Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa
File:                     048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (raw, json)
Hash identifier:          5y0TQiXu52EQITz4IpDBcy/2ACpYGjsJNErAIT2mkyA=
Subject key identifier:   7B:F9:9E:11:C3:F2:F5:DA:7F:00:D6:F4:23:56:41:78:B8:EF:D2:EF
Certificate issuer:       /CN=71fff491-7667-44b2-bd66-cb5aeb51a394
Certificate serial:       010D0C9F4328584F4972C016672B58A06339C3C0
Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        64.52.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c0:16:67:2b:58:a0:63:39:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=910ad301-89ed-4b29-97e2-5efb486aebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:ea:46:78:43:b3:9a:fd:1d:c6:92:25:0a:
                    9d:78:37:fd:b0:1f:47:3c:0e:27:96:bc:31:fd:4e:
                    a4:c4:04:95:ba:59:2b:30:e5:5f:2d:75:6a:d3:bd:
                    49:f5:9d:05:ce:cf:8d:3f:e0:8d:11:3c:9a:c3:9f:
                    7a:88:e6:79:02:96:a5:fe:ef:45:c3:31:3c:09:5a:
                    b2:8c:ab:b2:5c:e2:2d:c9:41:bf:3e:38:13:05:40:
                    b7:dc:24:71:94:68:84:d1:5b:af:4e:76:71:bb:ec:
                    20:e0:f7:36:c2:e4:09:11:ed:dd:cd:c2:74:04:ba:
                    d3:5a:79:79:4d:0c:16:07:2e:14:b9:81:63:e6:2b:
                    5e:de:fe:33:cd:6d:90:78:7a:10:1f:87:a1:91:17:
                    17:76:64:fd:23:fa:d7:2d:54:43:39:45:81:22:bd:
                    d4:6d:72:63:43:d7:3f:80:5f:93:77:61:92:c4:18:
                    eb:6f:65:16:9c:f8:85:c3:ee:59:e3:ea:ee:e5:8f:
                    40:0c:10:0b:1d:af:9d:39:21:c3:c0:44:59:41:ca:
                    bf:2c:d9:a9:5b:d0:0a:73:41:38:e3:04:36:9a:d0:
                    c4:76:9e:e8:c7:f9:95:18:9b:b2:27:17:f0:97:44:
                    da:90:05:a8:19:f9:91:30:83:88:fb:fc:5e:19:30:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:9E:11:C3:F2:F5:DA:7F:00:D6:F4:23:56:41:78:B8:EF:D2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl

            X509v3 Authority Key Identifier:
                keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ba:0c:b0:f8:be:e0:4f:95:58:03:4a:91:50:8e:88:26:b6:
         b7:b9:b3:47:44:9b:ea:85:4f:c7:91:dd:13:57:58:61:1b:8b:
         93:4a:52:cd:d1:38:98:ae:34:a4:bb:45:3d:bb:21:eb:4b:d9:
         62:69:6b:38:fc:62:b9:c1:eb:4f:dc:76:db:71:ae:c2:4d:0f:
         a8:89:70:e0:1f:b8:b6:a6:6c:06:9a:91:a7:a5:a5:5d:b4:47:
         2f:28:d7:c9:c2:4b:db:5d:23:51:f7:47:2c:08:31:72:e2:59:
         f5:44:e5:ca:b8:48:96:45:66:03:2b:60:1b:1c:7f:0e:61:b0:
         49:8c:ec:8b:18:9a:26:25:41:61:43:7a:e4:d9:4d:12:d7:79:
         40:fa:f6:73:08:be:f3:f4:bd:87:a5:b5:be:41:57:e4:94:ba:
         5f:43:b3:8d:d0:1e:64:86:03:64:fe:4f:48:c4:d2:29:c6:fb:
         f6:3c:99:24:5b:b4:92:2b:17:b1:e9:b0:bb:c7:a4:cf:18:21:
         a9:27:15:2a:c7:d3:cd:60:f8:03:ab:c0:e1:05:4f:ab:da:3c:
         da:09:a3:4a:0e:a1:a3:dd:aa:6d:5d:55:97:14:b0:65:78:c8:
         01:0d:85:9a:cd:95:54:fe:35:93:8c:f5:ee:f5:a1:bb:b7:c6:
         a2:60:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:04:05 2026 by rpki-client