Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/734f8684-06c6-3976-9f53-01753cb704b5.roa
File:                     734f8684-06c6-3976-9f53-01753cb704b5.roa (raw, json)
Hash identifier:          y0mK++mC+IOLzxkxnNUDmLpuXgBkkGz57BPvfgqZUZ8=
Subject key identifier:   CC:33:6F:C8:76:36:A2:56:EA:5A:13:65:78:76:35:5C:02:32:58:2C
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E50848D8A7E1D92C3805F7100
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/734f8684-06c6-3976-9f53-01753cb704b5.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     14061
IP address blocks:        159.223.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8d:8a:7e:1d:92:c3:80:5f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f741e3f9-be4c-4621-86c3-b5f7e930971a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:cb:64:8f:fa:b9:55:7c:01:32:9c:74:37:
                    bb:7c:54:1a:00:f3:3a:97:b6:09:4d:8b:0d:d9:18:
                    2a:a2:be:10:cd:e8:d1:ac:4d:56:72:61:72:99:8c:
                    f2:e9:dd:8b:50:ae:38:d8:31:2f:27:20:f1:00:e0:
                    1b:db:76:cf:d6:29:4c:7e:df:13:3f:b1:3e:44:01:
                    d9:d9:1b:a8:da:2c:c1:9c:43:85:80:be:ad:da:72:
                    a1:45:2b:cb:bb:0d:04:e1:b3:75:f0:d8:e7:e5:59:
                    d0:79:9d:9f:17:8f:49:59:c5:13:49:2b:a4:43:25:
                    70:21:89:6b:ab:a0:52:da:47:b9:58:e8:46:33:06:
                    e1:8f:85:6a:f0:80:b8:7f:b1:3a:62:cc:87:83:e3:
                    b0:0c:5c:bc:bc:f2:01:0c:ab:6d:0c:11:38:62:cd:
                    a2:20:6c:d4:59:22:a6:1f:7a:ca:80:7c:8b:de:49:
                    34:92:29:be:dd:67:c9:64:ba:a0:a3:cf:55:99:f2:
                    f0:a5:9d:2c:6c:b1:44:af:8c:f8:7f:5b:e2:18:02:
                    3b:58:8f:55:73:64:43:6d:3f:25:cd:aa:36:c9:7c:
                    19:50:a5:c9:ce:59:0d:fe:9a:73:dd:a1:b0:e3:86:
                    26:09:1b:e2:92:5b:79:48:17:8c:2f:8e:34:f3:8d:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:33:6F:C8:76:36:A2:56:EA:5A:13:65:78:76:35:5C:02:32:58:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/734f8684-06c6-3976-9f53-01753cb704b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.223.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:56:fb:a6:42:d1:ee:63:41:50:19:48:ed:76:bd:54:a1:
         c9:41:13:4a:69:dc:ba:58:0f:13:ed:a3:5e:85:09:90:75:cc:
         3b:ff:2e:c6:2a:be:42:83:7e:a4:7c:50:16:dd:ce:4a:0e:9c:
         0d:99:36:95:f9:0a:dd:dd:a2:b6:c1:1d:30:c7:5d:fe:83:a2:
         5f:7c:d7:64:cf:10:31:0f:a1:dc:f7:7b:9e:3c:72:13:f9:08:
         90:ff:72:35:20:cd:a2:da:6e:95:8f:d4:4a:f1:5a:c5:84:54:
         5e:85:59:46:59:75:07:93:5a:be:0e:a9:07:ec:d6:fe:a3:97:
         cc:2d:12:03:59:73:2c:42:58:f9:0b:64:01:b0:48:5b:13:7c:
         03:b5:9e:55:c1:89:9d:53:17:c7:82:75:ea:e5:bb:ff:fc:df:
         0f:5c:da:da:7a:97:e5:4b:4d:21:14:9a:07:27:9f:d1:50:5f:
         61:70:a9:e3:37:44:71:2f:c7:96:d3:10:32:dc:e0:ec:5f:8b:
         35:31:bc:16:53:ea:cf:f7:db:d8:44:97:2b:ac:d6:d0:33:c4:
         5d:22:e6:15:bb:29:1c:33:7e:cd:3e:a6:a8:8c:e8:cd:4d:5a:
         38:ac:cd:5c:de:33:58:bd:ee:24:af:67:85:7e:60:7e:13:45:
         2e:e7:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:18:04 2026 by rpki-client