Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/f010b163-a7ea-34cf-8309-7925ae2c3ac3.roa
File:                     f010b163-a7ea-34cf-8309-7925ae2c3ac3.roa (raw, json)
Hash identifier:          NDjBeTEq+gML5OfDFzIJJhtRqOWYCyLurJETEqja8ZM=
Subject key identifier:   49:5D:07:D0:73:01:7E:C5:5A:01:D5:9F:DD:FC:68:15:7B:4C:EE:71
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F4328584DE41B240B1BE0D1FFE939ACA0
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/f010b163-a7ea-34cf-8309-7925ae2c3ac3.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     399331
IP address blocks:        64.127.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:24:0b:1b:e0:d1:ff:e9:39:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=7fdb2408-c613-4abe-91f0-585f0155217c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:b7:94:f6:ee:80:a2:63:a3:9f:a5:06:67:
                    22:00:db:f9:52:1a:79:fa:81:e5:f2:c4:7d:a2:3e:
                    2b:60:59:89:63:ca:b4:96:f1:17:60:26:a3:95:e0:
                    23:2c:c7:48:21:45:25:3c:b9:07:06:3e:b7:fd:e2:
                    f7:b2:1c:9f:d1:7c:e9:df:3c:49:d9:50:7b:77:e6:
                    98:ff:da:7b:42:de:97:9a:4b:fd:98:2b:30:83:a1:
                    fc:19:25:1e:43:c2:81:34:3c:19:ac:f3:24:7f:4e:
                    58:21:44:e8:e5:04:8e:61:42:3a:d9:a0:75:15:30:
                    f4:f8:3d:07:72:c1:03:0e:11:5b:ac:dd:a9:72:25:
                    02:62:4b:28:1f:22:5b:7d:f1:65:f4:93:96:57:a9:
                    74:c5:cd:b2:4f:c2:85:5a:24:82:b0:40:b2:6c:fb:
                    af:c2:c2:cb:52:e1:45:cf:21:a8:83:f2:7a:0b:75:
                    3d:14:96:9c:a6:51:48:8b:da:80:41:1f:05:e2:64:
                    ff:b4:dc:68:c3:ba:de:bc:1c:c0:ea:0c:a5:d1:bc:
                    fe:b7:2a:77:2e:6d:65:8d:20:25:58:a5:96:bb:1c:
                    92:0f:d1:91:9d:42:69:c0:c0:ef:3f:93:0b:a1:35:
                    93:d8:24:77:02:18:8e:e1:27:8e:b8:5f:40:7b:6c:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5D:07:D0:73:01:7E:C5:5A:01:D5:9F:DD:FC:68:15:7B:4C:EE:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/f010b163-a7ea-34cf-8309-7925ae2c3ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:46:e4:c6:58:48:f4:15:f4:8f:f0:1f:23:68:8a:dc:ab:da:
         e4:dd:20:e7:c5:3d:1d:07:c3:aa:e4:ba:6d:98:c1:76:65:94:
         ce:60:08:84:24:cb:66:58:f6:5d:aa:4a:fd:56:25:1b:96:50:
         27:b6:54:2b:1d:f4:24:da:0d:0d:5a:95:e2:f4:81:75:28:a5:
         90:d1:81:cb:9e:33:22:05:17:50:40:e1:52:b4:fd:6c:29:08:
         67:a6:59:3f:44:f3:a5:3c:93:43:24:17:33:b0:9c:74:d7:03:
         1e:6d:eb:bc:82:61:27:63:01:b2:c4:d6:f1:16:5d:81:44:03:
         04:9f:28:dc:db:16:fa:6e:f8:65:8e:d0:ca:5a:3d:36:ed:ed:
         52:4b:1d:bd:cd:27:9c:45:40:8b:dc:b3:a1:99:b1:91:fe:4f:
         14:ba:fd:db:cf:d6:6d:8f:b3:2f:cf:ff:94:b9:27:b7:f3:fb:
         ab:b4:b0:a6:3c:b2:fd:69:ee:71:bb:74:ac:b3:69:23:49:dc:
         48:6e:fc:91:bc:49:6b:09:ca:42:86:94:10:68:29:56:a7:df:
         36:f6:95:43:8d:fe:77:93:2b:c1:7c:41:90:0b:02:d9:51:da:
         e5:eb:98:69:2d:67:69:5f:1e:f8:69:0c:5c:e6:35:9f:bf:fc:
         3b:7b:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:56 2026 by rpki-client