Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa
File:                     94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa (raw, json)
Hash identifier:          e+wJBcgasiB1MLaHTwzMYzLnYoEm1ix4CiqHDNjoXhQ=
Subject key identifier:   F7:E5:30:DC:37:61:4C:44:75:C7:5B:C7:0B:56:1D:02:C9:D9:98:47
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584DD78B191A6213A84352603D70
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        65.39.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:19:1a:62:13:a8:43:52:60:3d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=340b799c-a139-4405-a1e2-3395a84f2b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:89:0b:d4:de:c1:71:50:01:71:78:d1:b5:
                    a7:72:e0:aa:9d:e1:82:e5:c5:60:e5:cb:eb:13:79:
                    47:3a:e7:61:42:44:91:8e:48:43:87:2d:2c:8b:cd:
                    0e:e5:d0:ab:e3:60:13:46:db:fa:be:3d:28:02:55:
                    3a:70:b6:5b:14:ca:ff:50:02:f6:91:a2:06:49:e5:
                    4b:21:43:13:3e:55:54:c9:ec:d8:26:a2:ca:5b:9f:
                    7c:78:f4:78:01:7c:51:54:0c:91:35:f0:cd:e1:21:
                    27:7d:4e:4e:c6:a6:31:41:c3:d3:78:23:38:da:5e:
                    37:45:b5:1c:38:3f:55:10:4c:f5:f8:3b:7c:e9:03:
                    ab:7f:10:74:3d:56:cb:ad:38:ab:28:d4:ca:c7:ef:
                    35:47:bc:75:b5:4b:f8:7b:5a:b6:c0:f8:29:e0:da:
                    4c:a6:f4:c5:3d:0c:55:a3:02:56:5c:42:70:05:33:
                    12:c3:b7:7a:28:d5:79:77:f8:f9:c3:95:37:a5:bf:
                    3a:68:83:26:01:90:77:b9:4c:d2:87:82:0c:f9:69:
                    81:00:b5:59:c6:ac:3b:b9:52:c3:5b:de:0b:55:d9:
                    45:ed:84:e4:63:1d:66:eb:51:a5:fa:5d:57:94:6d:
                    97:dd:b3:bb:6e:6e:6c:09:a6:6a:a2:ed:2e:de:5a:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E5:30:DC:37:61:4C:44:75:C7:5B:C7:0B:56:1D:02:C9:D9:98:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/94a9c456-ad9f-357b-95c2-06d8bf8c5c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:93:d3:9f:d9:39:f1:1a:e3:c3:34:b8:0b:40:69:97:ed:
         60:ef:45:4d:10:f9:ca:6a:c3:5f:42:ed:66:bb:28:1b:6e:89:
         6f:50:f9:f6:1f:d2:50:6b:d8:3f:9e:61:39:ff:02:94:93:bf:
         c3:44:d9:96:66:75:29:cf:fa:20:a9:61:a7:ae:28:72:13:0b:
         08:50:7c:e8:73:28:31:af:98:6a:60:2c:4f:d1:32:43:c3:76:
         18:87:d2:dd:63:b7:ce:72:25:4d:7a:25:2a:70:39:c9:d2:7c:
         eb:fa:b2:3c:e7:6d:41:08:85:72:c8:fb:24:00:af:2d:89:82:
         34:24:3b:17:e8:1a:21:1a:cd:1c:1c:4d:b4:8e:24:56:5e:ac:
         89:16:75:fd:da:c6:c3:18:a9:d3:b2:3c:56:d2:89:e6:0f:aa:
         a8:17:8f:7e:00:ed:35:51:bc:bd:48:d3:d4:bd:86:6f:b7:54:
         b3:26:83:58:8e:71:4f:ef:0b:9a:a4:b2:ee:43:8a:7f:23:f4:
         9a:fd:8a:2b:62:d0:0a:fb:f6:24:63:51:e2:61:e1:18:aa:ef:
         43:5c:c6:67:58:5f:6f:82:60:90:25:d9:46:27:80:60:72:4e:
         bc:74:ae:6d:0f:18:30:90:93:d5:23:bd:0b:1f:ba:2a:93:95:
         d5:f4:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:00:27 2026 by rpki-client