Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa
File:                     d3d64247-d754-342a-b8f5-056c92a5462e.roa (raw, json)
Hash identifier:          ljjeewQBWgHXXjmMYYi9U76D9tHKh5PA0LPz+ukrQ9o=
Subject key identifier:   D6:46:36:67:A2:68:7F:15:97:07:C5:B3:F8:7D:7B:2B:78:AE:EA:4F
Certificate issuer:       /CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6
Certificate serial:       010D0C9F4328584DF92C5E82CEA8D63D10749680
Authority key identifier: 8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa
Signing time:             Wed 27 May 2026 14:07:15 +0000
ROA not before:           Wed 27 May 2026 14:07:15 +0000
ROA not after:            Tue 25 Aug 2026 14:07:15 +0000
asID:                     395825
IP address blocks:        207.229.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:2c:5e:82:ce:a8:d6:3d:10:74:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6
        Validity
            Not Before: May 27 14:07:15 2026 GMT
            Not After : Aug 25 14:07:15 2026 GMT
        Subject: CN=c089cf3b-f4c9-4e37-8a9d-65caea06c38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:80:3d:67:9b:c0:1c:fa:14:a9:b6:db:8a:
                    c9:7a:7a:4f:f2:45:a4:fd:f1:91:bc:38:c2:6e:e2:
                    f3:99:70:1b:67:14:51:17:4f:e9:ad:3b:47:fb:41:
                    73:6c:ee:d6:1c:7b:0d:18:3c:76:f1:ff:4f:6c:d9:
                    e2:30:bf:59:5e:55:f2:c9:bd:f1:6c:6a:8f:47:39:
                    38:38:b1:1a:c1:69:f8:0f:e0:3b:fd:fc:04:44:63:
                    43:35:bf:0b:0c:d2:2f:3f:93:f7:e4:7e:97:0b:2f:
                    56:42:85:90:48:6e:63:7e:a3:aa:fb:f7:f1:4b:cb:
                    a2:b5:5a:e3:ce:c5:3f:46:d2:a4:30:ac:96:5d:d7:
                    33:3f:de:b7:36:19:02:fc:c5:e2:37:3c:a6:60:ef:
                    da:c3:ac:6a:dd:b8:6c:76:5d:5d:2f:90:ea:f3:20:
                    fa:fb:5b:df:f5:cc:6c:bb:05:3b:5c:54:37:9f:f5:
                    eb:bc:f9:3e:7b:be:61:c9:bd:6b:0c:4e:4f:16:f4:
                    5d:43:4f:8a:b0:9a:3a:37:80:e3:e9:b7:6b:0e:7a:
                    9f:b0:16:95:f2:95:64:d5:e9:82:29:7a:ba:87:07:
                    d0:30:a3:e0:b1:7d:ee:f5:ac:41:33:fd:43:d8:bc:
                    16:16:5e:bb:53:2c:83:1a:f2:eb:40:2d:06:39:d7:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:46:36:67:A2:68:7F:15:97:07:C5:B3:F8:7D:7B:2B:78:AE:EA:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.crl

            X509v3 Authority Key Identifier:
                keyid:8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1a:48:0b:90:a1:de:47:9a:03:57:d6:2a:d6:a3:c6:56:17:
         13:cc:1d:1e:5e:23:98:12:79:cd:5a:75:d2:69:2a:59:a3:fc:
         d4:ef:ca:38:0d:9e:fc:e8:c5:1e:f6:8f:f5:80:ed:33:b5:53:
         e6:4c:90:1b:bf:53:51:ca:8d:e6:07:92:c6:96:93:19:6d:d5:
         f4:76:24:83:85:13:6c:96:0c:c0:e3:70:71:47:6d:e2:00:41:
         ef:ca:e4:a5:38:72:3c:0e:c1:03:c9:d4:38:5d:a0:4f:08:f3:
         99:95:67:6e:ce:82:36:7a:44:ba:fb:41:6b:bd:45:42:7b:74:
         68:3b:95:45:0c:7d:3c:28:25:7b:ff:e1:31:b9:79:26:0b:b5:
         f9:56:83:68:8e:7c:be:4c:22:d2:18:51:c7:c1:10:d8:08:3e:
         e3:5e:02:88:02:bf:5d:64:6c:45:fb:c8:13:6d:b6:1f:8e:67:
         df:69:37:bb:c5:0a:93:f3:2b:90:b2:0e:10:b5:d4:99:b0:b2:
         77:df:d7:83:bd:8b:7f:b1:65:e3:8e:12:88:b6:23:c4:5a:58:
         de:78:99:30:6e:ea:21:2d:db:a5:f4:87:50:80:c9:a2:f3:ec:
         55:78:8c:aa:68:c1:2b:66:8e:f8:65:f4:b0:5a:a8:81:98:0e:
         7e:fb:0a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:23 2026 by rpki-client