Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
File:                     42c626f3-6616-371e-a23f-3647b3c8eb49.roa (raw, json)
Hash identifier:          gYIzE4138Nm9//TknmBMIedjbiFfRuCpduQN+kFL9oc=
Subject key identifier:   2F:0D:1C:9B:C0:F6:E9:79:ED:5B:5A:4A:17:84:C8:DA:1A:02:17:33
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584F4973BEDBAF42878AC71C8F00
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396032
IP address blocks:        64.38.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:be:db:af:42:87:8a:c7:1c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=021e5f0d-a801-4a8d-bde3-a5aa9d72f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:4f:0d:1f:08:b7:a0:f8:dd:cd:72:69:f3:
                    6a:47:46:14:f3:ac:40:8e:cb:8e:15:92:eb:e6:f4:
                    d8:7a:6d:7e:d5:70:51:4a:c5:60:d7:9f:df:7b:2a:
                    2f:f4:9d:15:db:2b:d2:f3:39:c9:01:fa:09:cc:2b:
                    78:87:72:42:28:1e:16:30:12:e7:a7:3e:de:d1:5f:
                    7b:dd:11:48:63:e0:65:59:c4:9e:82:93:31:99:56:
                    f2:da:41:5f:e9:36:ac:a9:81:e6:06:0d:5d:d5:e8:
                    f2:a3:06:4e:79:b3:3c:31:b6:5a:5c:5b:25:d7:ed:
                    6f:74:20:27:0c:ee:2e:ec:62:f9:16:4d:10:6f:12:
                    53:3f:16:fa:83:45:c9:d8:7f:44:84:0c:16:08:2d:
                    c7:4f:f0:94:a0:c0:50:33:60:12:cc:ba:ee:c3:42:
                    83:10:f4:03:f4:15:95:75:17:e7:1e:13:0b:fc:3d:
                    0f:e8:bd:7c:d3:3d:7b:3b:64:83:22:bc:2b:52:ba:
                    65:72:4f:b4:52:d5:62:ff:4b:8e:bc:ad:d6:ea:f5:
                    a3:e5:d5:bf:96:56:3f:43:52:77:ee:55:44:be:18:
                    de:df:de:26:77:13:23:c8:25:d9:34:dd:84:59:aa:
                    4f:4c:a2:66:e2:1d:5a:6a:96:99:85:5d:98:bf:ab:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:1C:9B:C0:F6:E9:79:ED:5B:5A:4A:17:84:C8:DA:1A:02:17:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:cf:9a:0f:9d:ae:c3:3b:18:e6:d6:91:6d:9d:70:91:0a:b4:
         b3:01:f3:af:e8:bb:25:ea:94:6d:07:94:fa:a1:c3:f2:fd:6b:
         3a:48:d3:a2:17:e9:3d:3a:eb:e1:d5:54:ab:40:22:b5:e3:ec:
         96:6d:2e:53:f0:e0:88:e9:a9:b5:98:a7:9e:e6:d3:64:2b:76:
         2d:d8:61:3a:ce:1c:28:7f:b2:77:b3:67:3b:b3:fb:56:b3:c7:
         38:12:42:d9:8e:80:a2:78:51:37:1f:c5:b9:e1:44:c3:20:74:
         15:cf:f4:82:82:4c:7f:fe:47:fd:34:8c:37:3c:5b:23:09:74:
         34:c7:e0:c0:27:61:1d:5f:59:7c:2d:bd:02:c0:2c:65:ff:74:
         80:54:58:53:7d:b1:5a:1e:8c:fd:6d:de:61:0f:75:ea:59:69:
         24:e0:53:da:f6:3a:8c:03:12:08:31:cc:c6:6d:8a:a3:67:cb:
         ec:43:e9:84:b2:c8:40:f8:7d:70:f9:85:ee:c6:f2:31:bb:18:
         b5:6e:4d:58:aa:e1:7c:c7:11:6a:62:e8:9a:84:7a:95:8a:e2:
         c0:16:87:ae:08:99:9c:1b:9d:c1:57:5c:df:68:80:3d:51:b6:
         8c:ae:10:21:93:6f:c5:36:3b:ee:6e:6b:48:a4:31:f1:45:99:
         98:83:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:33:33 2026 by rpki-client