Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa
File:                     97f890fe-71d3-33d7-957d-44290971906e.roa (raw, json)
Hash identifier:          lW6eqCfrdXP8tFwbYHrekTB0IoWze6hpdoU2iuwkiV0=
Subject key identifier:   0E:A1:D0:38:C5:58:9C:43:59:D8:93:5F:57:D3:1F:82:AF:7B:89:24
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E08664B36E1D0A8A82839F370
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        64.9.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:4b:36:e1:d0:a8:a8:28:39:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=c5c75ad7-a910-412c-bd20-12b8096ac69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:b6:79:34:fc:bf:d4:5b:d1:99:c9:94:e8:
                    41:f7:cf:14:cd:46:c1:09:cc:bf:dc:f7:de:28:7a:
                    97:83:0c:39:01:66:0e:5a:ad:74:05:7e:1e:26:9e:
                    1a:8a:cb:fa:25:b2:d0:dc:29:66:72:58:86:84:ff:
                    29:01:32:10:d1:90:09:96:4c:a0:e3:82:53:49:79:
                    80:e3:a4:d7:ae:73:74:ad:d0:08:d8:b5:e3:e1:97:
                    5a:db:13:83:ef:8c:14:34:fb:95:3e:dc:9a:1f:4c:
                    0d:64:fd:4a:54:09:11:31:d8:b0:e4:00:cc:25:68:
                    8e:30:01:2e:29:84:a0:0f:91:32:1a:5d:f9:8a:08:
                    a5:a1:31:3b:6c:54:33:50:56:99:23:90:98:de:84:
                    af:30:1c:82:05:b0:fd:77:74:66:c8:64:e8:e2:a0:
                    e9:ef:97:a2:67:ab:5d:56:06:a2:cb:2f:11:e1:cb:
                    bc:9c:b9:ec:78:75:0c:27:de:8d:86:00:75:91:3b:
                    d8:ad:01:22:f7:80:94:c3:61:4f:e2:88:0b:32:1d:
                    37:17:07:98:cd:0c:97:23:db:5b:7a:95:92:29:5a:
                    f1:ca:cd:27:b0:2f:77:aa:48:bf:0a:04:49:f7:e9:
                    d9:65:55:46:4a:69:4a:42:ad:d0:d4:ee:a3:dc:dd:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:D0:38:C5:58:9C:43:59:D8:93:5F:57:D3:1F:82:AF:7B:89:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/97f890fe-71d3-33d7-957d-44290971906e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a9:0e:38:03:3e:17:e9:5d:d5:57:b7:1e:b6:c9:1b:f9:25:
         d6:f6:a7:c8:14:14:fd:7c:13:d5:16:ef:d2:e2:82:1f:1d:5f:
         94:22:45:c9:81:bb:03:1c:a5:40:8f:00:59:a4:74:11:0c:80:
         82:be:a1:e9:99:39:81:ed:c7:ee:ea:ef:43:55:83:31:06:9a:
         e5:53:46:e3:e6:31:9b:71:b2:9c:db:e1:37:1a:84:6d:ac:34:
         36:ca:78:51:12:92:2a:2d:32:87:2e:00:37:69:76:3c:b2:b5:
         1b:1d:c6:83:90:26:e1:bb:f4:a7:7c:d7:a6:fa:cb:5b:f0:8c:
         68:ad:95:87:74:93:29:9d:c6:1e:c0:b4:21:23:5e:4e:7c:54:
         01:22:ce:ec:f2:2d:3e:5f:d3:4b:3f:fa:f3:7e:96:a7:c0:ef:
         3f:0c:63:f1:7d:0c:e6:8c:72:fb:2f:b8:66:ea:0c:2e:2a:0a:
         a4:ad:42:0d:a4:2d:42:63:0c:2f:0c:c4:9e:d4:b8:8a:c6:d5:
         78:5c:90:cd:ee:68:f6:0b:b7:a2:1f:7c:58:6d:fd:a9:77:3c:
         50:c4:7f:35:a6:86:70:b7:f0:ea:5c:c7:fe:0c:a2:7c:96:be:
         76:80:01:d2:02:f3:ff:b9:ef:58:0b:82:2b:d6:b9:93:1d:33:
         9d:23:45:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:44 2026 by rpki-client