Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a26bde67-f6d4-356e-af37-3105bb4cbd6e.roa
File:                     a26bde67-f6d4-356e-af37-3105bb4cbd6e.roa (raw, json)
Hash identifier:          zSClzlk+Y/pIvk892kjP8GuiIMR/vAcCyN531lAHiX4=
Subject key identifier:   2B:34:5A:5C:D1:41:DA:39:5D:0A:FB:15:5E:AF:3E:0A:67:93:DF:38
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5F7FB381A106224133F2F380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a26bde67-f6d4-356e-af37-3105bb4cbd6e.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     31715
IP address blocks:        64.81.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:b3:81:a1:06:22:41:33:f2:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=599c283a-5530-4ad5-be64-73271df1e7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:32:0a:98:f2:24:94:4d:bf:bf:bf:a1:73:
                    04:6c:3a:d6:7f:1f:cb:0d:61:b8:27:6f:37:c4:a7:
                    7d:c4:3e:18:ae:90:05:29:51:8f:f7:29:e8:3e:b0:
                    3f:09:21:de:52:f4:46:50:42:5b:59:34:7d:c6:57:
                    1a:0f:f2:92:44:1f:02:3f:3e:9f:55:6c:6b:0e:e1:
                    3d:ee:36:2b:bb:3f:5e:cf:49:7d:f4:43:a6:7d:00:
                    6c:56:c8:ae:55:35:6f:03:6e:01:ee:09:b5:58:53:
                    aa:14:bb:07:39:43:71:f2:6d:0e:81:98:3d:7b:19:
                    e7:2f:dd:dd:8f:08:a7:b2:bc:ff:21:4a:cc:e0:34:
                    c0:c4:a9:0f:49:50:3e:5a:52:db:8f:9d:f0:6c:ac:
                    87:6f:08:55:4b:57:e2:15:12:be:1f:6d:f8:5f:f7:
                    8f:4b:09:02:e4:34:09:d5:24:18:b7:dc:b8:55:04:
                    c5:ad:70:b1:fd:28:21:78:e6:d7:e7:3d:a5:99:4d:
                    1a:be:48:d1:46:59:63:49:24:f1:d9:8c:d2:38:1e:
                    12:0e:8c:9d:53:6f:c0:c0:8d:bb:e6:ea:79:b2:07:
                    ad:fd:f2:7f:0d:45:13:47:4d:67:11:1c:2f:60:9e:
                    80:6b:8b:b9:79:b8:86:93:c5:03:a8:27:7c:bf:01:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:5A:5C:D1:41:DA:39:5D:0A:FB:15:5E:AF:3E:0A:67:93:DF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a26bde67-f6d4-356e-af37-3105bb4cbd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:95:ba:aa:74:37:21:43:5c:31:de:ac:f7:67:b9:33:3d:18:
         56:b8:53:fe:83:f8:0c:4b:15:19:e4:e4:f4:7a:3c:c3:26:12:
         d7:59:97:40:d0:d7:fd:37:9f:29:2f:a6:82:69:92:71:f5:2f:
         80:3c:2d:63:82:4e:ad:93:e0:5e:12:b7:37:23:26:a1:ac:35:
         b4:17:62:46:fb:a8:b7:ad:49:65:21:bf:3c:ee:d0:59:fc:6a:
         87:b7:fe:49:8a:d2:11:da:6d:75:2d:fe:a8:39:1d:15:27:fe:
         18:63:7c:74:87:05:f6:ed:48:20:70:b3:82:15:1f:76:28:d9:
         12:42:85:7e:8f:53:ed:42:7d:6c:29:e4:ca:80:61:13:60:a0:
         44:10:34:35:a6:3d:f0:4c:ef:15:22:f9:bc:55:f4:a1:d9:91:
         9c:2c:ee:ff:53:a5:86:2b:5a:e0:bc:c6:95:2d:b2:bd:61:03:
         d1:f4:0e:85:28:28:47:b1:3e:b9:54:92:ff:a8:e8:21:0f:cc:
         fc:14:3f:c9:31:0e:55:9c:59:1c:5f:42:4d:c3:dc:5a:65:63:
         86:d9:53:da:d2:b2:32:7d:b4:62:2b:aa:78:80:12:41:fd:05:
         0e:94:e8:e0:70:be:f2:7d:09:16:12:b1:53:c1:db:cd:d3:e0:
         d4:de:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:15 2026 by rpki-client