Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/17dd792a-79e2-3fdc-b4cf-4967c8e4e73c.roa
File:                     17dd792a-79e2-3fdc-b4cf-4967c8e4e73c.roa (raw, json)
Hash identifier:          z1d30li4aS4jIeB7MLyt1vqeojte0XmE9NcFb2nxQzw=
Subject key identifier:   37:85:F8:66:C0:66:BF:83:17:B0:CD:AA:10:C7:8D:21:FA:76:5D:85
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E1B799458817E0515791B70E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/17dd792a-79e2-3fdc-b4cf-4967c8e4e73c.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     834
IP address blocks:        64.204.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:94:58:81:7e:05:15:79:1b:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=e3724157-676a-4365-8a56-60b758a52f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:5b:4b:41:d9:a5:e6:33:8f:51:0d:23:f7:
                    9c:84:2f:db:27:31:b3:58:7c:25:cc:3f:e0:6e:7b:
                    57:02:cc:a2:70:92:20:13:39:39:a1:6a:d9:57:ad:
                    54:d4:83:7b:7f:12:fa:bc:d7:6d:e0:49:eb:fb:7b:
                    bb:98:4f:f5:04:90:08:09:d9:68:e9:f9:36:a0:17:
                    97:2b:31:82:b0:de:88:ce:1a:4a:a1:b4:be:d1:c0:
                    23:05:f1:33:5b:48:b2:e2:5c:11:74:3d:b0:64:d9:
                    48:34:8c:33:f3:de:e2:64:39:d9:44:e3:35:75:94:
                    c1:00:ae:c8:56:18:89:6d:d5:0f:40:e8:57:96:2e:
                    3c:f3:e2:2d:30:2c:33:40:58:52:a2:db:f9:92:b6:
                    90:fd:42:99:36:b8:b4:d7:20:44:7a:b5:10:c0:4c:
                    44:05:10:85:9c:03:9c:9c:0c:fb:00:89:c2:cf:8e:
                    5f:e4:1e:90:b7:e7:e7:07:26:80:5a:99:d3:73:b8:
                    8b:2a:03:3d:4d:6c:7f:d0:f5:93:d1:e0:9a:73:da:
                    10:eb:40:95:46:d5:0b:28:30:59:75:6e:5e:27:e4:
                    68:1b:94:4e:e5:76:4b:98:a5:52:68:fa:fb:06:83:
                    f1:be:12:ba:eb:2b:f4:53:10:80:09:36:77:28:13:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:85:F8:66:C0:66:BF:83:17:B0:CD:AA:10:C7:8D:21:FA:76:5D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/17dd792a-79e2-3fdc-b4cf-4967c8e4e73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:31:90:40:a7:b4:73:18:b7:25:ce:d3:0c:78:80:c1:2c:cf:
         c6:00:c3:06:a4:5c:0d:52:f3:9c:84:5c:91:02:2a:b4:67:f2:
         69:31:95:23:9a:78:d4:65:87:ed:3d:25:28:69:22:2c:2f:e5:
         5e:a2:07:04:2b:31:55:83:c5:3f:07:14:01:aa:19:89:d9:c7:
         73:a5:34:c1:6b:7e:11:a4:83:5b:cf:cb:ad:0e:a9:f2:0a:66:
         66:73:f0:50:2c:8a:75:f5:48:48:bb:2f:a7:5d:31:d4:94:de:
         ff:27:01:4a:02:ba:87:f4:92:f0:5d:f8:3f:24:47:6c:8b:3a:
         0d:aa:67:56:a8:7e:b2:a3:58:c3:12:66:ea:90:f5:d4:d0:a9:
         28:cc:e0:2e:1f:81:6c:1d:d8:b0:f1:7f:28:0f:03:8f:ab:e5:
         ce:04:9f:a1:65:bc:66:5e:b1:2d:10:0e:ec:8d:d9:eb:1c:ed:
         45:6b:7e:cb:a9:7c:d1:d2:62:27:cd:10:e6:dd:e0:26:ba:29:
         a2:36:17:7e:db:c1:a2:fc:4f:8a:f8:ba:da:87:d6:94:0d:33:
         37:3e:b2:fa:ae:fa:4c:6f:80:59:2d:94:ed:ca:cc:30:1a:d8:
         22:d9:88:56:7b:8e:bc:79:a7:4f:46:51:fc:87:1d:cd:c7:4c:
         d5:d7:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:44 2026 by rpki-client