Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/7d4d28b3-d6e8-355e-819e-9eedc127109b.roa
File:                     7d4d28b3-d6e8-355e-819e-9eedc127109b.roa (raw, json)
Hash identifier:          1//AR9Z+QFIt6OKjC0H807bfv/8hxJf4CCbCwA77vVU=
Subject key identifier:   98:76:D6:23:57:08:89:47:2B:36:E3:98:A8:33:D3:58:15:0B:AF:43
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584E7418BCD46E3D211A11D7ABC0
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/7d4d28b3-d6e8-355e-819e-9eedc127109b.roa
Signing time:             Fri 10 Jul 2026 14:52:07 +0000
ROA not before:           Fri 10 Jul 2026 14:52:07 +0000
ROA not after:            Thu 08 Oct 2026 14:52:07 +0000
asID:                     62549
IP address blocks:        216.125.248.0/22 maxlen: 22
                          216.125.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:18:bc:d4:6e:3d:21:1a:11:d7:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Jul 10 14:52:07 2026 GMT
            Not After : Oct  8 14:52:07 2026 GMT
        Subject: CN=3819b97e-797a-40ef-829e-6c217d46ecb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:a3:ba:fe:e9:a6:6f:64:b4:8e:bc:2f:a0:
                    02:2d:06:47:04:3c:7b:ed:b3:97:3e:98:ee:5b:58:
                    e8:ca:a8:16:3b:4e:8c:3e:ec:93:13:74:b4:cc:37:
                    1d:11:a8:3e:02:d6:5e:a7:62:4e:19:81:1f:60:38:
                    84:cf:fc:3b:ba:76:34:e9:79:e4:61:2e:78:60:6a:
                    ae:cc:60:e9:8b:0e:bf:d8:7d:bb:ce:2f:bd:a5:4c:
                    6c:8e:07:38:5b:1f:28:ab:b0:2e:5f:0c:c8:ce:3c:
                    24:57:06:94:00:72:5b:26:71:24:78:2d:ee:ef:3c:
                    e5:e4:24:de:fe:19:1d:88:95:0c:ec:30:87:20:67:
                    d6:58:02:3b:8d:de:0e:f9:37:86:59:00:a1:9d:d1:
                    cd:e0:1a:dd:69:99:98:40:17:5a:3e:1e:61:c5:9a:
                    e4:1c:89:fa:38:da:dc:48:70:7a:7c:07:0f:f5:d6:
                    d6:e8:94:70:7e:c0:a8:c9:89:14:69:8c:70:a7:06:
                    46:1e:cc:87:0f:a6:aa:33:e5:91:59:b5:8c:26:c2:
                    06:8b:e8:d7:87:89:6c:67:fe:4f:de:0f:de:dd:d2:
                    bd:ed:cf:65:48:00:fb:ef:c8:d2:c1:f9:a2:ef:ea:
                    15:ef:7e:e3:5c:52:dc:7b:b7:48:59:0b:b0:ea:7d:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:76:D6:23:57:08:89:47:2B:36:E3:98:A8:33:D3:58:15:0B:AF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/7d4d28b3-d6e8-355e-819e-9eedc127109b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.125.248.0-216.125.253.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:79:33:59:f8:a9:ca:e5:38:3e:a1:71:d5:63:9c:18:6b:
         94:86:d1:51:8b:8e:a7:72:af:c4:a3:01:c3:d1:05:4b:80:20:
         65:17:b8:ee:f1:f1:b1:3f:0d:4d:28:c4:11:c6:07:aa:63:e7:
         b6:49:4d:a6:fc:76:32:39:54:ba:4d:2b:5c:a0:8b:38:d5:b7:
         52:d4:ec:ef:90:0d:49:5a:c1:1a:12:b8:f4:c3:f0:53:b7:3a:
         2f:3c:5b:f4:8b:08:0c:5f:a3:a9:43:ec:e0:24:3c:5b:2d:5d:
         ab:72:f5:01:cc:00:9c:c3:47:04:77:dd:7a:70:58:db:ca:f6:
         33:ab:b0:73:31:ba:76:a2:d4:8a:72:81:86:e9:b7:0e:7f:f4:
         21:14:e6:4d:62:ff:96:73:72:cd:17:88:96:0e:cb:2b:1f:fa:
         49:7d:7f:f9:82:e5:f8:a2:23:bc:32:21:05:a4:a5:dc:f3:27:
         98:e9:11:0d:62:97:4a:f4:b3:ba:72:18:35:a2:60:4f:1a:37:
         5a:db:18:74:f9:fc:d8:60:52:52:b6:ad:d7:e0:43:e7:32:e2:
         02:0f:9d:19:c7:8a:fb:d9:09:90:c9:f2:e0:bc:0d:51:a0:74:
         cf:f9:ca:0b:94:40:8b:99:aa:5d:93:e1:b9:76:4d:7b:91:bf:
         88:40:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:16:02 2026 by rpki-client