Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
File:                     be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa (raw, json)
Hash identifier:          wo4343lAWQ8ghqlVoSRUh7RO+COfvx9Nwjptq3QB+v4=
Subject key identifier:   58:D9:EC:BE:13:4F:96:9D:A0:EB:F0:4B:DD:33:C1:5B:98:98:C3:C0
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584DD35B0F7F5C050CE1209EA640
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     26565
IP address blocks:        209.237.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:0f:7f:5c:05:0c:e1:20:9e:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=addf002d-2c82-4379-9264-3fad39911890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:c4:11:2d:c9:d8:7d:4a:92:c0:f4:5d:91:
                    17:9a:b8:a4:c8:52:e3:36:72:57:80:de:b5:16:06:
                    01:b4:7d:be:82:8c:72:8a:ce:1c:8c:4c:27:1f:a9:
                    75:1e:9a:13:d3:99:2d:b2:2b:83:02:57:ba:1f:8a:
                    ea:b0:e5:61:b4:09:68:b9:58:24:a2:c4:ae:0e:91:
                    d7:2b:1c:e6:af:f4:3c:ea:d0:ae:f4:1a:ed:40:18:
                    8c:6d:81:08:7c:c7:e4:5c:6c:16:42:27:60:bc:7d:
                    65:86:1f:23:c2:44:74:88:df:fc:76:96:9f:94:58:
                    48:5e:c6:e6:a9:87:97:68:60:f9:6f:4d:a8:b6:20:
                    69:43:5d:40:af:ef:fc:ff:c8:47:5c:cb:37:99:e4:
                    3c:18:de:56:78:dd:94:a1:7b:68:bd:a5:3e:62:45:
                    2e:86:c1:f5:ab:e3:81:54:33:7b:69:4f:c4:99:b0:
                    6c:94:c0:4c:89:5a:8c:a7:1f:c9:91:8e:8f:db:e6:
                    58:a6:97:8e:c3:64:e5:0a:ae:cc:5a:07:ba:e2:d4:
                    85:1d:37:2c:ae:fb:f7:c9:47:7e:6f:75:ff:dd:58:
                    db:c7:39:7e:15:10:77:8a:c0:d4:ca:96:29:40:be:
                    a9:1a:54:6f:f8:a4:18:14:7d:eb:7a:41:48:ec:1b:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:EC:BE:13:4F:96:9D:A0:EB:F0:4B:DD:33:C1:5B:98:98:C3:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/be2b1880-ce9d-3b16-9a9a-b5b713ef2a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:43:af:c8:40:20:ae:7e:2e:f8:19:71:b8:fa:0c:00:fd:
         ba:02:35:e9:7d:79:b9:df:22:45:fa:86:c7:2f:be:be:3f:80:
         6c:b6:2e:70:d1:11:f7:dd:74:82:10:59:91:91:b4:f2:2c:1a:
         1d:a1:7a:03:6d:8f:e7:a5:99:41:2a:df:c4:28:12:6a:85:46:
         a8:60:85:fc:d8:92:15:1a:a2:01:9d:b3:83:a0:67:5a:67:8b:
         a3:05:60:33:5c:82:02:95:bc:53:8e:3f:63:a5:8d:53:58:59:
         2e:f1:39:4b:ff:36:59:46:75:84:c2:58:95:91:36:59:dd:72:
         60:31:37:b5:3c:e7:81:4d:b9:56:3d:29:fb:8f:30:1d:ee:5b:
         6f:24:9e:27:74:35:c4:92:ea:ae:84:0a:c7:1f:a2:64:28:28:
         ea:6e:aa:a1:73:6e:d8:2f:36:ef:12:ef:17:b8:f0:43:ed:b1:
         cd:c0:d2:99:85:9a:ad:b8:bd:24:ff:cd:d2:b8:19:d8:02:a3:
         08:6a:16:bd:04:b1:ab:e6:c6:9d:7d:19:2c:55:ce:63:a2:d3:
         d3:3f:e0:e1:f4:6d:c5:d0:47:cc:02:99:91:dd:ad:a5:bf:2d:
         f6:c6:db:5a:8c:71:08:36:1a:4f:5c:da:56:00:81:7e:43:a3:
         fa:94:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:57:36 2026 by rpki-client