Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/38866aa6-4fd8-38cb-ab83-22155e1ed803.roa
File:                     38866aa6-4fd8-38cb-ab83-22155e1ed803.roa (raw, json)
Hash identifier:          QlkqOOk1SURBzIO6Sm94DW1nYVcqrpzW0YIQsJPFCJk=
Subject key identifier:   DA:E4:43:1B:19:4E:B3:99:92:89:F4:E1:2F:7C:84:07:39:AB:03:68
Certificate issuer:       /CN=ca5e5f65-3ba8-4f92-b2c4-b10ca9949150
Certificate serial:       010D0C9F4328584CF2BD0564F2EEF27D5299B100
Authority key identifier: 06:FD:E7:05:9B:E7:0A:E5:42:C0:00:FB:A2:3E:71:36:AF:93:38:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/38866aa6-4fd8-38cb-ab83-22155e1ed803.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     18540
IP address blocks:        64.239.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:05:64:f2:ee:f2:7d:52:99:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca5e5f65-3ba8-4f92-b2c4-b10ca9949150
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=5ec8c53d-f0c4-4899-8fc7-379614e176e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:85:e6:0e:56:a6:79:8f:ad:42:a9:aa:8f:
                    af:03:35:75:34:92:e5:b0:72:e3:54:c9:e0:9d:fa:
                    6c:83:c0:d0:6d:a0:88:17:48:21:f5:44:8c:ab:b0:
                    3f:fe:50:3d:ab:af:56:27:4e:4c:3a:2c:14:59:dd:
                    51:48:33:5b:38:82:9e:46:ed:d4:ea:80:86:46:ab:
                    1e:dd:ba:20:76:fd:6a:b2:e6:e0:e7:57:53:bc:aa:
                    96:cd:98:f4:b3:5e:e1:6b:6b:4f:e3:c3:d0:8c:28:
                    de:fd:8f:81:38:49:ff:4c:e2:18:92:c0:15:a5:8b:
                    f0:4c:e1:42:40:e1:1d:72:10:72:51:31:27:2e:e3:
                    7e:bb:38:b8:31:9a:5b:09:ed:f6:55:2c:3c:48:2a:
                    82:5b:ec:88:8d:e5:14:85:fe:4b:d8:38:56:39:2f:
                    f6:0c:d7:e8:6b:e6:e6:21:3f:26:11:b9:80:4e:bb:
                    af:46:e4:45:ac:3b:a4:df:32:42:62:37:85:6d:d2:
                    c2:ee:2b:ca:6c:18:7a:78:40:b6:41:a9:44:78:c1:
                    bc:34:87:e8:a3:98:af:b1:e7:79:6c:d1:b4:72:2c:
                    e9:ef:a1:2b:ab:26:d5:c9:54:14:4a:45:c5:9c:fe:
                    4d:06:28:2d:78:7e:2d:fe:da:48:f0:80:ad:63:cb:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E4:43:1B:19:4E:B3:99:92:89:F4:E1:2F:7C:84:07:39:AB:03:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/38866aa6-4fd8-38cb-ab83-22155e1ed803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.crl

            X509v3 Authority Key Identifier:
                keyid:06:FD:E7:05:9B:E7:0A:E5:42:C0:00:FB:A2:3E:71:36:AF:93:38:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ca5e5f65-3ba8-4f92-b2c4-b10ca9949150.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:e9:b1:1d:7f:da:e7:da:28:f3:58:b2:96:c1:ad:e3:7c:
         b7:65:b1:3e:34:9a:3c:5a:5d:5c:e0:62:bc:f0:d3:a6:22:16:
         05:de:a4:3c:eb:f7:8e:3f:43:26:14:91:f0:2b:98:dc:9b:24:
         2e:44:31:97:0f:8a:34:b3:40:1c:7e:df:93:72:92:0b:ab:62:
         f9:bf:6e:b2:1a:b3:83:f1:10:df:16:44:2d:24:72:66:15:01:
         62:29:12:b9:42:ca:d0:42:e0:b1:39:a6:0e:e4:32:60:45:9f:
         3e:a0:a8:6f:64:c8:76:be:fd:b5:02:11:41:83:0d:13:02:47:
         22:bc:cc:ef:d8:ba:c5:47:77:f4:d7:bf:c7:47:ef:fb:8e:3c:
         7a:3b:7b:b8:b7:51:19:7d:78:83:6a:4b:86:7a:16:a8:63:d1:
         b0:5f:f5:59:f3:3b:c6:f0:39:8a:51:97:5e:85:61:27:f3:dc:
         45:a9:ed:d4:d7:fe:fe:09:e0:65:b5:9d:77:2f:56:cf:b5:3c:
         d9:71:c9:13:fc:20:dd:1b:44:f7:21:07:e2:a7:7c:8d:18:cf:
         d1:47:95:8b:e7:6f:6d:77:52:be:9b:66:31:55:64:8e:d9:04:
         31:32:29:68:fb:da:1b:63:49:0d:20:cf:7d:fe:ea:ba:62:5f:
         c8:ef:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:25 2026 by rpki-client