIjh+69rJ+YaOaih3aLYwFxOADPM0gqkvxaTk=
Subject key identifier:   D4:1D:96:73:0A:30:1F:9C:7C:AD:CB:0A:DB:18:26:CD:3E:F2:64:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243ADD75070D144C42AFCE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/245ffb8b-95a8-344f-a359-f4a4eb1e7492.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        75.64.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:ad:d7:50:70:d1:44:c4:2a:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=defea348-0c3a-49b8-99c1-58d8bea9af3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:cc:8e:fb:2b:2e:0e:79:f0:8c:c7:22:0e:
                    40:59:0a:7c:69:53:08:ca:98:50:ac:c0:2e:82:9b:
                    f0:2f:15:47:d8:c7:e6:ad:27:7b:26:3e:f9:af:42:
                    bc:d2:c9:34:e3:9b:e0:23:d8:5e:ea:e2:89:12:2a:
                    bf:f4:4f:c2:a5:a8:05:f6:3d:e4:7b:32:55:1f:66:
                    90:7a:64:af:43:1b:ee:ec:65:95:14:19:09:c2:71:
                    77:d3:e3:c9:11:fe:70:01:ea:bc:c5:86:cb:8b:49:
                    06:5a:16:1d:07:79:a1:ff:d2:20:d4:8e:34:da:c0:
                    66:bb:93:ef:46:e8:5b:26:17:b3:45:2c:74:0d:01:
                    8d:00:46:59:4f:87:d3:5a:3d:9e:95:73:5c:6e:9e:
                    a2:ef:27:ff:e9:64:03:31:63:7f:bb:83:dc:65:e9:
                    3b:79:de:92:26:09:3b:f2:71:5c:dc:3e:ad:cc:5f:
                    14:e6:06:24:c7:c7:47:16:4b:65:1a:d4:ef:cc:3d:
                    35:e0:f6:74:8a:62:6d:e1:fd:72:9b:2a:94:6a:bb:
                    37:b0:b2:d1:b4:4a:02:8a:f1:5d:60:4a:3b:c8:5c:
                    b2:d0:98:4e:86:9b:c8:93:97:1a:ce:26:71:96:3c:
                    ba:67:28:ec:ed:26:95:af:f5:a1:6b:15:cb:aa:f8:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1D:96:73:0A:30:1F:9C:7C:AD:CB:0A:DB:18:26:CD:3E:F2:64:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/245ffb8b-95a8-344f-a359-f4a4eb1e7492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.64.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:58:b1:d9:3e:fa:83:e8:93:2b:99:ac:f6:2b:3e:e1:cf:5f:
         38:d2:2c:d7:50:91:e3:b4:3b:08:8e:af:e5:02:8a:c0:c8:e7:
         05:11:e2:17:b9:53:d9:da:8e:03:35:ed:d1:3d:ac:e7:3a:b9:
         95:55:45:d4:92:76:55:13:25:bd:10:f0:95:43:c9:13:20:5c:
         77:3c:f3:19:f2:eb:20:12:a2:bb:04:12:03:b1:03:49:b1:70:
         30:cc:55:53:4c:57:bf:e4:ab:a7:79:3b:bb:6e:5e:c9:ee:a0:
         fc:03:be:02:d6:80:13:ef:24:f4:13:23:f4:fa:f1:0f:63:60:
         1a:94:7b:fd:43:75:cf:88:ad:bd:75:53:5f:0d:d8:85:b7:48:
         96:c6:62:8b:e4:55:56:4b:9c:9a:36:2f:b4:90:30:35:ef:73:
         1c:72:a3:14:33:59:39:e3:68:93:59:b9:0a:66:aa:b8:d4:73:
         d4:eb:04:46:9a:c4:27:1e:bf:56:4e:d9:f1:15:74:bd:2b:6d:
         c3:b0:4a:76:2a:00:00:10:3b:c9:ff:f9:48:68:69:63:3a:29:
         9b:ff:3e:6e:ff:e1:66:f6:8c:e8:af:38:81:3d:e6:06:83:ce:
         db:bb:fe:39:1e:09:73:8c:19:07:28:72:92:49:0a:a7:41:a9:
         8b:13:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:42 2026 by rpki-client