Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa
File:                     a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa (raw, json)
Hash identifier:          FbZkMmVl9xIQA8K+yF+LBPH2lV4bwSe1z20RSC1CovA=
Subject key identifier:   5B:3B:48:ED:3D:C7:C5:FA:53:1D:04:53:8B:ED:86:FF:DC:AB:A0:9C
Certificate issuer:       /CN=692aac29-6d3b-4bdf-9238-da449246d5ab
Certificate serial:       010D0C9F4328584D7A0533ACD6F8788BCD2DE078
Authority key identifier: EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     5650
IP address blocks:        64.40.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:33:ac:d6:f8:78:8b:cd:2d:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692aac29-6d3b-4bdf-9238-da449246d5ab
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=3fd617e2-fb08-473c-a6ea-c8c7dfc11e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:04:05:de:0c:f5:55:b8:b9:2a:9a:a2:52:
                    0e:62:a7:2f:00:95:74:cd:83:27:6e:0b:5a:c9:6a:
                    32:e7:d9:42:75:3f:0a:49:9e:1d:b3:0b:bd:fc:eb:
                    24:e6:c2:1d:be:b6:a3:ef:d3:fd:6f:6d:26:61:99:
                    fe:a8:4f:c8:93:99:c7:d1:98:4a:b8:eb:f0:8e:bd:
                    26:7c:3e:6e:4b:70:2e:28:61:9b:6c:29:cd:0f:0c:
                    a4:93:8b:fe:ce:5c:a7:25:c1:d9:9a:98:c0:79:51:
                    4d:74:1e:40:7f:fb:09:32:4a:0b:be:9f:3e:7a:00:
                    ee:3a:2f:2d:99:75:af:80:2a:e0:70:f5:f5:97:4c:
                    f0:64:a2:88:85:9a:74:d3:02:62:51:c3:b7:32:cb:
                    c7:bf:95:e6:be:cb:e9:8f:2e:5b:60:c1:9b:11:a4:
                    69:98:df:86:1d:ef:ae:3f:5d:53:15:05:72:f3:da:
                    2f:4d:fe:87:d3:d6:bd:69:ee:2a:a9:c7:92:47:7f:
                    85:ea:ab:fe:c6:76:fe:fe:0e:07:18:79:53:bf:a8:
                    2f:9b:2e:30:e9:65:34:01:ea:83:e2:35:74:3d:ea:
                    94:6d:93:43:1a:25:1e:c5:99:df:ba:1a:89:13:33:
                    36:4e:f2:84:2b:79:fb:ab:da:d3:d3:03:cd:18:95:
                    5a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3B:48:ED:3D:C7:C5:FA:53:1D:04:53:8B:ED:86:FF:DC:AB:A0:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/a8c2ee2b-10da-3539-8d2b-ababe318d7d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.crl

            X509v3 Authority Key Identifier:
                keyid:EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:28:ae:8f:2c:87:70:08:b3:d6:cb:b1:e4:2e:cc:71:7b:49:
         f6:55:c9:d9:c5:6d:bd:72:61:45:f0:67:1b:bf:cc:f1:71:02:
         2b:0a:77:de:a5:45:e1:dc:69:0f:7b:13:7e:8f:b7:71:41:11:
         94:6e:58:8a:87:fc:60:1d:27:65:9b:58:3e:92:8c:1b:90:5a:
         a0:1e:82:b8:ce:ee:36:3a:92:4e:e9:a6:7f:e4:82:9d:77:82:
         83:d4:2f:ec:3a:48:53:0f:41:07:37:69:c2:fd:23:4e:d5:2d:
         37:c0:3d:ab:e1:03:df:8c:d8:fb:ae:00:b9:13:31:92:20:e5:
         60:c4:8d:b9:b0:3e:0d:c2:84:17:b9:01:45:de:5e:5c:b5:ca:
         23:40:a7:70:2f:fb:68:d1:03:01:b3:c8:e0:54:aa:93:de:0c:
         2b:11:92:92:ae:d0:8c:ce:5d:96:c8:5e:72:68:5f:ca:ed:60:
         9d:7c:d0:d9:0f:a4:1a:c1:21:69:c4:d0:90:a5:6e:fa:3e:a3:
         3b:ef:bd:69:af:6b:0b:39:65:60:76:c3:00:7d:32:51:0e:19:
         e9:a0:12:0f:01:64:9a:09:9a:6d:85:6e:50:0d:40:8d:04:4b:
         e4:ef:f4:58:d3:d0:d6:93:d9:61:1d:14:87:a3:f3:60:24:70:
         40:8a:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:25 2026 by rpki-client