Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c573424d-0fc9-3382-a566-297f208e914b.roa
File:                     c573424d-0fc9-3382-a566-297f208e914b.roa (raw, json)
Hash identifier:          Exr6GjGQtOURwr5sTL6eiSTstXm9E6PYE0Y0JDfIrIE=
Subject key identifier:   3B:AD:A8:6E:1F:3D:31:A4:7D:A0:8F:AB:7F:17:98:12:2F:D8:22:8E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6BE22644F1BEEA2940240CA0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c573424d-0fc9-3382-a566-297f208e914b.roa
Signing time:             Wed 07 Oct 2026 09:02:36 +0000
ROA not before:           Wed 07 Oct 2026 09:02:36 +0000
ROA not after:            Tue 05 Jan 2027 10:02:36 +0000
asID:                     834
IP address blocks:        64.204.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6b:e2:26:44:f1:be:ea:29:40:24:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 09:02:36 2026 GMT
            Not After : Jan  5 10:02:36 2027 GMT
        Subject: CN=af003385-2ad6-4044-a1fa-8be4ddd52006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:71:78:a4:0b:1e:66:96:62:07:7d:2e:79:
                    ef:a2:f1:3b:ab:9c:5c:55:54:13:d1:46:f9:13:76:
                    17:5e:d2:1b:41:02:d0:74:65:75:5a:4a:1c:e6:d9:
                    fd:90:eb:d1:bd:ee:cf:d9:ee:d3:bf:f6:c9:6d:b2:
                    cd:1b:6b:1f:59:ca:1d:a1:23:bc:46:4a:af:01:ae:
                    33:15:60:41:0d:43:34:19:b8:4a:e0:f1:e2:82:66:
                    28:40:2c:5f:86:bd:3f:ca:0a:26:5f:cd:b0:c1:29:
                    51:ce:da:15:07:49:ed:d8:94:4c:67:ae:9f:f4:c9:
                    12:12:e2:70:f9:d8:c1:8f:f0:2c:5c:6f:6c:7f:06:
                    b9:b8:71:f1:a2:42:3e:9a:f1:d8:cd:28:1f:fc:05:
                    da:38:d0:c4:7f:04:91:ca:aa:ef:b0:f4:05:90:0d:
                    a0:7f:d5:95:c5:19:62:fa:19:9d:dd:b3:15:0a:ef:
                    36:86:f7:10:3f:a9:74:60:0b:93:f8:71:4c:a4:3e:
                    e2:c2:49:4d:34:33:c2:c5:86:9a:c1:44:8e:10:a3:
                    e5:03:e1:e8:42:fc:48:44:7f:3f:e5:a9:06:68:8e:
                    52:f4:eb:f5:d2:5d:66:71:16:f7:59:1f:31:91:5a:
                    60:d0:84:cb:9e:be:23:8d:7c:bd:db:ac:53:2e:46:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:A8:6E:1F:3D:31:A4:7D:A0:8F:AB:7F:17:98:12:2F:D8:22:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c573424d-0fc9-3382-a566-297f208e914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b0:b7:91:c1:e9:b7:2c:aa:d6:fe:f0:c6:3a:4d:3e:c8:09:
         65:6b:9d:2c:b9:cc:e5:1f:9f:9a:02:f8:b3:03:25:90:03:36:
         b1:67:e8:e3:5a:2a:4d:71:a0:0f:b3:6f:8e:5e:46:fe:53:c4:
         c8:70:96:13:4a:80:ef:83:c2:8e:7c:93:d1:ea:a2:95:c3:b3:
         b6:ac:de:dd:22:f0:32:ea:d2:58:23:6e:e7:82:3d:98:03:06:
         89:2f:b1:96:4d:8e:56:41:1c:26:d2:50:82:3d:3b:24:15:24:
         94:e5:13:d4:12:26:de:0f:25:f9:9a:eb:02:fc:7b:0b:f6:03:
         63:0a:76:71:d3:24:02:41:ca:97:6b:df:70:2c:f6:6c:8d:e6:
         1e:1f:66:90:1f:c1:8f:86:e5:7c:9b:ec:47:6b:5f:b9:f2:44:
         0a:c2:f8:cb:3d:bf:0b:a8:fc:53:2d:9c:f1:53:e5:21:84:88:
         12:88:a8:5c:fc:e5:e4:e9:1c:e0:95:ed:3f:13:47:11:bc:a9:
         17:a8:53:bf:50:a3:28:9b:99:80:59:19:43:8e:29:8c:da:0f:
         82:01:f0:cf:73:e2:01:2c:bc:9d:8c:e4:57:ed:3e:eb:03:a5:
         69:96:d5:82:7e:8e:cb:ac:f3:b6:f3:1b:5a:1e:e3:82:fe:5c:
         0e:35:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:01:53 2026 by rpki-client