Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
File:                     afdbac6f-debc-393d-952e-f803e27af2c1.roa (raw, json)
Hash identifier:          FaDK3ZaWyDthZ7gcXPFDboVQkoMKufCKg/H0BMXMgSQ=
Subject key identifier:   40:60:F6:99:43:E6:36:17:AB:D5:48:06:18:1F:8A:54:65:5E:D2:7F
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584D8AC53E1B8DDD7BE76D0F3B00
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     53828
IP address blocks:        64.191.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:3e:1b:8d:dd:7b:e7:6d:0f:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=63a6aa00-4c1a-4a30-9947-ee9958552236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:56:57:53:e3:28:d3:b1:ed:c0:c0:32:da:
                    95:b0:51:ff:12:d8:b4:2e:e4:38:43:07:e6:47:38:
                    9e:22:41:b6:d3:4f:14:74:8c:6b:d1:03:e8:bb:a1:
                    4b:10:52:c0:a4:0b:46:bf:34:17:f8:3f:56:ab:74:
                    9d:52:b1:77:05:50:82:b7:f8:be:0a:21:71:a5:43:
                    c6:dc:ac:51:1a:db:8e:97:14:ba:9f:b4:3f:8f:ac:
                    25:8b:03:32:55:81:f0:6a:21:dd:c7:7f:75:74:5a:
                    d9:c7:f9:0d:d8:6c:19:09:ea:db:77:8c:a0:39:ac:
                    88:6d:c9:e8:e7:50:ea:35:9d:61:0b:21:3d:fe:5f:
                    37:b9:b3:05:17:2e:0f:47:fd:e4:cb:00:9f:be:38:
                    75:35:4b:19:3d:1e:c7:b9:ac:23:e5:65:d9:9b:5a:
                    ce:23:f1:97:bf:ca:09:4b:ba:15:e0:61:6e:6e:0b:
                    65:c2:79:25:a5:5f:46:37:14:6b:26:1b:43:ff:03:
                    49:14:19:2e:57:c9:ed:6e:e6:c8:bc:47:b8:d9:2b:
                    83:53:04:7f:0f:1f:ca:3b:85:53:04:5d:be:0a:2c:
                    9b:7e:2b:91:f8:1e:b1:cc:47:6d:2d:ec:d2:1b:cb:
                    b4:84:44:7f:05:0b:10:82:77:18:25:1f:91:e2:9a:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:60:F6:99:43:E6:36:17:AB:D5:48:06:18:1F:8A:54:65:5E:D2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:5b:11:54:95:3c:e5:76:ec:d5:77:60:49:01:70:db:12:
         fc:98:a3:28:9a:26:16:d3:67:9e:87:9f:1f:00:c4:17:db:b9:
         f3:d1:10:47:20:7a:24:4a:27:e2:0f:3c:09:76:6d:02:c7:14:
         cc:9d:df:89:30:16:22:36:89:e5:af:7a:e1:c6:31:c2:1f:42:
         e5:2d:ac:b3:93:5f:a2:99:f2:b4:e1:64:0e:e9:18:cf:6c:d2:
         c0:c3:53:29:98:9e:e7:e4:4f:7d:0e:a6:a1:de:1d:d5:53:49:
         94:b2:3a:bc:6a:e6:8f:38:94:1b:c2:09:d0:b2:41:a1:21:a4:
         c8:52:39:fd:cd:af:1f:f0:68:11:1a:a6:0c:17:d4:93:30:95:
         82:27:a8:da:78:f7:f3:fb:74:a0:f2:e7:ce:42:46:6e:e2:8b:
         aa:4a:d7:a2:62:e3:08:8f:24:bb:1a:3c:1b:f0:58:2e:af:58:
         44:5c:3d:51:b1:0b:2e:b6:1f:3a:b1:39:f7:6f:42:cc:7e:64:
         06:26:ed:56:cc:a0:cd:d6:27:c2:a8:89:7e:aa:ba:19:d2:0e:
         db:ad:49:19:8d:c4:f7:33:f6:63:82:a2:0a:86:2e:33:ae:a4:
         84:87:dd:bf:d9:2e:37:3f:17:56:ed:ca:88:07:e1:5b:d8:ab:
         ce:88:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:52:07 2026 by rpki-client