Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a810223a-024a-3959-960a-99f4869de95f.roa
File:                     a810223a-024a-3959-960a-99f4869de95f.roa (raw, json)
Hash identifier:          6StFUFdelCxqjrCxSI5X5fCB92rc8mTTmgSCloKIs+E=
Subject key identifier:   52:9D:BE:D7:2F:90:E5:30:19:F6:55:6C:9F:73:86:FD:E1:FC:1F:99
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584CB057F293A3B5565AD2FABF00
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a810223a-024a-3959-960a-99f4869de95f.roa
Signing time:             Tue 13 Jan 2026 02:00:31 +0000
ROA not before:           Tue 13 Jan 2026 02:00:31 +0000
ROA not after:            Mon 13 Apr 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        64.40.128.0/24 maxlen: 24
                          64.40.142.0/24 maxlen: 24
                          64.40.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:57:f2:93:a3:b5:56:5a:d2:fa:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Jan 13 02:00:31 2026 GMT
            Not After : Apr 13 01:00:31 2026 GMT
        Subject: CN=5c98a5f7-c359-45e0-a3ed-15f528037888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:65:c4:2b:06:eb:81:57:3f:4c:ce:3e:8f:
                    75:5f:33:bc:b9:99:73:6a:ab:18:d8:a9:22:12:aa:
                    60:59:37:ef:7e:7a:0f:ae:09:00:61:82:ab:0a:bf:
                    a4:d8:18:ad:f6:c0:8d:18:d9:22:e4:8c:5d:a6:9d:
                    5e:57:bd:e0:9b:c8:df:5a:40:d7:b1:b2:8b:d0:73:
                    e7:aa:fc:37:8a:ea:0f:07:ef:33:2d:76:bb:6e:6e:
                    57:80:3a:8f:57:bb:bd:83:73:29:45:49:28:1d:26:
                    6a:bc:db:86:7c:9e:85:f7:8b:57:8d:fa:8e:20:43:
                    43:f7:16:ad:37:fc:a8:de:27:8e:72:ee:96:67:7b:
                    82:00:54:4e:3b:d8:d7:2d:4d:9e:a3:8b:34:02:bc:
                    69:bb:6e:55:b3:bb:22:69:b9:91:b2:d0:9e:4e:54:
                    11:24:67:d6:ec:67:e3:bd:c5:34:da:4d:93:43:c7:
                    b9:40:29:81:8c:40:6b:8f:e2:41:3c:67:3b:7d:44:
                    48:f4:f4:77:7c:9d:fd:de:3b:10:1e:15:d3:8c:c2:
                    03:2a:00:a7:a1:a1:bd:25:ec:bc:43:08:ec:09:a9:
                    cc:6d:d3:67:a0:c0:52:8b:cc:eb:a9:9d:27:e2:c3:
                    b6:f1:2e:e2:55:67:9a:18:6c:7d:fd:95:7b:bf:77:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:BE:D7:2F:90:E5:30:19:F6:55:6C:9F:73:86:FD:E1:FC:1F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/a810223a-024a-3959-960a-99f4869de95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.128.0/24
                  64.40.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:6f:f6:b3:5e:55:c1:94:41:0b:4f:36:70:6c:96:3d:85:
         28:81:fd:44:ab:b7:4d:42:55:60:eb:48:fe:ab:fa:88:52:a7:
         d4:9a:bc:aa:1b:b2:bc:08:40:f6:ff:1a:e4:fe:ea:af:72:e5:
         f7:87:f6:09:6d:78:6a:10:0b:cc:38:de:36:3a:62:43:de:85:
         7a:fb:19:5b:ee:1e:69:2c:13:33:a9:80:94:6e:7b:11:d4:ec:
         e0:8a:bc:d9:e3:78:ce:11:66:fb:06:99:c0:98:5f:bc:bb:f3:
         7b:1b:e9:ae:b0:1b:3e:02:f8:11:ff:db:fc:b9:00:34:37:1f:
         9f:8f:c1:e4:57:d2:39:4b:93:f4:7e:30:13:f1:3a:df:68:5e:
         d0:ff:63:b1:ea:19:74:70:e6:57:a7:87:0c:28:ba:d9:6b:c3:
         34:d0:7c:66:1e:65:c1:d4:22:eb:62:82:7d:60:c4:12:f4:9a:
         eb:70:c6:3b:01:f3:96:4e:2b:d3:fd:45:f7:12:8f:b8:d7:20:
         f1:c4:91:4e:c5:50:d5:69:e1:9c:b4:f8:99:a1:44:ee:9b:ab:
         c1:9f:8f:d1:f8:77:79:dd:fe:2d:40:0f:31:50:da:00:18:2e:
         74:1e:ec:11:90:00:eb:4b:3c:d8:a2:44:8a:c2:a3:aa:5f:df:
         a5:35:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:48 2026 by rpki-client