Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff1fd84b-06b7-35b2-8f96-6708889ef001.roa
File:                     ff1fd84b-06b7-35b2-8f96-6708889ef001.roa (raw, json)
Hash identifier:          TgksscQgdFsdnLJmFiURX4Cjrotq94UsORTYgBWBCnE=
Subject key identifier:   1A:31:97:B9:51:AA:06:FE:CB:C1:43:08:2F:3E:4D:A5:EC:91:E8:7E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584D5E1A649B58FAADE4B89DFCC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff1fd84b-06b7-35b2-8f96-6708889ef001.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6461
IP address blocks:        64.124.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:64:9b:58:fa:ad:e4:b8:9d:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=eabcd9b8-d748-4248-9a27-9d04beac0870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:b9:e0:bd:19:16:95:ba:e3:fd:2e:70:fa:
                    d8:05:30:7d:db:9d:59:39:61:02:02:3a:72:4a:b0:
                    d3:ba:04:bd:e5:3e:57:4a:f8:e9:90:76:3f:30:43:
                    c3:d0:02:4b:5c:03:0f:b6:e5:ce:6a:6e:b4:0c:44:
                    10:bf:e5:c8:79:b2:1a:dc:5c:67:b0:cb:69:3a:0c:
                    01:1e:ca:7f:bd:f6:ee:12:92:e9:ff:64:b1:6c:b2:
                    12:97:18:1d:1c:2a:58:99:5b:fa:c0:58:e4:f0:85:
                    47:46:4f:84:fe:32:20:83:7b:46:c7:e8:d9:3f:41:
                    ec:18:56:4f:f3:00:29:50:93:1c:27:88:a5:3c:60:
                    cd:e2:15:a0:4e:f9:f5:0a:3e:b8:e9:61:8c:3f:98:
                    94:40:d3:fc:30:a6:a2:8c:01:20:ab:fc:22:95:8b:
                    b3:ab:8b:c1:ef:80:fc:b7:b6:e1:4c:cc:eb:34:30:
                    43:a3:1e:23:ed:61:fe:b5:b8:91:8f:f1:9c:12:d6:
                    74:ba:23:f4:c5:c2:bf:26:65:49:c7:c5:6a:31:82:
                    9c:31:98:cd:de:14:f1:6e:ac:37:cf:ee:d9:90:5a:
                    15:b6:ff:ba:09:04:43:b5:6c:73:29:c1:ae:a0:a9:
                    5f:ff:80:4c:92:e9:13:f9:a1:b0:ab:cd:b3:5d:39:
                    03:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:31:97:B9:51:AA:06:FE:CB:C1:43:08:2F:3E:4D:A5:EC:91:E8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ff1fd84b-06b7-35b2-8f96-6708889ef001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:7c:b5:62:95:e2:d6:7f:cf:ce:b4:ac:ed:bc:a3:e2:40:
         55:82:80:5b:fd:fb:95:de:00:7b:de:ba:8a:d0:5f:2e:bd:ae:
         63:37:04:cc:b2:ba:52:43:e2:93:24:b2:f8:53:68:28:c0:4c:
         cc:0b:85:74:a8:f9:19:0f:64:9e:9c:c4:c7:f3:60:5e:5d:f4:
         d5:00:18:1e:06:8d:35:7f:93:ae:f7:36:38:97:b9:3d:03:41:
         1a:d5:81:af:9c:e4:c9:cd:04:8d:c9:46:3d:0f:c8:69:00:82:
         50:8b:4c:74:fb:f6:30:b7:6a:f2:b9:d0:ed:4f:3f:d6:7c:20:
         0e:61:e5:6c:a5:78:e0:9a:50:71:a5:5e:49:c5:80:9b:10:58:
         28:3e:9e:89:cd:a2:ec:b5:14:01:a1:52:cb:40:73:b2:98:de:
         15:61:75:fe:bc:c0:f6:40:48:5d:5b:47:a7:68:5f:66:99:4c:
         cc:72:d9:a8:1e:62:6c:1d:3f:da:d9:a9:52:be:ec:5c:9b:77:
         5d:e5:4d:3f:48:74:cc:13:2f:fb:b2:a1:49:57:ff:38:3a:f6:
         d1:20:81:b6:32:8e:cf:11:bc:b5:2b:e4:65:39:0b:08:ea:9a:
         95:00:38:69:b3:fa:86:11:12:a2:86:06:2f:3d:95:69:56:e7:
         34:6a:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:16 2026 by rpki-client