Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/f259e520-7839-3d65-9501-d7eb3d3db4dd.roa
File:                     f259e520-7839-3d65-9501-d7eb3d3db4dd.roa (raw, json)
Hash identifier:          EkbE8Nbu+co5dQzpLP3XpGbwNaHi78cKl8moRCyLiog=
Subject key identifier:   B7:A7:86:EA:DB:D3:4B:4A:B4:4E:F1:3C:51:B9:D0:AD:99:A3:13:8A
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584E15E4375A7CE9C2C0D23DA980
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/f259e520-7839-3d65-9501-d7eb3d3db4dd.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22079
IP address blocks:        64.186.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:37:5a:7c:e9:c2:c0:d2:3d:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=db486eb5-1528-4280-bc47-7f4892ed3182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:c5:df:6d:bb:ab:3d:f3:8f:42:56:b9:c3:
                    52:60:0a:61:af:e2:e5:60:23:fc:7f:b0:bf:91:4d:
                    d9:08:e2:31:88:0f:ae:68:a0:0a:9a:4e:4d:82:51:
                    da:07:3e:ac:f3:cb:ff:59:6d:bf:a2:a5:aa:fc:ef:
                    94:cf:3f:44:45:7a:a5:bc:9b:e7:64:1a:41:01:67:
                    e5:4a:25:58:c0:4f:08:4c:d2:a2:f8:15:ca:3f:d3:
                    c7:27:73:cd:1a:c7:6f:1b:41:f9:3e:5e:6e:66:05:
                    d5:01:20:f5:bd:0e:fb:cc:20:9e:49:3c:6e:aa:27:
                    8c:cf:e6:2c:19:07:5d:41:3c:9c:f1:ce:ae:53:ac:
                    23:09:8c:ae:0c:03:a4:e2:11:ed:87:a5:5d:b1:0d:
                    33:12:f4:d0:9c:29:24:e3:9b:4b:c4:88:ab:5e:95:
                    ac:fa:4b:ae:89:a3:99:46:6d:4c:f4:2f:54:f9:fb:
                    47:9f:55:ac:64:7c:1e:01:5a:c5:61:92:aa:73:53:
                    95:ae:6d:12:40:cd:cd:3b:10:7b:0e:f1:5d:9d:98:
                    24:3f:2f:c2:74:c1:c2:0b:fb:a7:d2:ff:35:70:b1:
                    67:c7:f8:6c:8b:22:2e:02:bf:dd:86:dc:ce:5d:43:
                    ad:34:b5:f5:f0:11:f9:d6:34:86:b9:dc:68:23:df:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:86:EA:DB:D3:4B:4A:B4:4E:F1:3C:51:B9:D0:AD:99:A3:13:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/f259e520-7839-3d65-9501-d7eb3d3db4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:b9:bf:f4:5d:88:fd:20:98:66:9d:30:69:4d:1a:8d:d3:
         1a:f4:dc:2b:ec:d0:5e:0d:65:0c:36:c0:cf:10:27:74:55:73:
         24:cf:36:5f:ea:32:dc:f4:e2:23:4e:25:0b:5e:59:7d:8c:a2:
         58:03:e6:8e:a9:30:7d:f7:ce:c1:34:3f:ae:87:d7:e8:0d:31:
         28:4f:88:f3:e5:c6:23:4c:27:db:e2:fe:80:a8:f8:b5:a7:f3:
         6f:c2:bd:57:a3:e7:4c:7e:47:f5:ee:14:7b:54:ef:50:07:aa:
         1c:d9:ab:a2:e6:85:3c:f9:98:dc:d6:7b:58:ad:3e:61:8e:ed:
         52:92:f0:4f:9d:89:bb:01:b6:9e:ba:f2:74:da:6e:c3:41:75:
         76:6b:cd:49:95:9d:07:84:db:66:a0:95:01:19:92:35:e5:ef:
         62:f1:b0:24:cf:ca:c4:0e:ce:7a:ee:ee:bc:c1:9c:2b:05:ae:
         cd:58:64:4f:5e:9a:bd:b6:5f:00:bf:ff:67:b1:99:76:1d:3a:
         29:da:6f:a5:d0:ea:32:b1:f8:6d:0d:a3:94:14:f6:b9:e5:4c:
         17:3d:ec:05:65:19:4e:fb:bf:d1:eb:0c:fb:53:2b:6e:77:57:
         b9:56:92:b2:09:96:79:4b:a7:77:3b:62:b3:f7:8b:e0:5c:86:
         f5:c1:5a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:42:58 2026 by rpki-client