Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cbf9b5ed-fb25-3f48-bf0d-888f45f4f863.roa
File:                     cbf9b5ed-fb25-3f48-bf0d-888f45f4f863.roa (raw, json)
Hash identifier:          gb/KdkHyV+DjD1ydHZ7SrpwDR635sDRV/l/6+MkLfqk=
Subject key identifier:   6E:43:17:60:12:96:AB:DA:81:91:D1:56:84:6C:50:D7:19:3E:BE:A0
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584DF375E82C73EE8306AFCD1840
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cbf9b5ed-fb25-3f48-bf0d-888f45f4f863.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     19318
IP address blocks:        163.245.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e8:2c:73:ee:83:06:af:cd:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=24addb51-9cbf-4f4c-b385-26517f977152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:d2:3f:4e:df:7a:da:12:31:c7:53:5e:c0:
                    fd:49:25:a4:52:44:fd:0c:3d:fd:89:98:d1:a9:a7:
                    15:ca:ba:29:d9:41:18:00:b6:0e:10:c4:93:8c:d1:
                    d5:1d:c1:0b:6b:aa:2e:4d:b0:ac:bd:3e:56:fa:9c:
                    d6:a6:c1:cd:f2:e4:95:66:b0:87:26:5a:7b:65:4e:
                    3c:8e:23:b0:d8:2b:46:ac:85:49:ad:a2:39:20:39:
                    3d:c4:62:b7:23:ba:64:fd:44:90:cf:68:d4:80:40:
                    d7:e2:b2:51:f9:57:58:3c:fe:e9:d4:d7:8c:06:bc:
                    40:f0:e2:39:6c:76:0c:70:0b:89:6a:12:df:3d:42:
                    c9:aa:e8:53:f9:81:dd:52:0b:f9:08:e7:9a:30:90:
                    c1:03:38:1e:07:70:26:01:99:af:a3:25:d4:2b:b9:
                    8a:18:3b:be:28:04:18:b9:44:34:b7:ec:77:a8:3e:
                    ef:d6:ae:47:eb:42:19:2a:ef:45:80:8a:42:bc:9b:
                    ce:d7:c9:5d:36:54:ee:fb:5a:64:c5:23:a7:db:9f:
                    cb:f7:f0:ea:0e:88:35:9e:50:b7:2f:b7:c0:c7:b0:
                    67:2f:a3:e6:56:b1:29:0c:1c:37:d3:d0:cb:30:0c:
                    12:78:ab:d8:78:c9:94:e6:f6:03:fb:aa:93:7f:02:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:17:60:12:96:AB:DA:81:91:D1:56:84:6C:50:D7:19:3E:BE:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cbf9b5ed-fb25-3f48-bf0d-888f45f4f863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:36:4f:7f:df:2b:87:f8:94:b6:03:54:8d:73:5d:04:f5:
         09:b2:2a:d7:51:f1:dd:75:25:d9:9a:0e:f5:64:cb:a5:88:c9:
         37:8d:96:27:d0:a1:5e:ba:92:9c:59:d5:97:1b:dd:4a:53:f7:
         b2:e9:1d:3d:ff:bf:5a:fc:21:b6:81:e2:f6:79:76:ec:5c:8f:
         c7:b2:e6:0f:84:04:a6:41:4a:7b:ce:77:f7:d7:3e:4d:5a:ae:
         87:4a:d7:e0:fb:3e:65:3b:15:3b:72:f8:92:23:3e:e0:bf:7c:
         29:6e:f3:76:c1:1c:a8:6e:1d:ac:47:b5:2e:ff:ef:43:cc:60:
         a2:66:11:30:1d:38:62:b0:fe:2b:da:7f:9a:a6:c2:d0:62:87:
         17:8b:c1:48:49:04:56:a6:6f:fb:82:bc:d8:ae:6f:7b:28:73:
         4a:22:b7:75:f8:60:ae:42:9a:a7:a5:70:c3:59:81:c1:e3:a4:
         21:b9:23:6f:01:b9:ea:0f:e7:00:dd:34:85:ad:66:9b:40:f3:
         ab:bf:08:a3:87:d5:86:49:e6:37:e5:9f:01:0e:fa:70:97:7b:
         c8:86:61:f3:e8:c0:c1:d0:6e:2c:ed:45:04:12:f6:81:24:a8:
         16:7c:f1:a2:51:b8:07:c5:a4:8c:69:77:c6:4c:0d:e1:43:b7:
         13:98:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:35:41 2026 by rpki-client