Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/c527eec1-acd0-3a08-8a50-a84a3e1222c9.roa
File:                     c527eec1-acd0-3a08-8a50-a84a3e1222c9.roa (raw, json)
Hash identifier:          KaC2EzWMYa1rrHfy1OLMOIEkcQDCnHb7eZtN7IDiQHA=
Subject key identifier:   B3:D1:19:88:51:B6:72:00:8F:A7:44:F2:4D:5F:79:8E:AC:C0:3B:FF
Certificate issuer:       /CN=84fee7be-44c4-4c81-86f1-daf3b83d2f4f
Certificate serial:       010D0C9F4328584EBAA3830DF130CC3F0E355680
Authority key identifier: DC:DE:89:A7:0F:3B:71:EA:C9:0A:AC:06:5D:98:38:CE:A5:19:10:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/c527eec1-acd0-3a08-8a50-a84a3e1222c9.roa
Signing time:             Tue 04 Aug 2026 21:18:19 +0000
ROA not before:           Tue 04 Aug 2026 21:18:19 +0000
ROA not after:            Mon 02 Nov 2026 22:18:19 +0000
asID:                     395846
IP address blocks:        23.249.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:a3:83:0d:f1:30:cc:3f:0e:35:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84fee7be-44c4-4c81-86f1-daf3b83d2f4f
        Validity
            Not Before: Aug  4 21:18:19 2026 GMT
            Not After : Nov  2 22:18:19 2026 GMT
        Subject: CN=fca0fc2a-ac0d-4ade-9486-252be4c7b6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:cb:6a:80:17:06:a9:c8:62:2b:ad:1f:d4:
                    e7:f0:14:37:03:c3:5b:62:af:9b:1a:b0:1b:1a:1c:
                    cb:bf:27:ed:78:8a:3d:12:f6:7d:be:57:9c:13:cc:
                    ab:94:57:b9:72:41:11:9d:4f:9c:21:4f:b1:73:b2:
                    94:ae:10:21:df:f9:ce:52:4f:2c:b0:ba:8e:41:e2:
                    da:51:83:53:7c:ea:be:26:ac:bf:e6:5b:26:ef:80:
                    e1:4d:3e:84:68:2a:1e:63:70:a0:25:e6:ef:14:ae:
                    d8:df:bd:98:67:fe:30:c9:34:c4:57:5b:18:e8:c1:
                    48:1a:f6:5a:88:4e:96:fd:4b:68:43:f3:9e:2b:6d:
                    4c:23:b6:50:d7:3b:6e:0c:84:e8:36:37:fb:81:4e:
                    62:63:87:1e:16:44:df:9a:2f:9d:7d:24:d5:62:c6:
                    5e:bc:5c:35:95:31:c4:76:a2:3a:c1:d4:d4:8d:46:
                    b6:19:cb:bb:be:1b:17:1f:fb:55:e1:46:5b:87:3c:
                    ac:51:c0:9a:c4:31:86:ae:57:c8:3e:a7:a0:04:1a:
                    64:e3:39:1b:99:dd:e9:4c:8f:d7:54:cb:d6:81:f7:
                    22:f6:3f:ed:86:d6:e2:c2:ab:98:30:b8:87:e2:1d:
                    54:09:58:6e:fa:9d:a1:29:64:20:2f:33:ec:e2:ea:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D1:19:88:51:B6:72:00:8F:A7:44:F2:4D:5F:79:8E:AC:C0:3B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/c527eec1-acd0-3a08-8a50-a84a3e1222c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.crl

            X509v3 Authority Key Identifier:
                keyid:DC:DE:89:A7:0F:3B:71:EA:C9:0A:AC:06:5D:98:38:CE:A5:19:10:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/84fee7be-44c4-4c81-86f1-daf3b83d2f4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:60:98:19:4b:40:f5:7e:c0:2e:5a:77:45:68:a9:28:78:bd:
         e4:b5:f1:e9:77:45:7a:43:59:3b:47:c3:c4:0d:b0:67:34:c0:
         e3:75:77:49:cf:5a:cb:2a:ab:66:18:f5:5a:01:5f:78:bf:42:
         6f:66:91:b8:b3:dd:9d:a4:6d:93:b6:6d:46:b7:91:07:5f:8c:
         6e:e2:48:b5:11:45:6e:e7:93:8e:e8:40:e6:f2:21:67:ac:9c:
         cf:13:d6:29:89:0c:7e:26:73:2e:1d:54:bc:d0:7f:66:1e:d4:
         ff:be:cc:78:c4:7e:58:a8:6f:32:e1:6f:a5:65:ee:cf:8d:8b:
         f7:5b:17:89:1f:0a:f8:49:24:a4:3e:d0:06:48:5e:5d:01:f8:
         e9:cc:c6:c8:3a:18:51:67:cb:f9:63:44:92:62:c1:05:46:3d:
         c9:e0:ad:e2:6f:a7:2c:1d:fd:86:68:72:f3:3c:b0:ec:8c:0b:
         72:cd:b8:db:3a:12:9a:74:91:87:19:6e:16:80:ce:97:1a:0f:
         3a:d0:b2:2f:06:bf:ab:f4:ea:9b:78:b7:ec:17:e8:e8:96:02:
         76:08:84:38:9f:94:ae:3f:6d:82:2f:e9:af:19:94:64:07:ba:
         33:93:9f:e2:02:b1:49:24:06:43:3a:bf:9c:88:d7:83:d9:58:
         87:b1:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 12:34:58 2026 by rpki-client