Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/da82b637-9fa0-3c8c-9794-6717d046a405.roa
File:                     da82b637-9fa0-3c8c-9794-6717d046a405.roa (raw, json)
Hash identifier:          uYlc91LZa1WDe9PN3juedwWKBttOQbw5B4xolOKpgQE=
Subject key identifier:   09:AC:D9:3F:DA:16:30:81:D6:BC:48:E3:CE:65:38:B0:39:0C:D3:85
Certificate issuer:       /CN=81565da9-aab9-45ca-b99c-0684053daa09
Certificate serial:       010D0C9F4328584E0005E3EC25E95C4CDE6370C0
Authority key identifier: D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/da82b637-9fa0-3c8c-9794-6717d046a405.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     209
IP address blocks:        149.64.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e3:ec:25:e9:5c:4c:de:63:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5cca7437-4583-4ca3-b3d9-a8e725743ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:d1:5f:2f:8b:8d:0b:66:b4:2e:54:ed:b9:
                    a4:30:e0:d3:15:e2:45:c7:d9:87:c3:8f:a1:13:e8:
                    67:c3:54:e0:5a:0f:84:54:de:0b:87:f1:eb:12:cb:
                    f9:2c:38:54:bb:68:46:db:9b:c8:73:0a:7e:b7:35:
                    9f:b8:e1:2e:6c:6f:a7:0b:73:9e:40:e6:75:5d:ca:
                    f2:61:a2:d7:2b:9d:a3:ef:88:ec:8d:b6:43:02:7d:
                    d7:82:87:f9:ef:b0:61:4a:3b:cd:ba:b4:0f:78:f8:
                    03:51:00:b7:c1:19:d0:18:b6:3d:e1:85:ae:e3:e2:
                    44:85:58:df:33:e2:36:3a:c8:3a:b3:98:02:ed:0f:
                    54:d9:88:a9:91:e5:27:22:d9:e6:04:36:54:a2:4a:
                    c5:88:ff:22:06:96:75:d4:a1:f5:6f:b1:9f:f4:78:
                    d2:2a:0c:11:d0:e2:b8:19:fb:97:66:a3:1a:6f:48:
                    e8:aa:0c:92:74:7c:18:57:5b:f0:94:b2:5b:b1:63:
                    b8:ba:8e:06:52:bc:98:59:c5:79:8b:17:72:f0:47:
                    58:71:32:e1:d7:80:c4:27:c9:bb:15:bb:c9:b8:18:
                    50:cc:5a:56:41:d5:46:50:6a:bc:76:c0:3a:38:5e:
                    98:98:b7:1f:2d:d1:55:58:e7:51:f3:af:e9:1c:0c:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:D9:3F:DA:16:30:81:D6:BC:48:E3:CE:65:38:B0:39:0C:D3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/da82b637-9fa0-3c8c-9794-6717d046a405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.crl

            X509v3 Authority Key Identifier:
                keyid:D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.64.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:17:1e:ca:46:50:c4:55:37:f4:ce:a5:a3:e5:bb:e0:a6:a9:
         a4:0f:e5:d3:f0:35:8d:2e:62:1b:59:2e:6a:b9:48:7a:6d:36:
         78:20:7e:08:34:23:23:97:a2:5d:d6:21:c4:75:23:53:c2:b7:
         e5:a9:af:95:e9:09:1e:3e:2f:6e:c4:41:b1:c5:29:2d:db:f8:
         53:23:55:3b:3f:58:ea:4d:18:0f:48:3e:de:fa:b0:27:cc:91:
         55:95:da:f7:2e:83:98:fe:a2:d9:80:24:f0:b6:86:57:b8:8f:
         e2:df:3d:b4:d9:b7:dc:b5:b5:d4:d0:b9:47:2c:a7:2b:bd:f1:
         b2:e7:92:40:fb:06:05:20:d2:7c:3d:9d:97:40:e5:3e:12:94:
         cf:68:75:41:cd:3a:a8:83:fb:dc:94:05:89:5f:00:f7:f5:33:
         d3:d8:ee:2c:df:3b:b6:c8:44:dd:4d:2c:0c:4f:4e:fd:91:90:
         f8:68:1e:3f:da:ff:12:cc:6c:ae:5a:e2:ce:44:44:e4:18:85:
         44:d5:6f:f8:4c:22:50:1c:5b:0a:cd:4c:67:7b:b2:50:1c:c2:
         27:15:a6:3e:3a:ae:30:bd:33:86:65:7c:b1:94:70:49:2f:c1:
         c3:fd:23:23:1b:44:17:7b:b7:80:b7:a1:b1:f2:21:a3:d6:62:
         3c:40:5d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:34:41 2026 by rpki-client