Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/75416f7d-47e2-370a-b6f9-49641960296e.roa
File:                     75416f7d-47e2-370a-b6f9-49641960296e.roa (raw, json)
Hash identifier:          R/NpRjYsom8gUwv2zz5HC02BlAJXXgnx2KmshGlagH0=
Subject key identifier:   42:D2:CC:79:D1:B5:E0:87:6D:19:D9:BB:5D:7C:FD:91:A3:15:CD:D7
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584F698D7BB9B3C71746C29D9C00
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/75416f7d-47e2-370a-b6f9-49641960296e.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     393607
IP address blocks:        204.83.249.0/24 maxlen: 24
                          207.195.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7b:b9:b3:c7:17:46:c2:9d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=96b2941a-b110-4054-8f45-ec1d525c5e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:a6:f5:12:c6:05:3c:1a:26:22:7e:b1:ec:
                    d2:e0:a7:6f:53:4e:16:b8:a5:45:34:0f:15:39:d4:
                    60:10:c5:d5:6c:1f:ad:21:1e:cb:2c:8d:aa:26:a6:
                    90:54:d1:59:81:70:7c:aa:2d:8f:66:b7:3e:05:46:
                    98:69:01:6d:84:12:0e:3e:84:87:1b:8b:3d:4f:20:
                    9e:c7:c9:c3:42:b4:d7:b1:56:a5:ef:86:b7:b7:3f:
                    1d:e7:a5:48:46:76:de:b7:3c:b9:e5:5f:29:9d:ff:
                    d2:ad:7a:d9:55:b1:2d:7f:5a:71:4e:58:70:cf:73:
                    2c:24:9d:8e:c0:6e:f4:6b:88:39:82:12:79:7f:10:
                    0d:19:06:db:f4:58:9b:b6:b6:63:75:3e:1c:65:fd:
                    fb:60:42:5c:62:49:8f:66:7e:96:87:86:45:29:8d:
                    59:40:6e:d1:61:21:21:06:25:43:24:f3:8e:3c:ce:
                    67:73:83:4d:2c:95:a1:f7:ec:16:55:f2:cd:8b:86:
                    08:b5:1b:b1:48:b3:9c:df:f3:28:72:1a:73:eb:d7:
                    ef:d2:00:9e:4c:be:81:70:13:ce:64:48:39:5b:d2:
                    76:6c:e3:76:8f:58:d6:7e:7b:ad:f9:d2:20:58:f0:
                    dd:64:87:47:29:60:c8:59:41:47:c8:47:3c:f6:94:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D2:CC:79:D1:B5:E0:87:6D:19:D9:BB:5D:7C:FD:91:A3:15:CD:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/75416f7d-47e2-370a-b6f9-49641960296e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.83.249.0/24
                  207.195.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:c9:80:72:44:87:f6:ee:e5:1a:da:3a:de:96:2a:d8:d6:
         40:15:d6:1c:e4:b2:43:35:75:fd:76:d1:50:05:95:37:95:01:
         da:b9:35:67:0a:e5:9d:17:65:c6:46:ea:91:5f:86:a7:6d:05:
         d1:b9:e8:41:d0:19:2c:79:29:11:b3:30:6e:de:07:ea:5e:a8:
         19:50:a9:e7:2f:36:bb:f7:75:e4:7f:2a:81:11:57:96:cd:07:
         a2:2a:c0:bd:4b:fb:5f:01:a1:61:2d:c5:15:75:4d:5f:78:e6:
         ab:a9:d3:87:5d:ea:96:e3:f4:0d:7b:70:7f:61:86:2b:d8:f2:
         0b:ed:74:6e:3d:8f:69:e8:06:d0:71:4c:9d:48:00:b0:7e:0a:
         cc:50:e6:d6:b3:0d:8a:24:bb:b8:d3:fa:77:6b:4d:98:d8:4f:
         50:61:c9:74:2b:8c:a3:81:6d:00:58:59:40:3d:29:a4:49:c8:
         20:7c:b3:91:32:28:20:26:65:d2:80:51:a8:28:87:b6:05:e4:
         e1:5f:2a:46:20:80:c7:71:24:04:e7:4a:32:2e:02:50:9b:2a:
         ad:f5:c8:5d:d7:df:fc:8f:d0:0c:90:bd:73:54:53:1e:32:fa:
         98:d4:0f:e1:cb:f3:87:e0:53:01:dd:22:05:41:0c:c1:13:3b:
         12:ee:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:04:15 2026 by rpki-client