Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f108ed38-b905-39e9-b132-2a4727055b25.roa
File:                     f108ed38-b905-39e9-b132-2a4727055b25.roa (raw, json)
Hash identifier:          /3I0ZQSTXzy3Q4jwgR5MAqu8YoaDZEU0/gEd06GedNw=
Subject key identifier:   8F:AF:70:ED:31:F0:B4:28:0C:32:94:05:2D:31:08:A6:C8:1B:C7:E4
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F7A48F0DF5CE8A40A07700
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f108ed38-b905-39e9-b132-2a4727055b25.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     397630
IP address blocks:        64.16.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:a4:8f:0d:f5:ce:8a:40:a0:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=426479d2-38c4-4124-b6be-7344b19852e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:03:e3:91:ce:3b:14:24:fc:fc:6c:16:66:9b:
                    ba:79:13:12:8a:ac:99:7f:a1:fc:d1:d7:d6:4b:8c:
                    dd:ae:a9:77:2d:56:30:91:f9:f9:54:0e:c6:a1:47:
                    43:c9:a5:9f:b4:b8:5e:ff:d5:cf:9c:67:6f:2f:67:
                    ca:1c:06:57:71:ec:7d:76:ba:48:2b:25:ef:b6:9f:
                    04:dc:93:66:22:24:44:cf:f6:32:72:8b:c9:12:97:
                    09:9d:53:4c:6a:93:54:b7:7c:3b:e7:4c:85:b4:d8:
                    e3:c8:2c:c7:c3:f1:85:53:88:59:7d:61:cf:dc:7d:
                    8d:9c:94:cb:93:bc:47:d4:d2:33:2a:7f:e4:27:e6:
                    db:ef:8d:75:a9:28:ac:4b:bb:65:76:10:32:cc:71:
                    9b:a2:47:70:eb:06:25:4f:07:84:5a:50:d0:34:8e:
                    1b:f4:eb:08:64:42:75:00:a1:57:3b:86:51:94:ff:
                    96:6f:e7:56:9a:ad:38:39:89:50:08:df:a3:4e:cb:
                    ac:8d:40:ee:43:c3:dc:6f:bc:54:0f:7e:fd:d6:49:
                    66:3d:70:d3:20:07:1b:8f:f4:9b:6d:24:bb:f5:be:
                    8d:dc:de:74:1c:71:a9:4a:34:8d:f3:38:b1:7a:1d:
                    a5:ff:76:08:4c:5d:65:8f:3c:7e:4a:3a:a7:82:31:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AF:70:ED:31:F0:B4:28:0C:32:94:05:2D:31:08:A6:C8:1B:C7:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/f108ed38-b905-39e9-b132-2a4727055b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:be:86:7a:57:87:e9:85:01:ea:b8:5f:fd:39:3e:c5:ef:
         22:4c:0d:79:64:1e:ff:a4:93:d7:66:81:e3:44:95:3e:77:2b:
         9a:30:f7:a4:00:18:7f:ef:ec:01:a0:e8:2e:65:23:90:ec:5d:
         06:66:6a:61:4f:79:be:6d:05:39:2c:a2:c7:18:a8:88:a1:2a:
         e1:ea:af:55:b2:38:45:5b:5e:a6:50:b7:78:86:a4:41:f6:88:
         20:29:4f:2b:c8:60:69:37:ce:20:1c:6f:cb:0f:e2:44:49:eb:
         cd:b9:e4:8f:fe:f5:a7:14:d8:b2:2b:b8:ec:e6:f8:8e:03:a3:
         8e:a8:30:eb:85:88:06:cf:62:f9:0c:ac:e7:62:e5:45:e7:23:
         7c:95:e7:d1:c9:6b:49:3b:38:07:10:1b:35:36:f9:03:4b:1c:
         ac:34:ad:93:f4:12:bd:34:cd:1f:db:04:f5:98:87:df:11:fe:
         f9:79:34:5e:4d:43:a2:b4:d9:c9:6b:56:35:15:21:86:57:21:
         aa:b9:8f:e8:9d:53:3a:0e:5a:a9:20:fe:96:a5:88:9e:03:67:
         a9:e5:24:98:04:53:70:60:57:3d:63:e9:49:8a:32:9f:4f:e6:
         37:2b:c4:c4:40:36:1d:79:41:8a:c5:82:3f:9d:58:63:60:7a:
         9a:2f:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:45:34 2026 by rpki-client