Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/8b4e8a34-37e7-3fc8-9d80-68def8757057.roa
File:                     8b4e8a34-37e7-3fc8-9d80-68def8757057.roa (raw, json)
Hash identifier:          HUytZcXRP7JJll/WxYZ8lIaBreEHpuGbMuzZgpu0Ruc=
Subject key identifier:   24:6F:5F:0D:1E:9B:F5:00:7E:A7:FA:14:72:A3:C3:EE:FD:65:7F:70
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584F1897A95CED54D6632A222180
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/8b4e8a34-37e7-3fc8-9d80-68def8757057.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     58182
IP address blocks:        64.95.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a9:5c:ed:54:d6:63:2a:22:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=f495f14d-e3ac-4b7c-9c04-97e46efceac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:04:b7:56:25:35:a1:3c:f2:e5:c3:9d:ed:
                    29:32:37:63:25:59:d8:7e:df:70:35:a5:a5:3e:c7:
                    e9:87:6d:d3:7b:96:a3:53:7b:57:9d:09:b8:60:cf:
                    ea:de:e4:16:2f:9b:41:9c:88:e9:04:49:61:e1:6b:
                    5b:26:54:16:f8:09:b3:4f:fb:8b:69:6c:c1:e1:97:
                    68:07:e4:42:4f:78:81:43:2f:0b:80:62:4d:df:c8:
                    cf:ba:93:55:a2:e8:22:98:52:4b:07:98:0a:1b:a2:
                    f9:4d:05:ad:f6:7a:c6:d1:c3:71:06:f5:45:e9:22:
                    82:03:b2:b2:43:52:e9:da:82:29:ee:ff:00:e1:9c:
                    31:8d:3a:e7:15:f0:27:23:35:fa:f9:b1:5e:fb:91:
                    51:79:04:06:ff:6e:bf:52:53:c1:91:7d:fc:80:1f:
                    9f:00:b9:1b:98:38:38:3b:1f:84:26:05:ba:57:fb:
                    57:00:da:86:0b:c9:46:af:f9:22:86:c5:85:3a:6e:
                    32:0a:9e:a6:6b:d9:8d:55:d8:46:2e:60:0e:a7:10:
                    fe:11:64:2d:69:82:9d:0e:a7:b8:ac:f8:cd:5a:97:
                    11:19:35:af:fc:36:a4:77:7d:1e:41:0e:f7:58:84:
                    9f:5c:4b:e4:46:f8:f0:68:84:43:94:6e:0a:74:75:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:5F:0D:1E:9B:F5:00:7E:A7:FA:14:72:A3:C3:EE:FD:65:7F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/8b4e8a34-37e7-3fc8-9d80-68def8757057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:32:4c:9b:4d:91:9e:ac:a7:c6:7e:9d:fd:01:3e:0c:1d:
         11:51:28:90:ec:8b:6c:43:8b:2e:10:3e:64:c1:7e:e7:51:10:
         42:7f:49:50:d5:50:6e:8e:0b:66:63:2a:c2:f2:db:9d:6c:76:
         66:69:9a:1b:99:ca:8d:cb:40:53:32:9c:ec:f3:3f:21:2d:01:
         5b:cb:d7:ab:f6:c9:35:b9:80:89:51:2c:82:4f:61:bd:97:13:
         84:d6:cc:ce:a5:fd:86:3b:6b:5b:e5:49:21:de:51:8a:84:4a:
         7b:71:67:6c:05:36:23:6f:1f:76:6b:ac:4f:43:b8:0d:44:bd:
         3e:22:63:94:f7:ac:6c:46:d3:21:54:41:d2:5c:66:e2:ba:98:
         b4:dd:f0:84:7c:b2:39:47:e2:b1:90:53:76:8b:9f:3c:bc:b1:
         65:03:bf:92:5f:f5:b7:8b:57:80:23:c9:f3:30:51:04:09:8c:
         92:16:6c:a7:c4:c4:1e:98:4c:9e:9f:ac:4b:1a:7a:2c:d9:4c:
         78:4a:9c:b4:3d:bf:72:17:37:ce:97:93:95:b3:f5:d0:eb:68:
         4d:c1:ed:c7:86:64:5f:61:d7:b3:22:e7:1e:1f:a4:54:a9:71:
         8c:7f:5d:2a:df:ff:b1:af:b1:2d:5f:3a:8b:0e:ab:fb:07:17:
         53:61:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:59 2026 by rpki-client