Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c8c40dc4-f034-3dd1-bff5-bee652818245.roa
File:                     c8c40dc4-f034-3dd1-bff5-bee652818245.roa (raw, json)
Hash identifier:          K2LLr7Ru3AKVF4SuQDyhiEY4TwE+h8gsbOSSwMh71us=
Subject key identifier:   38:7B:CE:0F:B7:74:6A:B3:9F:99:18:19:C3:FE:1A:07:10:55:23:86
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584E0865EDA48520C19C6C730FA0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c8c40dc4-f034-3dd1-bff5-bee652818245.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     36492
IP address blocks:        64.9.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:ed:a4:85:20:c1:9c:6c:73:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=94ac7be3-b566-40c2-946f-fbf1d0c82224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:5b:78:62:52:7b:62:26:d6:9d:da:ca:7f:
                    a5:b3:3b:4c:35:3e:70:38:f2:6f:df:7a:3b:e9:40:
                    df:4f:ca:f6:5d:5c:26:4c:e2:d3:8c:5f:c8:b3:61:
                    7e:ce:9a:b1:71:93:47:71:c8:5d:39:d2:1c:8c:ea:
                    fc:97:72:27:8e:64:19:5f:17:27:ce:0b:a4:35:d6:
                    6c:7c:a2:c8:0e:01:75:0f:0c:88:70:1b:4e:b0:1f:
                    ae:50:89:b6:ca:43:dd:65:de:d3:1c:ba:9e:dd:67:
                    d4:ae:ef:46:5a:b1:94:30:59:9e:30:3b:e0:ab:d9:
                    9f:fe:a3:3e:aa:d9:4f:42:78:e9:1e:9f:7a:b4:79:
                    69:cc:54:9d:4b:93:2d:73:0c:c6:de:ea:bc:52:8e:
                    e4:37:2e:57:c7:b4:30:e0:f8:95:e0:6f:c8:a0:af:
                    21:b4:64:1e:a3:90:a2:75:66:31:2a:46:e5:92:b2:
                    5f:25:1d:dd:18:46:83:5d:a6:a0:d1:34:d4:cf:99:
                    fe:93:4d:52:13:fb:c3:ea:d7:87:97:dd:78:f0:ef:
                    6a:7d:41:fb:9d:83:6c:cd:42:79:74:bb:93:df:dc:
                    79:49:46:71:94:02:37:cf:9b:1b:35:48:fe:9c:7d:
                    9f:f9:d8:38:d7:cd:fe:32:0c:c8:f8:ac:6e:69:d4:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:CE:0F:B7:74:6A:B3:9F:99:18:19:C3:FE:1A:07:10:55:23:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c8c40dc4-f034-3dd1-bff5-bee652818245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:63:74:05:39:a4:27:90:59:8f:dd:62:37:b8:bf:6b:9a:
         42:95:58:0f:5d:65:ed:0e:60:9f:60:0e:22:c3:f4:57:d0:e4:
         36:85:f1:fb:44:08:a2:12:2c:29:b1:97:8f:46:18:2d:41:92:
         b5:90:17:ed:c5:6d:9f:4f:cb:f9:4f:78:4a:9d:63:a9:83:98:
         f1:43:fa:46:c4:ed:86:b5:ae:f4:53:b2:a3:b6:df:ec:b0:5b:
         1d:05:8f:40:e0:43:1a:c1:79:34:aa:1e:92:74:d4:41:d5:10:
         69:fb:59:0e:4a:a6:66:9d:f6:cf:82:12:4b:ca:fc:32:11:f2:
         8d:f7:08:78:95:08:2e:3a:26:87:48:c4:ac:56:67:6d:a2:c1:
         f8:1c:27:d9:f9:d3:e8:cb:25:41:d2:f2:0f:77:19:29:f2:1b:
         c2:c7:d0:46:6f:d2:ad:0d:30:fa:90:8a:19:91:89:be:01:b6:
         4e:33:c3:2d:8d:e9:30:f4:11:d4:59:2e:a1:72:f9:37:48:a5:
         57:5c:be:cf:ef:6e:9e:97:60:bb:fd:58:da:5f:5c:ab:73:7c:
         76:8a:b3:5c:bd:15:bf:51:78:d5:07:a2:69:e8:e5:9f:54:70:
         66:a5:13:ed:cf:2c:88:43:00:02:a1:8e:87:30:07:d9:53:10:
         69:44:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:08 2026 by rpki-client