Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
File:                     da2805f3-2f45-37d2-81ac-675892bd2fa3.roa (raw, json)
Hash identifier:          pKUtDAGd548BiSwn0psFigGo6pnVgtX1dbLdhnjQd8s=
Subject key identifier:   CD:8F:CC:7F:A8:3E:F0:40:20:F2:41:99:4E:DE:68:07:1B:1C:9B:E6
Certificate issuer:       /CN=82d0f472-6865-4d16-9252-e75f7b91368a
Certificate serial:       010D0C9F4328584D76CACC0937213D10B5F7E100
Authority key identifier: 91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa
Signing time:             Fri 10 Apr 2026 21:15:34 +0000
ROA not before:           Fri 10 Apr 2026 21:15:34 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     401382
IP address blocks:        64.190.20.0/24 maxlen: 24
                          167.150.24.0/22 maxlen: 24
                          2602:f7e7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:76:ca:cc:09:37:21:3d:10:b5:f7:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d0f472-6865-4d16-9252-e75f7b91368a
        Validity
            Not Before: Apr 10 21:15:34 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=1df9c7fc-74a1-4f86-bd92-d0c683a98b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:ba:aa:1c:74:30:77:e0:d2:48:e9:0f:44:
                    00:a7:0c:7c:83:5c:df:ce:dc:4f:f5:06:c7:86:ad:
                    1c:71:02:86:34:ed:c6:83:75:36:b3:70:65:dd:f5:
                    13:5f:c3:06:56:93:92:4b:97:f0:bf:b5:c3:4c:0d:
                    98:99:02:82:dc:53:15:0a:46:97:b2:73:80:2f:4a:
                    cc:d2:1b:fe:a4:92:dc:74:8d:8d:a0:08:54:b1:7e:
                    ab:75:98:c3:f9:7b:3c:a6:59:80:98:48:43:5d:43:
                    aa:02:a7:96:7b:2f:f7:cf:f0:45:b5:3c:72:c5:6a:
                    e2:f5:10:d8:66:7b:f1:41:ee:45:54:13:12:08:61:
                    c4:59:06:ea:88:d9:9a:25:b9:54:b5:94:f0:57:5a:
                    d0:91:a4:28:73:a4:13:94:c1:c9:96:84:ad:bd:17:
                    63:ec:ed:55:ff:70:e6:22:c5:55:4d:f6:05:a7:47:
                    17:ad:4a:00:b2:9e:88:a2:52:54:6f:a4:6f:81:4b:
                    52:5f:4a:91:93:2a:1e:b2:cb:3e:8d:ee:d2:ed:82:
                    45:04:2e:a2:7e:7d:d0:e9:34:aa:03:92:e1:1c:dd:
                    e7:7a:cd:e9:b2:a8:1a:8e:04:f3:aa:94:ce:b5:99:
                    fe:85:65:b5:e9:72:0b:e0:2b:fd:ba:dc:79:d2:fb:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8F:CC:7F:A8:3E:F0:40:20:F2:41:99:4E:DE:68:07:1B:1C:9B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/da2805f3-2f45-37d2-81ac-675892bd2fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a/82d0f472-6865-4d16-9252-e75f7b91368a.crl

            X509v3 Authority Key Identifier:
                keyid:91:F2:68:F5:92:28:40:C7:86:D1:B2:A2:58:B7:AE:F9:4D:9E:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/82d0f472-6865-4d16-9252-e75f7b91368a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.20.0/24
                  167.150.24.0/22
                IPv6:
                  2602:f7e7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:cd:fa:a0:14:f1:20:ae:46:8d:41:89:59:1f:86:c3:25:
         1a:77:d4:0b:82:69:14:b2:61:88:87:c8:b2:05:6b:bc:66:38:
         de:6a:cf:35:b5:b9:b0:7b:18:4d:d8:c5:eb:c9:21:6a:b5:63:
         cf:ed:33:95:0e:e5:97:b1:5e:77:eb:e4:dc:fc:03:69:86:0e:
         eb:d7:26:2c:64:c0:ef:d6:ce:53:00:19:73:b5:c1:3d:ab:4c:
         53:9b:5d:3f:c4:a8:aa:5c:7d:26:8e:18:b9:db:f6:4a:ef:97:
         59:6d:38:9f:4b:41:7e:28:4e:ed:fc:58:69:a4:a4:18:1e:99:
         93:6b:41:87:1d:b2:8b:45:6b:f0:e9:c8:79:f5:64:20:b6:ce:
         aa:d4:35:36:f8:4b:38:f3:9f:fb:2d:35:1e:82:93:67:d5:c8:
         9e:cd:a0:39:78:2a:55:f0:2c:3d:6a:fc:e2:df:10:da:47:b6:
         bd:61:a4:15:b5:3d:39:0f:d7:a5:00:6f:53:ac:0e:e3:75:a2:
         1e:1d:83:64:21:2e:21:56:54:5d:95:42:80:e4:ad:91:03:9d:
         f5:17:86:13:fb:10:47:0d:1e:e5:42:22:51:8e:43:a9:1e:c4:
         c7:30:d6:0d:b3:75:9f:eb:30:17:cd:81:30:2c:c4:ce:9a:30:
         02:83:cf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:28 2026 by rpki-client