Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/8e684044-d0a1-3c0d-ae44-ddc1bbe45bfb.roa
File:                     8e684044-d0a1-3c0d-ae44-ddc1bbe45bfb.roa (raw, json)
Hash identifier:          AtFEya6HxOhBVbq2u58KNXjiNMQe5VCVfnvnR0nbv5c=
Subject key identifier:   DE:CA:B0:AE:24:C7:48:18:98:73:C9:53:64:4A:BC:7A:BB:04:A9:52
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584E741F6A5B3108B488D4BC6A80
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/8e684044-d0a1-3c0d-ae44-ddc1bbe45bfb.roa
Signing time:             Fri 10 Jul 2026 15:05:35 +0000
ROA not before:           Fri 10 Jul 2026 15:05:35 +0000
ROA not after:            Thu 08 Oct 2026 15:05:35 +0000
asID:                     394534
IP address blocks:        216.125.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:1f:6a:5b:31:08:b4:88:d4:bc:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Jul 10 15:05:35 2026 GMT
            Not After : Oct  8 15:05:35 2026 GMT
        Subject: CN=417000ce-e137-4b48-880a-107445acb851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:05:fc:0b:ee:e2:ea:fe:fa:2f:9b:7f:4f:20:
                    fe:a1:38:a4:01:98:6a:92:a1:4f:97:2d:c2:5e:75:
                    d0:e4:77:80:0e:57:5f:40:8d:df:d9:ac:7e:7e:9f:
                    5d:f1:8e:62:fc:10:0d:a0:8c:11:be:b7:f2:22:a9:
                    16:4c:09:df:93:a9:64:6b:01:16:1f:d4:77:8e:b4:
                    e5:8c:a2:bc:66:c3:62:ee:17:77:3a:46:0a:eb:1b:
                    19:f3:09:35:b2:70:38:9b:3a:3e:e1:23:ac:c6:fe:
                    0e:29:7b:9b:a5:b5:68:d2:c7:e4:7a:d9:24:b8:06:
                    14:a8:4d:7f:d2:64:29:21:12:39:9f:a5:5e:80:a7:
                    7b:f3:a4:36:8c:5c:ce:47:dd:fd:e0:e1:02:aa:83:
                    20:c0:9b:b2:d5:67:c1:e8:c9:f6:11:14:c0:85:63:
                    78:f1:95:94:09:a3:b7:21:70:1a:6d:ce:5f:45:d7:
                    d2:27:38:8b:63:5a:37:c8:40:12:36:fd:99:2c:37:
                    0a:4a:0e:8f:da:56:4d:66:1a:25:f9:7b:e9:e6:fd:
                    85:f8:48:8e:c5:0a:7c:de:ef:72:8b:54:e9:37:20:
                    e2:b6:90:37:74:4b:b6:e1:51:81:90:56:87:9f:f8:
                    86:2c:f3:07:b7:59:64:c3:e3:6d:cb:39:1b:74:62:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CA:B0:AE:24:C7:48:18:98:73:C9:53:64:4A:BC:7A:BB:04:A9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/8e684044-d0a1-3c0d-ae44-ddc1bbe45bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.125.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4f:22:25:ac:51:cb:c2:94:b2:21:57:f8:ef:33:c7:83:ef:
         5d:7f:19:95:b0:d5:2a:f2:3e:6e:05:f3:83:8a:e4:07:af:5d:
         84:e9:9b:68:21:47:94:5b:59:f4:c8:0f:71:91:e7:72:62:1f:
         74:4d:d4:78:ad:e9:05:93:31:df:5b:cc:dc:7d:1d:27:b3:4d:
         48:a2:18:93:24:52:9d:c7:3c:b3:9f:96:de:73:96:25:e9:de:
         a7:74:4e:19:5d:29:70:7b:ad:7c:1d:d4:77:56:3b:40:d0:bb:
         f9:56:06:c8:80:bb:74:1a:80:6b:07:db:bb:fc:08:1a:1b:f8:
         2b:91:dd:14:40:99:14:fc:06:ec:68:ec:24:85:59:01:61:0f:
         c9:cb:a2:25:36:00:74:70:b0:ec:ed:09:aa:d5:87:60:07:0c:
         1c:ba:88:5c:ea:e5:a5:31:f1:f4:fe:35:2f:51:48:1f:55:fc:
         df:84:50:7d:55:0b:88:ca:40:85:4e:d8:d0:a5:07:27:2b:98:
         5a:dc:4e:ca:34:ed:7f:ac:44:d3:80:a0:c8:11:3b:b5:93:c0:
         f4:4c:14:c0:75:1d:c9:44:2d:d9:73:d2:72:b2:ad:1a:dd:c1:
         f6:c1:6f:08:34:56:f4:40:3e:0c:70:b9:08:56:90:5e:c0:29:
         c5:ad:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:16:07 2026 by rpki-client