Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/63d9fdd3-47f2-35af-b155-ca695ed872ba.roa
File:                     63d9fdd3-47f2-35af-b155-ca695ed872ba.roa (raw, json)
Hash identifier:          eweqha0+4cc13/6kzpIzltdNeZWrvRggTE7L4iZt6Ag=
Subject key identifier:   3C:52:AE:ED:2B:49:05:2D:2C:5F:3C:91:41:9C:84:A4:28:BC:02:AA
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584E66DA04E4E2E8B30ADD63DB20
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/63d9fdd3-47f2-35af-b155-ca695ed872ba.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     209
IP address blocks:        208.132.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:04:e4:e2:e8:b3:0a:dd:63:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=ceb7eeae-1d2d-41d4-b559-d9cd141c97b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:d2:38:49:98:29:b7:39:05:51:66:76:e3:
                    9f:52:ad:95:1f:fb:07:f8:46:db:26:90:98:46:8c:
                    61:5b:df:ba:a1:3b:69:03:72:af:c1:70:29:8d:5a:
                    a5:e6:6b:a9:97:26:32:e1:4d:c7:36:a8:9c:dc:f6:
                    b2:90:9a:c7:d7:c6:f3:11:91:7e:a0:42:06:e7:5f:
                    49:2f:c9:99:55:4f:24:59:50:29:42:8e:42:d5:d3:
                    bf:6c:4e:97:67:e1:18:16:83:08:d9:40:52:b7:28:
                    f0:ce:96:ef:ae:f4:db:53:c2:5b:52:12:72:7b:0b:
                    22:88:cf:9d:e3:53:20:e4:fd:57:d9:05:5f:f9:85:
                    19:af:38:01:13:1b:0e:80:32:fc:70:13:ae:1c:bf:
                    37:92:31:78:22:89:49:1b:a6:81:8a:68:34:b8:1d:
                    a3:5b:64:54:b8:e6:24:b0:d8:41:70:d7:9d:e1:88:
                    01:a1:09:4e:96:f6:31:d4:e7:31:7f:df:99:d8:bf:
                    11:43:77:fa:08:a4:1d:5e:bf:ab:36:75:7a:61:93:
                    4d:33:7a:33:2f:22:74:60:91:35:ae:5e:e1:1e:e8:
                    85:c3:7a:e2:8f:e4:09:46:ed:80:a0:a4:ad:aa:42:
                    cb:c6:63:2d:03:97:c2:a1:ba:1b:12:cb:84:98:4f:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:AE:ED:2B:49:05:2D:2C:5F:3C:91:41:9C:84:A4:28:BC:02:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/63d9fdd3-47f2-35af-b155-ca695ed872ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.132.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:62:25:1a:6e:68:3b:5d:98:4d:a8:7e:27:5c:50:16:6e:
         bf:10:a6:fb:ed:4f:46:30:76:ab:6d:65:0e:f8:6b:67:0f:b8:
         c0:e9:ba:70:32:18:bb:bf:64:3b:6e:e3:eb:ba:22:d3:0b:7d:
         c6:c1:d5:03:36:fb:e8:41:f4:46:26:ee:2b:d1:50:b0:e1:3d:
         d7:12:46:1b:b2:f1:70:04:a9:90:50:53:d5:ba:31:00:8d:e1:
         84:b7:5c:df:20:59:24:4a:6f:3d:21:c1:ab:07:c1:4c:9e:21:
         a1:01:84:92:bd:6f:7e:17:86:c3:56:20:e7:67:34:60:90:61:
         b4:51:a7:77:18:ae:1d:66:ec:e8:76:13:e0:9d:76:0a:92:0b:
         b1:fc:b6:6a:72:bf:ba:69:77:77:59:71:f2:a2:76:54:6a:fd:
         ba:c3:b3:97:57:2b:5c:34:f8:2d:28:29:f8:a3:d1:90:16:4e:
         c6:f9:c3:0a:b6:73:36:40:c4:c8:0e:dc:56:ab:e4:2d:67:b8:
         28:23:69:6b:07:7e:71:4e:6c:ba:bb:fa:84:30:8f:41:ba:14:
         46:68:0f:15:e4:a4:43:17:78:ac:ba:49:08:e3:ad:f5:19:0c:
         c1:82:25:07:9e:f2:4d:3d:67:bc:2d:3e:25:38:1c:a0:e7:cc:
         e7:ab:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:11:41 2026 by rpki-client