Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/c5019bf9-8201-3d06-bb4b-a41ae2e61d4f.roa
File:                     c5019bf9-8201-3d06-bb4b-a41ae2e61d4f.roa (raw, json)
Hash identifier:          r81wfj1+WfvRMZjgPrNOZG3HvD0ghzZXViadKNuyhec=
Subject key identifier:   B9:93:FA:D5:6A:3F:92:7E:0A:F3:BE:29:CF:6B:29:06:57:F2:12:1D
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584DEDE0B5FF2C0BD12419956080
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/c5019bf9-8201-3d06-bb4b-a41ae2e61d4f.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        162.251.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b5:ff:2c:0b:d1:24:19:95:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=9c566afb-6610-4ea0-ae31-0eb10f2e9526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:e0:cf:2f:a9:1b:0c:13:89:a8:42:7d:72:
                    e8:29:85:ef:c6:bc:ea:46:61:80:cf:9f:f0:c2:b0:
                    1a:f6:fd:1a:9d:03:96:9d:1a:6d:82:99:01:73:dd:
                    1f:87:52:1d:75:36:74:d0:86:75:3d:ca:13:fe:4b:
                    11:1d:4a:fc:e0:e0:ce:d3:77:2d:b4:d6:a6:4e:87:
                    b5:23:d1:5e:21:ae:c4:5a:b1:5e:f8:c4:ce:65:79:
                    1c:4c:89:cc:d8:84:30:3b:97:a3:62:c6:a9:5c:52:
                    18:e9:c0:3a:e0:0a:7a:11:e9:ff:4f:68:db:53:2c:
                    be:d1:ec:c2:fd:31:13:c0:0a:60:56:3d:65:f5:a4:
                    3e:b0:0e:a6:04:b0:71:e4:cb:e2:0d:98:f3:4e:1e:
                    93:9c:b7:79:4d:dd:eb:8e:4b:b1:5a:fe:61:46:eb:
                    81:03:8e:bb:e5:a2:5d:fb:2b:fc:c1:ac:2f:d4:ce:
                    08:1c:46:ef:4b:52:a4:33:d5:3a:7c:84:44:5e:0c:
                    77:3e:58:58:65:99:9c:e2:54:da:1a:10:16:7b:ac:
                    ae:9e:54:1d:dc:bb:22:2f:15:b1:b1:55:e2:34:14:
                    5a:6d:e2:dc:b7:69:b9:9d:a4:30:48:25:ed:a3:11:
                    6c:c8:8f:f6:9e:89:0e:cd:71:a9:c9:80:2f:3f:5e:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:FA:D5:6A:3F:92:7E:0A:F3:BE:29:CF:6B:29:06:57:F2:12:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/c5019bf9-8201-3d06-bb4b-a41ae2e61d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:13:b8:e2:8d:5d:01:a9:d9:45:a3:ae:a0:d6:91:68:c1:7b:
         4d:28:34:b0:4a:c5:25:14:18:ce:ae:38:49:c6:aa:af:84:5e:
         de:ea:c8:86:f5:bf:cd:84:3c:09:f1:49:08:c4:b2:df:fa:0f:
         1d:2b:31:ae:d4:6b:39:b2:e6:0f:bc:1e:85:4e:1b:48:e0:a9:
         55:cc:38:f6:0e:89:20:9e:b0:0d:6c:f6:be:c9:00:fc:6c:1d:
         14:bf:24:75:01:12:d4:a7:3f:93:86:a5:a9:f8:18:73:14:46:
         64:f1:77:e3:fd:5a:93:5c:91:7f:f9:7f:33:33:04:aa:ee:17:
         e8:9d:bb:c5:d5:b8:55:93:c0:66:26:42:79:cc:b1:02:5c:3a:
         58:b7:5b:30:6a:1f:5e:86:62:bc:7c:ad:24:4e:04:56:13:29:
         bb:52:78:a7:e4:87:34:5e:a1:b5:f4:c8:dc:a6:56:76:17:f7:
         37:17:f2:fb:cc:af:52:b7:aa:3f:61:4f:f7:9a:0c:78:86:d7:
         cc:99:c7:64:4a:8b:42:1d:1a:87:6f:df:31:4d:a1:d0:d6:22:
         28:7c:4e:00:18:e6:99:28:23:95:12:52:70:0b:2d:4f:7f:55:
         99:f8:93:16:23:29:c3:d8:ea:01:bf:54:38:4b:5e:9d:2b:b5:
         22:a8:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:42 2026 by rpki-client