Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/12ed2f8a-c88a-3b46-be5d-31bc70385456.roa
File:                     12ed2f8a-c88a-3b46-be5d-31bc70385456.roa (raw, json)
Hash identifier:          rq9g3RjQ8KqJSXlOA4I5D7ZkZZiPZkkKwrqfahTmLxE=
Subject key identifier:   ED:AC:94:DD:8D:A6:31:5D:98:6C:9B:4E:13:8C:80:F1:B7:88:F1:C6
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F4328584EBDDC63E3BF5BC52B23EA3320
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/12ed2f8a-c88a-3b46-be5d-31bc70385456.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        205.233.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:63:e3:bf:5b:c5:2b:23:ea:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=40560473-fa48-4a96-8617-84639331f1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:22:30:92:3a:5b:64:45:70:1d:83:6c:98:23:
                    36:be:53:46:e8:da:b1:63:5c:a5:5c:d9:e2:1f:69:
                    57:8d:cd:ff:04:dc:8c:14:7e:49:98:0c:d2:a8:27:
                    5c:d9:0b:76:a3:e2:e5:2e:9d:20:49:77:44:67:33:
                    1c:cc:d7:b0:44:28:fa:a3:f1:06:ca:06:f3:b7:3d:
                    0b:d3:5e:f6:64:ac:18:d4:d0:d8:cc:25:22:6e:ff:
                    96:e4:25:fb:a2:92:b8:2e:e4:25:9e:df:4d:0b:77:
                    82:8d:14:45:d0:1f:e9:0f:fc:be:5d:f0:fa:93:02:
                    d5:01:fc:a6:fb:21:52:55:35:97:e8:2b:60:b5:d7:
                    90:f7:22:5b:3d:fc:86:49:2d:5e:82:14:7f:b2:aa:
                    c1:c8:c4:ee:d7:67:a6:9a:d5:30:1c:56:7b:2d:83:
                    2b:0c:90:f0:2f:70:73:03:68:c7:5a:be:ec:97:ad:
                    16:87:a2:c4:dd:be:a7:f9:eb:4f:09:50:b6:3a:60:
                    85:9a:2a:c6:26:1a:f1:c1:68:6b:c9:fc:95:80:b3:
                    3d:0d:d6:29:8e:8a:52:79:12:4b:89:ac:7c:7a:94:
                    98:05:98:47:00:c2:7b:c0:7a:05:47:95:7b:1a:60:
                    30:b8:fe:39:e1:d5:c2:87:a7:11:4f:42:c1:04:d3:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:94:DD:8D:A6:31:5D:98:6C:9B:4E:13:8C:80:F1:B7:88:F1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/12ed2f8a-c88a-3b46-be5d-31bc70385456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:83:90:ac:b8:47:5a:74:45:a3:07:dd:2e:25:d1:fe:58:1c:
         04:c4:aa:26:48:b8:2b:23:f7:41:be:d3:c4:5d:b8:2a:f2:30:
         88:b3:cf:e5:af:1f:42:c3:9c:54:f6:3a:89:19:d3:43:59:1b:
         f7:c7:cd:35:4c:9f:4e:e9:4f:02:78:67:9d:06:99:d0:d7:19:
         4e:7d:da:48:65:14:cc:00:53:93:5d:ec:f7:e1:e8:cc:92:27:
         d9:9f:1a:03:c6:8f:92:64:88:b9:d8:b1:fe:a8:0f:6e:6b:ec:
         68:90:30:42:aa:29:f9:86:49:20:eb:8c:e5:7c:f4:d0:87:36:
         74:dc:5e:19:45:c3:0e:06:d3:54:7e:8d:e6:2f:2a:12:36:a0:
         7c:38:55:9b:09:58:6a:5f:d2:33:b2:31:63:63:bf:f3:f3:8d:
         95:c8:ef:e4:12:a4:9a:3d:81:58:a0:a1:ca:85:29:58:94:ad:
         dd:68:cc:09:d1:f7:59:23:f8:b1:a1:96:c7:3e:67:c6:19:d8:
         05:82:70:54:9b:56:1c:74:1f:81:05:c4:e8:56:63:13:15:4b:
         83:de:39:8f:48:bb:3e:f8:0f:75:36:ca:53:17:ba:3c:88:f5:
         04:9d:22:06:09:a2:6a:21:f9:d8:d2:aa:da:b1:0d:db:4e:60:
         23:49:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:20 2026 by rpki-client