Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9b5e3ba-fe84-31f8-a5a7-36b2f514270e.roa
File:                     f9b5e3ba-fe84-31f8-a5a7-36b2f514270e.roa (raw, json)
Hash identifier:          9BBaNo0wbjwv/X+4dT9csgaUDboRXQC5HdC/TwmtGHI=
Subject key identifier:   6A:7B:20:7E:DA:C8:6F:3B:C9:FB:A9:BD:ED:CC:70:02:F2:07:50:E8
Certificate issuer:       /CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
Certificate serial:       010D0C9F4328584FAABC88AEB97B590460BC3F00
Authority key identifier: 5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9b5e3ba-fe84-31f8-a5a7-36b2f514270e.roa
Signing time:             Thu 29 Oct 2026 21:22:44 +0000
ROA not before:           Thu 29 Oct 2026 21:22:44 +0000
ROA not after:            Wed 27 Jan 2027 22:22:44 +0000
asID:                     51396
IP address blocks:        64.89.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:aa:bc:88:ae:b9:7b:59:04:60:bc:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e87468-3770-44b8-9cdc-c0b0e117f2db
        Validity
            Not Before: Oct 29 21:22:44 2026 GMT
            Not After : Jan 27 22:22:44 2027 GMT
        Subject: CN=d4cabc29-8643-4c8d-b14e-9727631689b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:20:76:ac:01:91:37:e3:0a:03:7a:b2:e5:
                    b5:b0:30:39:34:95:7e:af:44:d3:c2:b1:00:c8:27:
                    25:7a:af:2f:fa:21:d7:7f:87:a5:7f:a6:89:43:16:
                    cc:b3:8a:80:9c:3c:34:42:ce:19:e1:9e:a9:27:46:
                    ff:aa:aa:d7:36:53:7b:ad:fe:43:c7:cf:e5:ee:c6:
                    a6:63:fc:aa:d1:b9:81:1e:1b:c6:fc:4b:84:3a:3c:
                    72:ad:32:e9:09:77:ee:0f:fa:ff:f3:c8:e0:4d:64:
                    31:a3:1d:a2:94:80:e9:81:74:08:28:07:d2:4d:4b:
                    11:1f:11:81:89:6b:82:13:bf:9f:ae:d3:f4:15:f6:
                    8c:76:4a:3b:57:c1:44:cb:9b:67:e2:17:c8:00:2d:
                    5a:9b:62:8a:fd:da:70:71:8e:60:46:09:55:00:9a:
                    25:81:6a:aa:94:a2:db:c0:50:8f:36:20:a3:22:fd:
                    22:25:dd:6a:32:11:80:98:0d:5c:bc:dd:5b:15:b0:
                    15:9c:17:ce:0a:f0:6d:8e:b8:c4:1c:60:31:80:d4:
                    d7:e7:36:4a:22:b9:f6:fd:ab:e9:e0:fd:fc:be:2f:
                    33:b3:00:b1:ef:51:09:ee:c3:19:39:83:3a:4b:c2:
                    1f:67:65:be:15:87:26:ef:d6:4f:cf:2c:e7:ff:fd:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7B:20:7E:DA:C8:6F:3B:C9:FB:A9:BD:ED:CC:70:02:F2:07:50:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9b5e3ba-fe84-31f8-a5a7-36b2f514270e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db/f9e87468-3770-44b8-9cdc-c0b0e117f2db.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:94:DA:91:56:B9:AD:6A:2F:83:4C:8B:E8:E2:0F:E1:44:8E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9e87468-3770-44b8-9cdc-c0b0e117f2db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:24:5c:3b:b3:be:ce:75:fe:79:6e:2a:94:81:e8:41:8c:3d:
         4c:df:57:fe:b4:7b:34:4d:51:d8:bd:7f:b7:d1:cf:e8:51:7e:
         0a:23:f0:77:fe:d9:01:85:2b:0a:9b:58:7a:0c:b5:36:86:bf:
         33:1c:81:70:72:9a:cd:a4:f9:03:d1:c6:20:3a:f7:f5:dd:a6:
         02:8b:da:34:4f:39:27:33:f7:3d:f0:c8:d2:30:99:52:4b:39:
         89:be:c7:c8:ce:78:4c:88:d2:66:a2:ba:40:4f:8e:67:e7:ad:
         ee:4c:b9:bf:6c:fb:36:5e:37:24:ce:d4:c8:c3:df:52:bd:01:
         ac:3b:bb:e9:9b:07:34:ed:ee:01:1d:bd:e2:3d:2c:82:ed:98:
         98:c5:c3:71:fb:3d:02:16:d0:a3:cf:b7:73:e3:fd:53:73:6d:
         de:c9:81:cd:4e:e4:83:d0:58:77:98:8b:d5:f7:29:e9:43:16:
         f6:c1:34:ae:c3:f1:bc:25:ae:f9:a6:80:4c:07:fa:75:da:c7:
         b8:7b:38:0f:a6:c6:25:3c:e6:56:16:f1:55:7b:f8:ca:4f:28:
         a1:a6:7c:1d:99:cf:b3:e1:ec:22:c5:1b:95:6b:5a:1f:77:43:
         18:52:c0:8e:48:25:2e:81:02:a3:5c:b7:07:1a:6b:90:79:ec:
         4e:0a:8b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:46:54 2026 by rpki-client