Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa
File:                     d22c3402-a212-36a9-b07f-cea36e6bf20f.roa (raw, json)
Hash identifier:          kRduLfWv169kRYJe+8r/TtIbrNENZ015PBgFANb6vOE=
Subject key identifier:   22:9B:9E:40:65:B1:F8:36:65:6B:62:E1:53:BD:67:F2:7C:F8:DC:3F
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584D86954C506BD049011753E900
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     400402
IP address blocks:        64.44.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4c:50:6b:d0:49:01:17:53:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=bb0cebbf-9092-494b-9989-9fb6d0a911bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:a0:12:56:0e:e7:98:a7:39:6f:3d:22:83:
                    e4:3a:8b:47:4f:dd:cf:55:72:2f:2b:92:b0:24:a9:
                    98:6b:1a:50:66:63:cf:6c:0c:24:bb:81:1c:cd:26:
                    0b:c9:6b:18:9e:99:e6:1b:b6:4f:d3:40:ba:f1:01:
                    d6:19:c1:7b:a9:e5:6e:61:7d:ec:c4:23:83:55:fb:
                    3c:14:7d:27:8c:8b:49:c6:d9:0a:ca:78:24:1a:24:
                    f5:7b:6c:bb:3c:4f:dd:05:99:dc:40:65:c9:cb:c1:
                    47:72:1b:7d:71:cc:81:16:a0:05:4f:81:6b:64:54:
                    ea:61:1e:a6:5f:e2:6b:1b:80:fb:22:2b:08:d0:35:
                    68:6f:69:3e:dc:a9:7e:10:68:ff:4e:b1:06:c2:f1:
                    08:52:b4:3a:05:08:db:91:90:10:89:33:c2:09:44:
                    1f:d2:86:92:0e:2d:62:3e:b9:63:a5:33:ba:51:e5:
                    ab:3a:68:ed:98:68:29:53:6d:0a:9a:ae:d5:12:d6:
                    7a:d5:93:73:f6:dc:ef:9b:35:27:3a:44:69:4d:df:
                    bc:8e:9d:ac:16:1d:f2:2d:eb:e5:c6:49:1d:54:cc:
                    8a:44:94:2d:10:b3:48:5e:ef:d5:0c:5d:f4:ac:df:
                    b4:65:dd:82:35:4d:84:13:3c:53:fa:84:bc:79:b3:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9B:9E:40:65:B1:F8:36:65:6B:62:E1:53:BD:67:F2:7C:F8:DC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/d22c3402-a212-36a9-b07f-cea36e6bf20f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.44.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:46:dc:3d:5e:45:ca:f5:c8:cf:cb:9a:e0:bc:d9:d1:53:ae:
         5f:43:df:4c:7a:d1:5e:49:8c:2b:67:1e:2b:a1:38:65:7d:cd:
         39:16:e1:72:68:6b:00:95:d7:4f:dc:91:22:67:a1:d7:82:da:
         af:ec:49:b9:85:ef:83:4a:cc:67:f6:39:e2:52:06:94:8e:9b:
         6c:9e:37:f6:ee:38:d4:f6:b8:4e:09:32:d8:50:2d:a5:cc:10:
         64:d1:84:6a:09:01:70:c6:b0:56:29:e9:cc:5d:cf:c9:9b:c4:
         aa:ce:41:2b:e8:e3:8d:52:52:7c:79:81:ff:63:99:aa:f3:30:
         8e:a3:f7:77:d9:be:09:40:e3:19:e2:0a:43:5f:09:5d:25:2d:
         4c:c2:30:8b:39:c0:51:df:6c:82:72:cc:82:77:ea:ae:9b:ef:
         99:91:03:c9:08:05:68:a8:75:04:46:4b:93:80:dc:03:1e:23:
         cb:5b:f0:07:c8:2f:f2:3a:1c:e9:f1:a4:8f:c8:18:70:94:7e:
         c4:a9:8c:4e:98:84:74:b6:78:f1:62:ca:e7:a6:a4:70:25:e2:
         81:96:21:96:7e:c5:d8:dd:30:38:8b:cd:ea:85:1a:69:b1:87:
         63:15:84:ac:b2:bb:43:a5:61:b0:d4:7f:64:49:8e:af:1f:c3:
         0f:ef:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:04 2026 by rpki-client