Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
File:                     e62e48d2-4883-349d-8f20-db0ec148275e.roa (raw, json)
Hash identifier:          DH7SIAkxd4oem/GtoNRxx3HPEp9Av4AQHVSljDM+/qo=
Subject key identifier:   48:8B:7A:BE:B6:7E:FF:8E:8D:27:85:16:8B:64:95:E7:EE:4D:AF:14
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9F718CD280D141EFFCC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     394993
IP address blocks:        64.62.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:9f:71:8c:d2:80:d1:41:ef:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=6d5958c5-4e3c-4cb7-a3d3-30cb0382068d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:7f:ed:5c:be:be:cb:1b:e6:ee:7d:2f:2f:
                    d6:8b:c5:c2:9b:5e:cf:f5:f9:0d:50:83:c5:a9:1f:
                    5f:49:71:93:9f:07:0e:4c:ed:be:35:70:64:b5:71:
                    4a:e5:4b:3c:7a:2a:4c:09:4e:fe:03:b2:63:dc:4f:
                    74:02:45:9d:5c:0f:f4:ea:24:96:63:d3:b4:23:6c:
                    ac:1b:23:07:e9:0f:94:73:6f:9b:46:fb:51:15:3c:
                    0d:4e:5f:3d:86:92:24:80:26:a2:f9:9f:f6:58:ad:
                    fd:01:57:f8:10:d5:ee:f7:31:a0:36:00:e8:0d:36:
                    02:83:28:4d:92:23:0d:a3:78:e0:22:98:29:17:ff:
                    c7:1d:e2:79:46:96:f8:b0:34:74:6d:70:5c:56:91:
                    1e:ce:d5:b7:64:f8:52:d6:36:6f:20:54:e2:a7:7b:
                    da:4e:81:fb:31:d6:d1:56:c0:a8:5f:73:19:4f:86:
                    35:fe:35:34:29:41:b2:f5:40:ec:5a:6f:a1:30:2e:
                    fa:b4:b7:2d:7a:e1:95:51:5b:41:e5:80:c1:ed:53:
                    54:ce:82:48:58:06:18:ed:e6:37:ac:17:f0:09:84:
                    51:f1:11:be:5a:bf:9e:2d:1a:2b:db:b2:55:f2:b3:
                    c6:3a:ce:38:fe:9c:3a:ae:c0:ec:68:18:7c:09:21:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:7A:BE:B6:7E:FF:8E:8D:27:85:16:8B:64:95:E7:EE:4D:AF:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e62e48d2-4883-349d-8f20-db0ec148275e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:59:69:ee:1b:f2:e3:27:d5:7d:61:3e:4a:ff:5f:02:0b:af:
         0e:51:0e:20:fd:51:5f:28:59:8a:74:e3:2c:84:74:0a:2e:b8:
         8b:9e:5c:0e:f0:72:35:a9:db:41:4b:b5:3b:cb:c5:da:07:15:
         e8:70:08:fe:5e:e5:d3:2b:71:7c:dc:32:c1:27:68:9c:51:2d:
         5c:09:3b:6e:ca:da:22:94:f7:3f:d9:12:9e:d2:c4:6e:c0:35:
         e8:ba:f3:66:87:d4:5c:91:ea:f8:89:64:cc:8f:f2:6c:07:29:
         70:8e:4e:ad:b4:fd:92:9e:b9:6a:31:1d:83:4c:5f:d6:9d:35:
         3f:3c:d7:98:51:a8:a9:72:fd:1f:4f:75:ad:5d:d2:81:39:df:
         f8:73:85:5a:6c:9f:50:7a:1a:b2:a9:f5:5d:81:bb:f1:0e:6d:
         79:29:55:f9:b9:d8:c1:47:f9:b7:3c:76:e7:34:01:fa:fc:91:
         5e:bf:3b:31:5c:c3:e3:39:b6:d8:3c:cd:16:59:cb:71:14:4b:
         d4:74:7d:08:3e:60:94:cd:3c:f1:ad:f2:a9:e2:dc:b2:79:49:
         e5:27:85:37:0b:9c:ff:3a:a5:88:0e:6b:e5:c0:65:1a:60:ac:
         17:24:46:0b:06:33:4e:37:ee:87:2c:5f:bf:69:0d:74:06:51:
         8e:ad:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:27 2026 by rpki-client