Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/275a2e45-8dd0-3637-a44b-0098863dded8.roa
File:                     275a2e45-8dd0-3637-a44b-0098863dded8.roa (raw, json)
Hash identifier:          KEZ+d2Z1scBDr/sV3wzXjRv6M/+prQ5vegU5CoxNVsE=
Subject key identifier:   DB:08:94:FF:6E:E9:32:FC:7E:D2:F1:28:36:B0:21:3A:86:AF:7A:4C
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F4328584EA7886808F0FA6DC6B06BE580
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/275a2e45-8dd0-3637-a44b-0098863dded8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209242
IP address blocks:        139.64.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:68:08:f0:fa:6d:c6:b0:6b:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc6535d3-0e5f-490d-8521-47443386028e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a4:2f:1c:ee:6f:99:bf:88:a9:41:f7:a3:08:
                    dd:6d:68:9f:bb:01:02:94:c4:5b:7a:ce:1c:3b:ab:
                    1b:58:3a:7b:b4:82:75:62:27:5b:cf:18:81:57:e0:
                    c7:5d:fc:51:d0:5d:b8:bb:6d:5e:cf:e2:2e:cc:8d:
                    92:23:53:c1:4c:28:20:ae:f9:2c:1c:74:7e:40:d0:
                    51:dd:72:f7:a7:84:bd:75:8a:a0:13:77:a7:8c:9f:
                    d3:eb:2d:0b:9c:2a:2d:72:98:ac:e3:5f:47:c6:c4:
                    15:e1:b3:b2:a0:21:b6:f2:48:f6:4a:6c:42:07:98:
                    2a:df:b8:45:4b:f4:68:b7:9b:ef:4a:00:de:ad:51:
                    01:66:b2:7c:46:56:11:de:35:6f:14:9b:77:37:a5:
                    0f:b6:e2:20:cd:c4:d7:e7:1e:b5:8d:40:d3:91:e8:
                    f1:93:24:ed:4b:d5:35:1e:1c:c8:0b:a2:66:d7:fb:
                    f9:74:a3:51:05:af:0b:f8:eb:97:83:b1:a3:04:1f:
                    3e:d1:07:b3:bb:dd:8f:8b:19:66:b0:ab:44:35:c8:
                    a3:5c:a9:5f:a9:8d:79:46:da:ab:20:45:18:32:46:
                    85:c8:ac:55:4b:f4:7b:4a:71:fa:8a:68:65:aa:ad:
                    d1:e9:68:aa:7e:c3:1d:bd:9d:b0:86:fc:c8:4d:83:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:08:94:FF:6E:E9:32:FC:7E:D2:F1:28:36:B0:21:3A:86:AF:7A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/275a2e45-8dd0-3637-a44b-0098863dded8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:14:89:62:07:5f:c1:76:51:ff:1d:81:6b:5e:e0:bd:08:74:
         18:c4:4a:dc:b4:cc:3f:62:78:8b:78:5d:49:42:1d:3e:6d:a5:
         ba:a9:85:fa:1b:c2:73:41:aa:3e:1e:1d:2e:2c:e4:ef:66:8c:
         f1:cd:bf:76:e2:82:00:6d:5d:6c:54:e7:07:e2:d4:fb:77:92:
         ba:d3:07:73:99:e7:e5:96:af:1a:ca:60:69:e9:06:87:d8:84:
         dc:27:b2:ca:7a:b1:1c:7a:ef:5c:2c:d0:b6:16:4e:33:40:7c:
         7c:f2:f7:3c:56:69:fd:cb:7e:5b:35:b5:3a:4a:f6:ee:51:fa:
         20:4e:d0:3e:ac:fd:58:43:e3:4c:d9:f5:f5:23:f0:0f:73:d6:
         af:e4:5f:26:73:75:d3:8f:01:81:0c:50:5b:43:cf:f4:02:d6:
         0a:c4:6d:eb:68:1d:80:87:ee:46:71:3f:d3:33:e8:34:21:f6:
         8f:05:58:3d:f1:00:8f:3a:f1:13:4b:f6:ce:05:59:0f:a7:ca:
         e0:bd:2f:34:d4:f3:6f:0e:72:08:71:7b:7a:3f:8f:f9:9e:e6:
         a4:f5:ab:7e:7d:3e:14:80:6d:38:b1:ba:af:95:f8:66:67:32:
         c2:54:35:a3:b6:5d:00:c3:e1:2b:51:9a:e2:26:35:ce:b2:0c:
         f9:ee:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:19 2026 by rpki-client