Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/2dd9c841-63ef-369c-9e50-1ecd08139690.roa
File:                     2dd9c841-63ef-369c-9e50-1ecd08139690.roa (raw, json)
Hash identifier:          i8cMOg599twMHEKxCHmOyo/ychw3+Nl+XykPn/BZIWs=
Subject key identifier:   F4:14:41:E2:61:7A:17:4C:F2:73:D1:EA:32:2C:C4:EF:4A:56:58:2A
Certificate issuer:       /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
Certificate serial:       010D0C9F4328584F3B7D2356A4202A13AAB67260
Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/2dd9c841-63ef-369c-9e50-1ecd08139690.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     398391
IP address blocks:        64.226.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:23:56:a4:20:2a:13:aa:b6:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=a826c828-b89d-4fa5-a5b5-bdb892da1153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:56:7b:4c:db:7e:b8:8c:f9:76:6a:cb:1d:
                    e0:f0:f4:a5:1a:b3:d4:1b:78:32:90:22:f8:5d:72:
                    59:0d:b6:2e:a9:02:32:fa:62:0e:3d:98:a0:ca:76:
                    69:ad:be:a5:a7:a0:df:34:bd:18:05:1a:bb:d1:e5:
                    47:50:83:25:90:e6:ba:a7:0c:eb:2f:b3:f3:b1:83:
                    ad:af:43:43:45:63:89:22:2b:96:3f:a2:60:ae:ce:
                    25:ee:f0:3f:23:4f:02:36:2a:37:ca:0d:05:04:e9:
                    c6:de:e3:49:ed:d8:b0:b9:ac:02:df:02:4e:85:23:
                    b5:16:6a:c8:7b:f3:7b:e1:23:7f:69:b5:05:34:8c:
                    58:26:1d:cc:3d:34:08:28:8a:41:6a:0f:5f:56:59:
                    42:1d:ac:50:c7:34:f5:f6:30:8c:7e:c1:1e:1e:3d:
                    0f:2c:88:b2:66:36:35:43:7f:53:0c:e0:81:15:97:
                    42:52:72:7e:ce:2a:53:4d:3f:03:5f:57:f4:a9:6c:
                    fb:88:27:7e:04:96:52:8a:58:ed:25:2f:4b:4a:39:
                    a1:5a:f9:e6:12:30:70:f0:33:af:a6:28:ae:c1:04:
                    5e:e5:53:51:b4:e4:df:29:a3:0e:da:72:8f:49:cb:
                    84:7e:b4:68:76:72:c6:5f:21:57:bf:da:33:eb:08:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:41:E2:61:7A:17:4C:F2:73:D1:EA:32:2C:C4:EF:4A:56:58:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/2dd9c841-63ef-369c-9e50-1ecd08139690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:83:0e:ec:78:0e:a7:67:46:3a:da:aa:12:f1:ce:e3:78:
         af:24:a5:8d:c7:3b:b3:2b:72:26:9e:e3:f6:e6:2e:3f:61:9a:
         77:ea:07:9e:85:0f:c8:ff:65:70:3e:5a:eb:f7:cb:21:68:04:
         c7:e1:09:06:ef:5a:fb:75:37:5e:80:16:84:ae:5b:2f:6c:f1:
         d2:dd:fb:04:cc:da:93:a9:f8:e3:ed:3b:8e:0c:26:dd:91:c6:
         dd:ed:01:81:86:39:46:d4:dc:8e:fb:42:66:a0:10:4f:37:ac:
         86:f9:f4:e8:91:8b:4a:5c:16:c6:8c:70:c4:91:a5:44:9b:b3:
         96:bf:bd:05:63:72:d9:6d:b1:05:e4:e3:46:d8:04:5b:66:78:
         3b:51:97:44:5d:3b:73:25:0c:cc:f5:cf:62:2d:72:a7:63:da:
         2d:67:92:83:8d:46:53:aa:cc:53:c0:95:32:3b:19:b9:47:aa:
         07:fc:ca:4d:0d:6b:60:dd:6e:a1:1a:b3:f5:79:54:5c:c4:f3:
         3b:01:26:14:71:a5:dc:16:af:ab:db:dc:8f:b3:d6:f2:77:39:
         b9:29:df:e0:15:f9:b4:ff:4b:70:5a:1c:0b:a1:59:8e:bb:d4:
         d7:51:c8:29:e6:83:e4:eb:2b:0d:52:3b:aa:ad:cf:2c:31:bc:
         6a:89:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:07:01 2026 by rpki-client