Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa
File:                     5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa (raw, json)
Hash identifier:          3nrPFoyv8CtcXexgw4WzFAN8He27uC84s6gNm185hLk=
Subject key identifier:   04:FD:9A:AB:27:C2:AF:41:C4:72:FD:23:8C:CC:A2:5D:4A:D8:04:E6
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584CC1E1C936C19B8ADAC21294A0
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     33521
IP address blocks:        64.25.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:c9:36:c1:9b:8a:da:c2:12:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=87da8afd-9c63-4d0c-8429-4ab4eb7cb256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:c3:0f:a7:fb:91:46:96:8e:c0:60:44:9f:
                    72:af:1a:c3:c3:36:ab:0a:30:50:ee:e2:34:6c:52:
                    e1:e7:48:7c:62:f8:e8:80:aa:ba:57:b0:91:b2:3c:
                    66:88:49:7d:86:de:65:13:2d:d8:33:d2:d8:3f:de:
                    5c:2a:ca:32:63:2e:9a:b4:9c:b8:01:7c:1d:78:f3:
                    fb:f1:36:2a:29:a1:e9:98:0a:e2:0c:48:0b:fc:2e:
                    d4:cc:ca:6b:47:b0:c0:c8:d7:66:90:9a:a1:c1:14:
                    16:06:1a:58:be:af:bf:f8:c7:84:f6:72:bc:ca:52:
                    94:c2:11:8d:00:38:79:59:c9:85:b6:5c:84:c2:37:
                    16:f8:86:62:f4:27:15:2c:1d:0a:13:bc:23:ee:54:
                    3a:4a:27:7d:ea:c7:88:f8:50:33:34:c0:b3:26:d9:
                    21:80:72:4a:5c:ff:a1:a2:48:31:93:c3:11:39:0e:
                    f4:17:6d:24:db:50:23:51:c8:1f:5a:2d:63:ab:e5:
                    67:f8:a9:9a:74:fb:20:cd:76:0f:34:60:f1:32:3d:
                    11:a3:3a:54:61:ae:54:e0:7f:ec:ee:bd:80:ce:29:
                    d5:a5:ca:7d:9d:55:3d:5a:e5:48:4b:83:bf:42:fa:
                    0f:f3:79:c9:eb:56:e0:e2:d2:54:bf:7e:2b:8e:af:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:9A:AB:27:C2:AF:41:C4:72:FD:23:8C:CC:A2:5D:4A:D8:04:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/5fc01720-3c37-32d1-8a3c-02b3e1cfce5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:90:bf:3e:52:51:4b:1c:c7:a3:99:dd:3a:1e:2a:94:fa:
         eb:61:95:c5:fc:5a:c6:d9:fe:48:68:dd:6c:80:85:67:f8:2a:
         4a:b8:e7:65:47:5a:e8:0f:25:d5:c6:cf:cd:df:59:0a:d5:20:
         82:57:c4:7d:10:c4:89:e8:e6:97:99:3d:37:c5:71:fc:de:e8:
         92:e2:c4:75:2c:06:67:53:32:57:2e:bd:f2:d3:0d:63:d8:a8:
         ec:71:6c:52:9e:bb:44:11:8d:44:09:27:78:16:92:d0:3f:b2:
         72:fc:33:51:fb:50:b6:83:48:98:ea:3d:df:e0:c3:9e:eb:2d:
         1c:50:21:7b:f6:4d:67:d4:54:c8:4a:0f:c9:86:0d:fd:19:7d:
         80:be:1d:31:12:6c:b4:96:a8:cb:3c:d5:a8:41:e3:44:e4:42:
         b7:48:fe:87:62:16:9a:03:58:5e:a7:e0:9f:ac:fc:2b:fa:ec:
         3b:d2:e4:13:8e:ee:75:a7:33:6f:54:9c:1d:4b:80:34:07:b3:
         8a:f3:f9:65:16:41:a6:76:51:62:00:46:79:af:cd:40:94:77:
         13:55:e5:e8:32:15:44:0c:64:3c:2e:93:ae:25:56:09:f9:e2:
         a4:db:03:84:a5:49:b7:e1:4c:9f:b1:5e:27:59:65:a4:9b:0d:
         b8:e1:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:48:03 2026 by rpki-client