Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
File:                     468e47db-5e5d-3b56-8599-c0d6de193ee1.roa (raw, json)
Hash identifier:          PjGKKCLnl9Abfg8VD+8hQZcNw8eeMoMpDuaF2TtwbtA=
Subject key identifier:   67:66:C9:7E:23:A6:AD:C6:77:AE:73:4D:A5:26:FF:F2:29:FA:92:8D
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E7634D0947264F2EDD6A93B50
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     25645
IP address blocks:        208.85.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d0:94:72:64:f2:ed:d6:a9:3b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=43d35d61-1de0-4741-9aa2-f2d15a72d53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:03:f5:29:a0:5a:84:83:e7:38:cd:d2:b3:
                    1c:de:aa:ad:2d:a1:15:7c:d6:8c:64:54:91:ad:bd:
                    20:4d:e9:b9:58:65:4b:e1:da:72:7d:68:27:e3:b5:
                    b1:58:4d:b3:46:fe:52:4b:0c:53:b3:ef:10:1e:9f:
                    80:a6:44:ff:d2:69:27:52:ae:dc:27:6f:d7:4d:d0:
                    ba:f8:df:f1:f5:7f:f1:50:9c:57:22:d2:7b:f6:03:
                    5a:68:a7:56:e1:2e:5a:fa:d5:50:64:97:43:2a:b8:
                    b2:a0:9d:09:c2:5c:00:d1:b8:01:c6:f2:73:ee:94:
                    ba:d8:19:ca:9f:f6:2e:f1:43:e4:ad:9e:f1:46:43:
                    bb:e4:03:8f:b5:c2:3c:dd:e7:27:6d:95:e5:11:7d:
                    e5:fb:8e:fe:56:06:d4:77:67:3c:44:10:c3:37:85:
                    b1:89:99:6a:7f:69:47:12:d9:29:1f:94:2e:c0:0c:
                    ae:a1:15:b4:a6:c6:57:06:c7:b0:50:bb:09:6e:ed:
                    46:b2:39:5e:12:50:cc:33:77:46:56:95:79:65:ca:
                    50:62:63:58:99:2a:73:90:6b:e2:e9:70:b5:6b:ec:
                    78:54:d2:e0:c6:ac:1a:4f:ec:2c:a2:79:3a:2c:27:
                    67:3e:72:ed:fd:b2:a0:ff:08:27:c8:c8:06:a2:d5:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:C9:7E:23:A6:AD:C6:77:AE:73:4D:A5:26:FF:F2:29:FA:92:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d9:05:23:b7:d7:eb:1f:84:83:30:1b:5f:41:14:21:c0:35:
         f9:28:d6:39:c6:a3:79:c3:56:62:dd:9b:7f:1f:ad:fd:79:36:
         69:1a:75:de:5b:ab:c4:f1:a8:74:ff:a7:90:95:f2:8f:8e:06:
         aa:fa:90:e9:79:84:d1:ff:a2:96:f0:d4:09:bd:e9:19:fd:2e:
         46:51:30:e6:41:f1:12:68:43:e8:74:9d:b0:60:45:18:b4:fd:
         a8:b9:24:fd:e2:1a:a0:e5:6f:41:a6:0c:af:c1:d5:3e:f2:9e:
         46:1c:a8:64:37:fb:aa:c7:d3:15:09:33:9c:9a:b3:65:ff:d7:
         36:26:48:de:23:b0:d8:18:a5:d2:c5:28:14:d0:b3:72:5c:60:
         f1:8e:64:71:a5:b3:b2:20:22:a8:07:e2:69:ea:96:82:e8:0c:
         27:a6:fb:a0:b9:a5:56:4f:ae:19:bb:8c:da:66:18:ac:71:2c:
         3b:c8:23:57:3c:04:2d:6f:4a:12:20:73:c0:6e:5c:e1:c4:a4:
         0d:ed:ae:35:c9:05:aa:d7:8c:ea:bf:90:ea:fb:6b:1e:62:f3:
         44:e1:bd:43:a3:d6:39:f3:a6:ec:70:bc:67:87:fe:78:fe:91:
         72:e7:47:d0:d8:fd:06:f3:10:12:ff:dc:2f:82:55:ba:6b:31:
         db:1e:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 05:24:50 2026 by rpki-client