Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa
File:                     72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa (raw, json)
Hash identifier:          PqC7YaE5Zx4Z5lZdt2pzsbrOKfjbndoaHSTCC2zYLxI=
Subject key identifier:   F7:92:59:C8:BC:E3:1E:95:08:D5:B7:C4:70:70:61:13:52:07:EC:41
Certificate issuer:       /CN=34b8b05c-fc82-4616-8954-1c456aa48a7b
Certificate serial:       010D0C9F4328584D8A1DD80353E3361C48359300
Authority key identifier: 2A:84:1B:A4:6D:3F:BB:FE:25:CC:90:9F:0B:29:85:79:11:6B:AF:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa
Signing time:             Fri 17 Apr 2026 19:23:16 +0000
ROA not before:           Fri 17 Apr 2026 19:23:16 +0000
ROA not after:            Thu 16 Jul 2026 19:23:16 +0000
asID:                     18725
IP address blocks:        64.250.20.0/24 maxlen: 24
                          64.250.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/34b8b05c-fc82-4616-8954-1c456aa48a7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/34b8b05c-fc82-4616-8954-1c456aa48a7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:1d:d8:03:53:e3:36:1c:48:35:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b8b05c-fc82-4616-8954-1c456aa48a7b
        Validity
            Not Before: Apr 17 19:23:16 2026 GMT
            Not After : Jul 16 19:23:16 2026 GMT
        Subject: CN=2cd5455c-1479-411d-8cb3-09d7d7e6c26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:3d:29:d3:c2:f2:06:ba:d2:0e:7e:05:41:
                    84:cf:5c:72:25:9b:c6:51:52:93:b0:db:1b:f4:de:
                    cf:da:a5:0b:81:29:64:64:30:5c:2f:4d:f4:74:95:
                    0f:2c:8a:b6:f1:66:6f:c3:8d:54:f6:89:c1:d2:b0:
                    c3:f9:15:f2:7f:13:b6:32:e9:6e:d7:f8:bf:12:d6:
                    13:f4:59:fc:61:d1:a6:96:96:12:82:f9:26:6e:48:
                    04:d8:57:ca:77:92:8c:16:54:97:17:64:11:70:70:
                    d9:96:c6:8c:50:a7:c5:d0:cf:09:8c:d0:68:06:72:
                    46:7e:0e:07:6a:c7:ed:fd:05:dc:93:f4:09:57:94:
                    cc:8e:88:26:cc:b0:bf:0c:9e:5b:52:7c:03:d8:d1:
                    a2:09:c6:4c:fa:f5:c8:2a:20:23:ba:62:98:dd:00:
                    dd:71:90:f7:f7:12:51:ec:85:fb:c6:2c:4a:54:15:
                    80:42:70:76:6a:01:d4:1c:4a:61:cb:98:1c:c6:36:
                    3c:23:74:d1:54:23:42:da:ed:83:36:32:94:43:05:
                    e4:10:68:c6:90:82:08:4a:18:76:8d:ec:67:3a:40:
                    95:b2:fe:55:76:cd:43:77:f6:e4:7d:df:eb:62:4e:
                    ed:80:55:41:a7:89:b5:8e:f2:f7:d3:4b:76:31:36:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:92:59:C8:BC:E3:1E:95:08:D5:B7:C4:70:70:61:13:52:07:EC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/72a5e5e5-e31c-3d46-8275-8440a6d1b9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b/34b8b05c-fc82-4616-8954-1c456aa48a7b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:84:1B:A4:6D:3F:BB:FE:25:CC:90:9F:0B:29:85:79:11:6B:AF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34b8b05c-fc82-4616-8954-1c456aa48a7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:10:f9:64:68:36:4d:a8:69:c5:54:e0:4d:97:16:00:a3:
         7d:9c:39:d9:90:42:21:6e:a1:76:60:a4:12:a9:52:eb:6d:41:
         97:5a:c5:b7:a8:0f:00:ee:e5:15:63:34:91:f4:42:02:07:86:
         d7:4c:fc:8d:18:20:c1:e2:96:a1:e9:1e:06:09:aa:7a:dc:6c:
         f0:c3:0f:21:61:8d:d5:42:48:eb:2d:cc:0e:14:f2:63:9b:6e:
         8f:cd:98:55:31:1e:21:7f:08:1e:75:68:95:77:4e:66:19:37:
         69:44:c7:57:9f:b5:ba:e5:d6:4e:ae:d5:90:8c:4c:f5:1d:a5:
         34:75:19:13:17:ac:0e:21:02:61:91:71:6a:27:67:20:32:b6:
         a0:9b:9b:67:f8:8c:4d:88:7f:16:e7:30:fa:32:1a:42:08:33:
         86:0b:54:2f:e7:9b:ff:ca:64:1b:2a:a1:dc:d0:ea:82:3c:1a:
         17:bd:18:8f:8c:e6:ff:d7:a7:39:56:0d:b3:91:cd:d9:9c:da:
         d7:a1:cc:44:e7:63:a2:f1:d4:ee:f1:34:41:d7:21:80:87:16:
         86:7d:8f:db:89:98:c3:8f:16:7b:35:60:11:f9:c7:f3:83:01:
         5e:6b:71:04:e5:8b:f3:cc:39:4e:7c:93:25:47:7a:07:29:d4:
         21:2e:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:36:45 2026 by rpki-client