Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5be69238-b32e-350f-89b6-285f93cb90f0.roa
File:                     5be69238-b32e-350f-89b6-285f93cb90f0.roa (raw, json)
Hash identifier:          xugpSyBbmNg5ZOi5HOgmLmhx2RjSN4nMoJpRyGbFKkI=
Subject key identifier:   7E:98:0F:F0:BC:08:66:D6:F2:16:F8:77:F8:DD:67:9A:ED:17:2C:2D
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584DE2B5E9E1A4312B2564556800
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5be69238-b32e-350f-89b6-285f93cb90f0.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     13768
IP address blocks:        65.39.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e9:e1:a4:31:2b:25:64:55:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=876de309-d172-4918-be98-d8a4416d30f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:d3:f9:48:48:8b:15:4b:8a:24:88:64:10:
                    32:ae:ea:53:4f:ae:de:05:f5:48:d3:64:b7:f0:bf:
                    5d:96:86:12:ab:33:53:71:37:4e:86:7f:c6:a8:72:
                    22:23:b7:cb:4d:10:e3:c6:93:3e:38:f0:59:85:09:
                    45:2e:84:dc:2f:82:27:71:46:56:ae:8e:d1:3e:3d:
                    58:fe:22:52:70:bc:d3:91:dc:9d:3d:d6:75:a3:75:
                    55:a6:96:26:9c:af:cb:08:d9:e2:0d:15:4f:b7:65:
                    85:d7:6b:c7:45:56:2e:70:82:38:25:84:ad:87:6e:
                    1b:9f:44:a8:53:52:a5:cc:b0:70:bc:0d:25:a7:46:
                    ff:27:34:d1:e4:dd:e4:60:e2:80:82:e0:5b:b2:8f:
                    fb:4f:11:8f:e0:64:bf:3d:28:89:7d:2a:95:5f:94:
                    27:75:91:6f:c3:f4:4b:7b:12:d1:7d:ff:99:22:d0:
                    7e:bf:74:30:1e:91:b0:40:4b:41:83:64:ff:cd:b0:
                    50:f2:90:48:77:6f:65:e5:30:77:32:40:a6:af:ee:
                    ad:b4:3e:59:92:1b:1e:d6:1a:54:8a:f1:bc:85:68:
                    bf:c2:10:bc:fa:cd:87:58:15:28:b9:fe:75:29:d5:
                    fc:de:fb:46:a3:c1:6b:ef:42:23:cd:26:64:75:12:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:0F:F0:BC:08:66:D6:F2:16:F8:77:F8:DD:67:9A:ED:17:2C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5be69238-b32e-350f-89b6-285f93cb90f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:32:3c:44:a6:db:e0:74:b8:82:af:6b:74:89:9b:08:61:09:
         01:13:03:41:77:64:c9:9b:00:c0:cb:8e:56:f8:0c:16:14:b9:
         74:12:e4:0c:00:8c:97:41:36:02:af:93:d0:68:75:5d:ed:21:
         5d:49:a5:f1:ca:f0:91:a8:0f:de:4d:0b:d4:f0:a3:c5:83:23:
         33:92:62:0f:47:9d:40:98:c5:be:2d:81:80:27:d6:d9:0e:44:
         e6:a9:b8:62:e5:ce:cf:cc:f5:fa:13:13:23:41:ff:94:cd:90:
         2f:7d:61:cb:d8:74:67:d0:bf:67:35:3c:4d:c0:d8:ed:e0:cd:
         be:bc:35:3f:42:55:69:b8:0a:de:72:6b:89:4f:ea:a0:9c:18:
         23:96:78:42:e1:fd:18:8d:08:62:01:a7:2f:05:ba:96:a5:c6:
         cc:6c:d9:58:32:3a:93:59:d3:70:76:cf:44:83:67:41:f4:ae:
         42:79:de:cb:22:d7:27:85:13:c2:2d:31:2d:cf:27:2a:72:9b:
         80:bc:b3:e1:d1:87:fa:06:64:6a:c4:e5:6c:87:5c:9d:2f:f9:
         23:f8:75:d7:b2:e9:17:a6:78:6c:f5:94:b7:15:6e:93:76:a9:
         e9:fd:7b:65:ce:bd:2e:82:56:f8:7f:19:52:03:a7:a1:89:98:
         1f:8f:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:00:27 2026 by rpki-client