Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa
File:                     a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa (raw, json)
Hash identifier:          ANZf2as1DCFjSZ1Jh0Wa8Mjq1ZUIUGxAoefPtdylE1M=
Subject key identifier:   D9:B3:19:D3:7B:36:63:3F:6A:E4:05:49:C8:3D:36:06:F6:17:39:8C
Certificate issuer:       /CN=25200eb8-bc93-4e8b-afa9-05e635b02746
Certificate serial:       010D0C9F4328584E5084AFC9EC13BC066CDEBB80
Authority key identifier: 8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     395821
IP address blocks:        162.217.128.0/22 maxlen: 24
                          204.16.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:af:c9:ec:13:bc:06:6c:de:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25200eb8-bc93-4e8b-afa9-05e635b02746
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=cc117421-ea24-4766-ba88-cfe36f68bb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:8b:d4:d9:c1:48:16:6a:41:28:7b:9b:40:
                    7f:70:20:9f:fe:65:19:29:7b:93:f6:2f:96:20:c7:
                    10:61:9c:46:cb:d3:8d:ee:a1:d3:bc:92:1a:90:42:
                    8f:3b:fd:19:60:7e:05:94:c5:1e:16:74:a2:cb:c2:
                    d5:fa:52:26:62:81:f9:f4:92:48:1d:4d:60:50:d2:
                    bf:77:2c:d7:f8:f3:94:95:1e:1e:9f:1d:3a:02:9f:
                    b7:4d:c7:69:3d:84:28:da:ee:f0:84:09:fa:53:47:
                    62:e4:64:39:71:37:6c:14:16:91:a1:44:3f:24:41:
                    4f:6b:1b:fc:0b:ec:19:04:d1:ab:e7:16:85:a3:99:
                    89:c3:c8:38:2b:f9:f8:d5:5a:7b:a1:96:89:a3:0b:
                    64:98:51:e6:e8:33:9c:80:22:f2:e4:1c:14:1f:98:
                    63:78:f1:ce:39:f3:97:a9:1b:b6:c5:68:e6:83:7d:
                    05:f5:b6:76:8d:41:43:d5:cd:20:98:8c:b5:4d:25:
                    74:68:9c:0e:de:0b:bf:5f:2d:c5:1a:1a:12:c4:bc:
                    ab:e8:a7:cd:5a:b2:64:57:40:d0:d7:56:de:85:17:
                    51:ec:68:ca:91:90:1d:9e:31:dd:c9:06:c2:f4:7d:
                    35:f7:00:75:76:84:ef:23:06:b3:d2:0a:09:f1:af:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B3:19:D3:7B:36:63:3F:6A:E4:05:49:C8:3D:36:06:F6:17:39:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl

            X509v3 Authority Key Identifier:
                keyid:8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.128.0/22
                  204.16.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:b2:48:ab:94:b2:51:04:04:da:02:38:b1:37:63:7e:23:
         65:5b:80:47:a8:f3:4b:ba:fe:d6:a1:4a:da:af:d0:df:bb:a9:
         ea:0b:4a:59:98:49:6c:7e:03:4b:7a:a7:a3:37:0c:d8:4e:c7:
         75:9f:e1:1f:58:91:e8:7b:5f:32:3a:cd:b5:34:03:e0:34:e6:
         96:59:77:60:da:1a:eb:3c:37:3f:a1:d4:49:b7:a3:57:ee:b0:
         ed:30:89:09:ed:54:98:1a:bd:b4:bd:65:8a:70:ec:8d:d0:1d:
         96:af:5b:e6:c0:7d:35:93:7c:22:76:f4:e6:76:58:35:14:0d:
         ae:99:00:39:b8:b4:1e:c2:e8:94:42:a1:53:07:a5:2e:aa:79:
         58:03:3e:7d:4c:06:e5:f2:35:a4:db:c1:16:04:26:a6:e7:c8:
         ca:44:b2:de:57:7d:34:b8:1d:19:9b:0f:48:bc:51:19:13:5d:
         02:55:ea:43:6f:8e:d5:92:c2:45:db:36:f8:24:6e:fa:15:07:
         5d:99:3b:a0:dd:85:dd:60:c8:ad:d2:55:79:63:81:c2:c2:8e:
         f1:66:15:e5:8a:c0:5d:a2:fd:63:fd:2e:13:b0:95:69:ce:c2:
         bb:64:46:a5:1e:11:0d:a7:76:4d:0e:8e:31:7b:a2:f7:77:fd:
         f8:6c:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:21:15 2026 by rpki-client