Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbd13c9b-498b-31f8-b85b-3c4e05b1f6a4.roa
File:                     fbd13c9b-498b-31f8-b85b-3c4e05b1f6a4.roa (raw, json)
Hash identifier:          f7Wup9os6qL4gMgLteOaX1ZR559jlrkinGU6dG3BBCk=
Subject key identifier:   A4:19:2B:8E:45:4B:D3:84:8C:CC:AF:38:E2:45:D4:BB:50:E0:44:BB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CB981C4A29DF7B499E28B1200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbd13c9b-498b-31f8-b85b-3c4e05b1f6a4.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     215607
IP address blocks:        64.93.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c4:a2:9d:f7:b4:99:e2:8b:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=4c2f5670-7d63-44b2-bcb1-e1f463b876c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:73:cc:ee:74:70:2d:d6:34:04:05:fc:51:
                    df:00:aa:6b:73:09:be:59:5b:e0:fb:c5:74:c4:a3:
                    8f:b0:9a:48:6d:54:89:b3:b7:25:d9:50:9a:b0:2e:
                    fa:ef:b5:60:3f:77:2d:37:32:64:c8:b1:5e:ed:17:
                    3a:05:83:b3:15:fb:eb:1c:2f:1a:e8:81:50:a1:ec:
                    ca:a0:95:bf:fb:84:96:e5:93:16:5c:61:83:31:cd:
                    b5:81:99:25:d6:35:5a:cb:26:64:04:4b:86:0c:ad:
                    e5:a9:67:79:7c:15:b5:c5:ed:a8:91:13:62:6c:c6:
                    0d:4e:a0:14:8e:cd:d7:d2:b6:90:4d:e0:75:16:00:
                    a2:4a:7b:99:17:66:3b:f9:f5:15:b9:60:d2:21:9e:
                    a9:92:fc:40:b5:12:1b:f7:c8:43:16:2b:d6:66:8b:
                    2b:3a:db:0a:db:40:82:06:a3:4c:91:eb:0a:07:d1:
                    f0:6a:87:12:77:12:ab:ae:5a:06:84:ea:5f:09:cf:
                    a2:0d:e1:79:c3:99:2c:10:6f:15:76:fa:94:83:31:
                    8f:ea:10:a6:ff:4a:55:15:db:a9:6c:3a:b4:be:2c:
                    cc:a5:05:ff:1c:4e:1c:66:74:88:95:9a:8a:c7:d1:
                    ab:01:c8:81:91:eb:db:b2:b6:56:37:cb:e6:2d:9b:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:19:2B:8E:45:4B:D3:84:8C:CC:AF:38:E2:45:D4:BB:50:E0:44:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fbd13c9b-498b-31f8-b85b-3c4e05b1f6a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:53:39:82:b3:81:72:03:42:4f:ed:12:d2:59:c9:13:d0:b2:
         8b:97:2e:05:d9:f1:7d:c9:08:5b:3e:53:58:c5:c8:ca:99:fc:
         98:5c:83:17:fa:52:78:4d:c1:e0:90:39:50:72:bf:12:ac:bf:
         36:6e:7b:6b:b8:36:81:7f:41:9b:1d:45:e4:b7:32:75:12:07:
         ed:d6:dd:cd:6b:41:59:3a:6a:49:62:74:b2:ca:97:e3:d7:53:
         74:20:52:fd:0b:ed:e9:2b:04:10:a2:ad:36:70:ab:56:73:74:
         27:44:fa:19:a1:c2:92:f6:17:ee:7e:d7:04:34:e8:71:c4:c8:
         55:8f:bc:8e:9a:37:65:56:66:f1:aa:36:e7:1c:f5:dd:6a:eb:
         b2:9a:b7:81:97:d9:26:15:52:81:a7:44:da:6e:f5:10:7d:96:
         b9:33:8f:78:11:b9:60:75:f9:9b:46:f4:d1:f8:32:96:49:b4:
         17:71:bc:57:4b:dc:1a:82:59:86:c1:71:a9:09:be:c4:b3:73:
         2d:11:df:39:20:16:91:ce:30:13:c7:44:3e:a7:4d:e3:46:9a:
         ba:1c:c3:73:da:b9:4e:8e:1e:fe:cb:c2:6b:a9:a6:4e:36:89:
         04:fc:a5:61:9e:2b:51:06:5d:62:97:1a:98:57:9e:97:b1:0e:
         ec:55:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:52 2026 by rpki-client