Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/b8a83eda-1148-36a6-8f0c-77acc5558120.roa
File:                     b8a83eda-1148-36a6-8f0c-77acc5558120.roa (raw, json)
Hash identifier:          4838JRZXcj/mO4YxXJqAW+vNyhKyJEd4G88QF6T65dA=
Subject key identifier:   EB:BD:F0:2B:5D:7C:2D:D8:A9:75:0A:48:28:42:8E:A1:B1:07:E5:8D
Certificate issuer:       /CN=aed2676f-2a52-4e10-9b06-0b423a5503c5
Certificate serial:       010D0C9F4328584E0435E2BC1A968E4BC5B8BB80
Authority key identifier: C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/b8a83eda-1148-36a6-8f0c-77acc5558120.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     11452
IP address blocks:        146.203.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e2:bc:1a:96:8e:4b:c5:b8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed2676f-2a52-4e10-9b06-0b423a5503c5
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=cb63f1f3-03c3-405e-9621-e6f5858ae401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:05:61:ae:c8:b5:67:fd:8a:cf:1b:f8:0e:
                    71:4d:5f:d3:07:fe:fd:4f:92:d4:01:16:52:87:64:
                    86:4b:7a:41:de:40:61:ae:42:5b:57:38:37:f7:c7:
                    fd:85:bf:c2:a8:9e:ed:9c:51:2d:d9:24:c9:ea:23:
                    43:75:ae:6a:a8:27:0f:21:86:1d:88:74:f7:a0:b7:
                    eb:f8:1d:f3:04:48:09:b3:43:e7:9c:4d:6e:c4:94:
                    9e:30:7f:9e:36:d2:18:ce:33:37:31:41:09:dc:7d:
                    3c:0c:66:48:27:d3:64:11:f0:0e:83:79:c7:1e:68:
                    7d:53:c8:45:64:0c:6a:de:78:7c:9d:c3:1a:42:d5:
                    95:78:62:83:8f:86:99:4e:1f:7f:c9:12:5d:64:58:
                    95:d1:05:98:94:40:a4:83:1f:9e:58:90:73:3c:52:
                    17:32:fd:a3:96:a7:63:04:d5:46:56:13:f9:df:95:
                    93:46:2f:18:48:bb:a5:3f:52:9c:59:ad:0f:87:42:
                    e1:3f:d1:b9:fd:2a:3d:e2:b6:85:48:6d:23:17:47:
                    48:dd:5c:a2:b8:1f:9a:be:71:db:ec:d0:1d:11:ad:
                    13:0a:75:96:a8:dd:cd:8f:6f:7d:ea:35:01:72:35:
                    a8:52:4f:6e:e8:42:f1:48:ab:f8:60:ae:43:c1:c1:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BD:F0:2B:5D:7C:2D:D8:A9:75:0A:48:28:42:8E:A1:B1:07:E5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/b8a83eda-1148-36a6-8f0c-77acc5558120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5/aed2676f-2a52-4e10-9b06-0b423a5503c5.crl

            X509v3 Authority Key Identifier:
                keyid:C1:19:25:DA:B2:BB:05:C1:B7:75:96:C1:27:16:FC:6C:77:AF:76:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aed2676f-2a52-4e10-9b06-0b423a5503c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.203.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:34:0a:f2:d7:71:f3:66:fa:7b:34:48:c7:31:b8:bd:1c:1f:
         83:6e:79:20:bf:98:f5:24:ab:55:f9:70:d1:52:9f:f4:d6:9b:
         4e:0c:d3:40:cc:2e:bd:6a:ad:5d:3b:75:4f:b5:81:54:93:c2:
         bf:41:4c:01:c9:36:26:1e:08:35:20:1f:c5:5c:89:f9:7d:48:
         55:44:27:f8:0c:20:ce:c2:52:47:9d:2b:88:a9:65:a7:6f:9f:
         c7:f9:d3:2b:9b:4a:a9:05:30:2f:bb:c0:bd:d8:cd:62:59:87:
         8b:d6:c6:9a:85:49:bd:c1:9e:1b:90:50:9a:b8:bd:4d:4e:16:
         88:85:a4:65:28:6b:73:83:f0:42:76:1b:22:a1:ae:0e:a0:6c:
         4f:44:4c:76:4a:cd:cd:73:4f:b7:4d:8c:60:e2:5c:9f:a2:4d:
         1b:91:a0:44:17:88:df:6b:74:76:38:47:f6:62:bb:6c:b9:1c:
         cf:6c:b7:2f:c5:fe:12:78:c8:83:ba:7a:54:e2:ca:4f:e6:55:
         bc:01:be:92:87:3c:7b:27:06:05:3c:f8:b9:d6:76:12:72:5c:
         6b:b9:fe:1b:e0:a0:fb:3d:75:42:e3:45:f9:4f:de:a3:1a:14:
         9e:78:f8:c0:9b:8c:bc:34:67:9c:85:a6:6d:43:5f:12:84:b2:
         2f:e3:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:37:40 2026 by rpki-client