Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/098499d2-38d6-3d3c-82f6-c9c8b41b1bc5.roa
File:                     098499d2-38d6-3d3c-82f6-c9c8b41b1bc5.roa (raw, json)
Hash identifier:          J/JCOzVqLBhvtbaXqYL7NnjUrZiZZrj+BlLzLcBW67k=
Subject key identifier:   C0:36:EB:73:25:0C:2A:F3:6B:45:D6:23:63:51:4B:52:01:48:2C:61
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3B7D1AC06CC24E5674EC1840
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/098499d2-38d6-3d3c-82f6-c9c8b41b1bc5.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     6079
IP address blocks:        64.204.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:1a:c0:6c:c2:4e:56:74:ec:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=458bcfd9-3c4a-4247-bcd8-4087faaba3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:87:3a:86:ef:8c:ea:ae:0f:2c:9e:8c:35:
                    98:90:ce:9a:4e:35:cb:5b:26:48:6b:fe:5f:a8:ce:
                    7f:5c:53:1b:c1:df:47:c2:3e:73:8e:c1:25:ea:80:
                    fb:3e:b2:e9:e0:3e:42:15:c0:ad:f3:f1:a2:bd:46:
                    7b:33:03:5b:91:6e:89:13:8a:74:2b:4f:49:03:8d:
                    ce:3c:ac:1c:dd:bf:19:ad:ef:85:28:1e:6d:df:41:
                    95:a7:92:69:22:e8:36:5c:dc:08:24:df:ef:70:88:
                    d7:bb:09:4f:93:33:a3:b7:1d:18:51:6b:58:63:fd:
                    60:e2:d1:f9:96:04:92:75:02:bb:50:51:44:ed:bd:
                    3f:c1:1b:49:91:1f:6a:45:60:7a:2a:6e:26:f4:f6:
                    57:bc:6e:7f:a6:85:cf:28:e7:6c:bf:6d:cb:76:26:
                    02:e2:17:a3:ce:93:ce:32:20:19:1e:36:f7:6f:11:
                    9f:22:8c:5d:bc:d2:7e:b2:52:7c:01:87:80:85:ae:
                    a5:09:42:e9:eb:e0:a1:39:89:19:34:0d:46:f4:b7:
                    e6:3d:0f:51:02:aa:9d:bb:5a:3b:67:03:48:b2:a4:
                    31:87:71:c8:bb:d4:58:9a:77:d6:8a:a0:12:51:9c:
                    a5:e5:53:c4:dc:25:87:bb:86:64:0d:83:0c:18:eb:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:EB:73:25:0C:2A:F3:6B:45:D6:23:63:51:4B:52:01:48:2C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/098499d2-38d6-3d3c-82f6-c9c8b41b1bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:d6:d4:9a:15:30:0a:30:20:fd:54:2a:3c:e7:14:2b:31:
         02:2f:b5:f2:24:e0:81:5c:57:f6:1c:a6:a9:61:48:f6:d9:f9:
         a7:d4:56:68:01:8c:fd:5d:47:2a:7d:d4:21:6c:09:5a:07:48:
         34:14:29:26:88:a6:87:12:e4:4f:52:f8:1b:24:a6:50:e0:16:
         99:e2:18:0e:4c:51:15:1a:6e:c1:c7:14:b1:8a:33:ed:d7:f2:
         09:f0:5c:0f:a7:24:1a:40:ec:a7:14:69:6e:70:40:67:27:bc:
         5a:3f:a8:8b:2a:4d:0b:5f:d1:7b:d6:30:23:3a:29:3b:f7:a4:
         37:b0:f1:46:34:8d:57:84:bd:03:3e:fc:08:e6:1e:12:0f:cd:
         14:d0:2f:32:5e:c0:aa:3c:3e:2b:c8:5d:c4:f8:a3:47:2b:d9:
         0e:74:4c:e9:47:80:fa:f0:7c:51:be:b3:33:96:cc:c5:67:a8:
         ea:33:91:fa:6e:76:c9:cc:0c:7a:97:93:0d:dd:d2:5d:ed:0c:
         a0:99:d6:75:0d:18:07:74:d7:20:e2:19:c4:c9:52:f4:12:12:
         c5:7d:26:3d:1f:78:84:a8:b0:5f:2c:b0:69:59:38:2b:f0:ec:
         6d:7f:51:ba:e2:47:f1:e5:a9:43:e5:c7:10:44:d1:6a:db:5f:
         86:dc:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:46:31 2026 by rpki-client