Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f7d86c8a-c685-375e-a169-42ffc62c2508.roa
File:                     f7d86c8a-c685-375e-a169-42ffc62c2508.roa (raw, json)
Hash identifier:          p7CzIGSQMihMKF7CJye/pdzbpIrbvO6PNJzdSwm4PTQ=
Subject key identifier:   F2:DA:9E:15:6F:66:89:BC:BF:72:13:57:39:66:86:3E:A8:F5:A2:9B
Certificate issuer:       /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
Certificate serial:       010D0C9F4328584D7A051F9CFB64E41825C547E0
Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f7d86c8a-c685-375e-a169-42ffc62c2508.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        64.234.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:1f:9c:fb:64:e4:18:25:c5:47:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=1cfc30d4-bad7-4100-8404-737b5e37b740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:fd:a6:52:ec:9b:15:43:9d:23:a2:78:f1:
                    69:e3:f0:10:d0:aa:00:2e:57:92:f5:02:1e:d2:43:
                    e9:20:ce:5a:09:47:98:e0:77:f4:03:6d:a0:db:ec:
                    6a:23:a2:23:49:76:4f:0e:04:d1:98:e7:81:07:ef:
                    58:d9:b4:c5:d7:04:3c:a3:1f:88:09:d2:e8:d7:a7:
                    f6:8b:0f:fe:e6:e0:51:a2:13:e1:49:ee:51:9e:a5:
                    00:6c:c1:10:dd:a2:5d:9c:6e:50:ec:7c:da:be:6b:
                    cc:20:2b:f9:e3:91:5b:f6:b3:25:f2:42:6b:bf:2c:
                    de:9e:86:c6:12:fc:7c:e3:22:9b:b0:3c:86:73:55:
                    39:f0:39:0b:ee:20:26:bd:68:14:a1:32:60:01:6f:
                    45:17:aa:34:a9:1b:d8:ff:e5:d7:84:ab:95:00:79:
                    9f:bc:48:ca:2c:55:a5:09:eb:a0:1c:cd:ef:20:c2:
                    ec:bb:d1:5e:36:86:3e:3a:fb:15:05:ff:af:22:e1:
                    4a:8e:44:fa:81:1f:16:85:ae:7f:20:97:aa:6e:b2:
                    4b:8d:83:d8:15:a2:b9:ae:d7:1a:aa:80:6d:a7:59:
                    39:22:d4:87:10:f3:9b:be:81:e8:fb:28:fd:64:4a:
                    86:4b:c1:7c:50:9b:49:30:47:a0:68:35:3f:a0:3a:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:9E:15:6F:66:89:BC:BF:72:13:57:39:66:86:3E:A8:F5:A2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f7d86c8a-c685-375e-a169-42ffc62c2508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl

            X509v3 Authority Key Identifier:
                keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8a:be:55:9d:12:9b:75:c4:e0:5b:f1:21:cb:47:f2:24:71:
         62:81:ab:8b:01:92:8a:1c:16:30:1f:7f:74:8f:bc:b0:b6:13:
         d6:9d:60:1b:cc:2d:fe:19:01:7a:a8:0e:fd:52:7f:22:ac:93:
         a4:9e:ef:98:e8:6c:b8:80:3b:67:2a:f2:06:d4:3d:4b:2a:0a:
         a4:f7:27:87:5f:4c:d0:5d:31:f4:fc:08:56:20:a5:4f:d6:2d:
         0c:33:74:25:f6:63:27:4b:4f:09:3d:47:07:ce:4a:08:de:b6:
         58:15:74:cd:39:bd:16:ec:d6:38:47:c4:ea:90:f2:0a:b7:3c:
         97:e3:2d:fb:be:57:75:4e:40:60:ae:65:07:d0:4c:eb:d3:44:
         f1:bb:42:8d:05:ff:c5:26:35:c1:b8:ad:be:93:6c:ee:71:6d:
         0d:62:35:2f:27:0e:3a:ae:83:3b:f8:1f:53:ce:02:1a:dd:cf:
         72:b7:96:7a:31:fa:8c:b9:17:9d:e9:bc:8f:74:08:99:c2:13:
         b8:bd:af:09:68:39:25:9a:d4:d4:8b:3f:2e:57:47:13:9b:1f:
         71:46:35:8d:20:cf:d1:b4:28:4f:6e:d9:38:27:8e:27:7a:ac:
         61:3c:64:38:41:00:36:50:81:e8:3e:80:e1:25:55:84:c0:d2:
         27:76:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:05 2026 by rpki-client