Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/5e6cbfee-ed00-33cd-a821-72dd3737847d.roa
File:                     5e6cbfee-ed00-33cd-a821-72dd3737847d.roa (raw, json)
Hash identifier:          JmIxDo639RDINwGJ7B527ij3OyluEmAikVGHTICqBX0=
Subject key identifier:   EC:43:68:33:2C:8B:5C:4E:1B:2D:59:A4:D7:7F:3A:6C:AF:96:50:C7
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584CC6120E12E8DC7C5911456B80
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/5e6cbfee-ed00-33cd-a821-72dd3737847d.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     33659
IP address blocks:        64.93.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:0e:12:e8:dc:7c:59:11:45:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=a1179766-69fd-44ca-ba69-586d28e941d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:a1:d5:b2:a2:e8:2d:c1:56:a8:97:47:41:
                    40:6e:11:bf:fc:6c:60:ee:dd:31:dd:62:3a:99:f7:
                    fc:fb:b7:75:f9:ba:fa:d3:48:e8:db:61:23:86:f7:
                    24:91:61:43:f9:4b:36:fc:91:80:4a:ed:ed:d7:70:
                    f8:a1:1d:ae:22:b0:07:cc:52:c1:95:27:66:ca:94:
                    a1:12:48:50:d9:39:58:12:94:b4:2d:a2:c6:31:78:
                    e5:d0:b9:8b:ec:05:e5:48:b5:c0:30:b6:8c:65:0f:
                    28:39:f0:2f:c8:00:1b:d6:35:ca:d0:b0:c3:03:1d:
                    98:bb:2c:58:43:e5:59:72:db:73:ab:69:13:69:02:
                    8c:ab:2b:65:16:b6:49:98:66:8c:27:97:e5:9e:53:
                    c6:76:d2:3d:9e:f8:b1:97:f6:00:8e:d5:bb:7f:3f:
                    0c:1e:06:19:78:6e:e7:1e:35:9e:a7:6e:3d:9d:9e:
                    8b:42:18:33:5c:95:22:1c:7d:56:5f:cc:c5:a7:f9:
                    46:3f:0d:5c:d9:bb:26:4b:a2:e7:7f:20:d0:54:65:
                    cc:08:54:3c:a6:84:0a:d9:69:f6:09:22:38:30:c1:
                    e9:d1:a7:24:ba:92:e5:8d:f8:48:be:01:3f:94:ff:
                    72:91:1d:30:a3:68:6d:5e:dd:f9:f7:ba:f7:47:f3:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:43:68:33:2C:8B:5C:4E:1B:2D:59:A4:D7:7F:3A:6C:AF:96:50:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/5e6cbfee-ed00-33cd-a821-72dd3737847d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:21:f7:a7:a6:53:93:2c:85:64:86:89:f7:0b:b9:23:94:f3:
         21:98:70:b9:51:b9:f3:b4:89:d8:2f:3b:b3:a3:0a:01:bb:f5:
         b4:2c:78:d6:e0:47:69:78:0a:c1:81:d0:aa:a5:e5:1b:1d:f2:
         75:07:bc:b8:12:8c:d8:d6:c4:e6:cf:4d:23:a7:f2:71:8b:f7:
         03:6a:bd:77:18:97:0b:e9:93:b1:58:29:9a:f8:10:44:c9:45:
         a0:84:29:5e:e7:0c:c8:20:01:ca:a2:24:51:3c:fe:fe:3d:d6:
         df:19:97:bc:ee:8b:92:b8:08:93:52:71:1c:69:bf:00:76:bb:
         f3:80:a7:b4:05:6d:0d:c4:44:29:17:bb:40:72:1c:09:0e:59:
         cd:ec:5f:b8:0c:5a:5c:a9:13:d6:72:00:d3:92:b3:3f:0b:36:
         93:63:27:30:ea:23:11:31:7d:cf:0c:27:53:c2:03:07:57:14:
         3b:e6:a9:78:df:db:87:15:92:09:21:9b:e1:38:56:91:c4:de:
         4f:5f:09:29:11:82:5e:0b:c8:36:ab:2e:99:9c:33:7a:5a:64:
         28:eb:91:c3:36:62:39:10:f9:21:a5:e3:76:bc:0d:e5:44:29:
         0f:f8:e6:38:fd:25:db:c6:ca:a1:0e:1a:de:d4:c4:78:6f:58:
         cc:01:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:27 2026 by rpki-client