Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
File:                     4d5e8188-243c-3e1d-8dd9-99991af6feec.roa (raw, json)
Hash identifier:          ToJov10ecXpTk0zLkQxDntcXCx4dv2nefI1D5CdXzig=
Subject key identifier:   77:AD:64:19:AD:2F:B4:C4:76:48:36:F0:9A:1F:00:AD:2C:08:BE:E4
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F4328584CB551DCEFB14A4C541888BC80
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     393474
IP address blocks:        64.90.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:dc:ef:b1:4a:4c:54:18:88:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=1328f00f-3e56-4318-a61b-0dc0f56cb06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:42:3e:9c:0a:6c:54:15:62:74:a0:3d:f8:
                    c0:28:a8:10:c4:da:25:cf:9d:a7:68:1e:cd:fa:1f:
                    18:04:9d:27:89:51:b9:05:70:9c:14:ae:63:2c:c9:
                    39:87:02:94:a8:1f:13:74:55:83:8b:8d:0b:1d:f5:
                    40:6a:3b:1e:76:03:bc:53:fc:b4:4f:03:7b:c6:0d:
                    b7:35:98:16:6f:70:5f:76:35:dc:e1:cb:20:c3:67:
                    53:f1:4d:70:29:c0:be:43:68:1c:a6:b3:b0:7c:b9:
                    a2:1f:37:94:a7:9e:e7:8c:31:8b:7e:62:3f:cb:2a:
                    a8:89:ca:1b:d0:3d:6e:4c:1d:65:12:8d:e4:b3:41:
                    19:fd:38:bb:63:4b:7a:60:17:d1:d9:e1:8c:17:31:
                    e9:ce:36:0c:34:dc:8d:84:d3:91:70:a4:c0:5b:8c:
                    ec:7d:48:51:9d:35:48:4e:b0:96:76:8a:5d:e5:a5:
                    6b:ea:2c:73:79:67:37:6e:79:54:c7:e2:3b:55:82:
                    fe:ba:fa:8d:e7:7f:dc:76:81:d5:e6:a4:fc:25:71:
                    76:73:be:36:4a:39:af:fa:65:95:9c:85:23:3c:67:
                    ee:97:24:08:67:8d:86:34:8c:e0:29:43:f4:6a:d2:
                    a2:ba:8c:a6:91:2c:91:c8:27:0a:df:8c:f5:0b:30:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:64:19:AD:2F:B4:C4:76:48:36:F0:9A:1F:00:AD:2C:08:BE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bd:fe:e3:ef:3a:ff:2e:cd:c2:dd:fd:55:ce:29:d9:c8:4d:
         56:c7:5a:5c:81:74:ed:34:6f:5e:56:9f:47:a1:77:d3:2c:51:
         d0:b9:36:c8:67:fb:d4:69:82:da:66:25:78:9e:de:06:6f:5f:
         30:59:d9:15:61:c3:f4:1e:85:06:cd:ab:c1:a2:64:50:11:75:
         7d:1a:00:65:2d:d2:e5:44:86:69:bf:0d:55:fb:36:a5:eb:0c:
         95:60:4b:4a:ba:5c:d4:c7:77:77:14:59:f9:d1:e2:21:f5:2e:
         f9:00:ee:cb:87:74:19:54:61:d8:9d:92:a6:e5:81:fe:15:44:
         8e:d7:c0:28:d5:75:be:ae:5a:a4:cc:db:69:bd:f0:ce:40:7a:
         69:61:8a:ed:1f:a0:b8:f9:4c:e5:a3:c9:f3:85:39:da:54:d5:
         cf:ad:38:a6:79:5d:a0:81:c5:98:94:fd:a6:b9:db:d6:7b:42:
         4b:95:61:86:61:1e:f8:65:67:69:96:36:04:03:ff:f3:d1:40:
         69:2b:eb:22:c2:cd:68:6d:e1:d2:ae:2d:af:fb:f6:ea:bd:89:
         1c:0a:3f:bf:b6:88:ec:c1:c8:17:65:f0:5d:14:01:81:c8:50:
         ed:bf:2f:c5:8a:48:c6:02:01:ed:ed:bc:9e:ea:21:06:a1:05:
         ea:36:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:34 2026 by rpki-client