Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6/84de1797-31d4-390c-ae8e-bac5b5241862.roa
File:                     84de1797-31d4-390c-ae8e-bac5b5241862.roa (raw, json)
Hash identifier:          mD+F0EnbS83PfCQuzNp5BB3zS6iqc12prUtEeOXluBQ=
Subject key identifier:   17:2B:06:E5:B6:02:49:AE:BE:CC:DB:89:5A:D6:FF:9B:17:DA:02:05
Certificate issuer:       /CN=017c0fe7-6856-4409-b2f9-20c0935c34e6
Certificate serial:       010D0C9F4328584CB981C4DFDAB867458230ED40
Authority key identifier: 83:42:10:CD:5D:68:1B:2F:E0:A8:EF:08:EC:68:D8:32:84:CE:C7:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6/84de1797-31d4-390c-ae8e-bac5b5241862.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     8075
IP address blocks:        64.5.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6/017c0fe7-6856-4409-b2f9-20c0935c34e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6/017c0fe7-6856-4409-b2f9-20c0935c34e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:c4:df:da:b8:67:45:82:30:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=017c0fe7-6856-4409-b2f9-20c0935c34e6
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=0db48ce0-1907-4752-9ec7-07f4b9e6a3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:9f:7d:58:63:59:99:a3:0e:b3:bf:d3:25:
                    ab:ee:98:4a:d9:37:92:44:12:10:39:40:b9:4c:5c:
                    e3:cf:86:7f:60:92:5d:db:80:c2:17:12:7e:2a:cd:
                    f5:54:91:77:8c:d9:84:b5:cc:3d:85:fd:7f:30:36:
                    32:01:b1:87:57:f7:63:4b:f3:9b:d3:0d:b4:40:f0:
                    f1:61:b1:7c:2f:13:a9:d7:45:d1:6c:76:06:a3:68:
                    5f:82:f0:43:b5:48:ef:fb:77:21:14:d9:82:4e:8b:
                    31:7f:14:ce:c3:07:29:7f:3f:98:87:93:0c:b8:fa:
                    d4:e2:18:aa:56:78:7b:58:25:a9:30:10:71:bc:13:
                    ac:db:7c:64:82:29:ef:51:6c:d8:10:b0:63:38:75:
                    dc:e6:bc:93:3e:0b:f8:8e:b3:0b:6b:d8:5e:9c:2c:
                    63:7d:a6:12:b3:77:9a:72:c0:b9:07:b5:8b:07:72:
                    da:a7:7c:d7:8b:b8:ba:21:2b:84:d0:41:c4:0b:17:
                    1c:68:55:bd:44:46:a4:2b:93:e3:02:ec:5f:2f:50:
                    88:fa:d3:be:df:99:82:bb:f0:14:41:cd:63:10:d6:
                    f7:f6:29:66:19:66:d1:c6:65:2d:e0:f5:8c:44:44:
                    3c:f3:f2:a8:73:64:2a:15:24:67:95:bb:98:53:c7:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2B:06:E5:B6:02:49:AE:BE:CC:DB:89:5A:D6:FF:9B:17:DA:02:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6/84de1797-31d4-390c-ae8e-bac5b5241862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6/017c0fe7-6856-4409-b2f9-20c0935c34e6.crl

            X509v3 Authority Key Identifier:
                keyid:83:42:10:CD:5D:68:1B:2F:E0:A8:EF:08:EC:68:D8:32:84:CE:C7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/017c0fe7-6856-4409-b2f9-20c0935c34e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.5.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:9f:de:81:44:39:ca:9d:75:c7:44:33:3a:cf:ac:7c:a4:
         90:0f:78:9e:32:00:89:de:29:a3:b8:02:4e:bb:3e:89:50:47:
         29:25:5d:09:7c:ff:c0:cf:39:70:a8:03:50:fd:b9:dc:5c:6c:
         b4:34:66:c7:dd:19:4a:c3:60:42:f2:0b:be:ab:76:9a:7d:49:
         73:c9:c1:a8:6f:fc:ca:b5:20:a8:6f:1d:4e:59:61:c1:c7:84:
         5e:48:ed:3c:f5:9a:51:b6:59:bb:f9:7b:af:4a:32:3d:e9:b8:
         1d:0d:bf:f1:26:22:a9:20:7a:fe:51:63:13:61:d1:29:a1:8d:
         c7:0b:c3:2b:4f:18:43:70:24:09:e0:ac:03:d9:a0:4b:91:17:
         b3:ee:fc:ad:b4:51:ac:4b:83:88:62:b3:90:a3:aa:31:0d:be:
         e8:69:7d:dd:6c:df:bf:94:72:af:b0:39:5e:24:69:4d:70:0b:
         ac:b9:a8:6c:17:fe:17:d9:dd:3c:a9:6b:ee:98:09:75:fd:c0:
         5c:09:00:6e:e1:d9:05:39:91:b1:43:51:2b:21:f8:2f:4c:fc:
         cc:73:5b:5a:24:02:63:a4:24:e3:4f:3a:20:6c:10:e2:b0:8b:
         a3:8b:18:05:d9:13:f4:c5:ae:25:23:b9:26:26:22:3e:61:e7:
         08:5c:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:33 2026 by rpki-client