Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa
File:                     cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa (raw, json)
Hash identifier:          Ez/nSWn/sIub2PijwM1UIM2khRMJvaKhf6OWAfC0Xpc=
Subject key identifier:   74:FC:0D:55:0A:B6:A8:DD:9A:1F:5A:C3:2B:49:4D:97:17:F7:E0:87
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584E4559F44F17D65B57A696C9F8
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     6195
IP address blocks:        138.8.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f4:4f:17:d6:5b:57:a6:96:c9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=3a97c3eb-05f1-42e8-809a-b06d4594879c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:19:98:7b:2c:5f:e3:f8:4e:a8:cd:38:7d:
                    73:89:4c:9d:22:a8:66:4b:6c:37:e7:bf:0c:99:b5:
                    60:9c:36:49:64:10:9c:29:17:f5:b8:fe:1a:0b:2f:
                    be:e3:47:b9:8a:d9:37:3a:1b:3f:2c:3d:01:95:3e:
                    e9:bc:c6:7d:7a:19:51:a4:7e:51:5d:da:71:a9:87:
                    3f:bf:45:48:ed:e9:de:13:0e:a1:f7:1f:46:47:be:
                    88:96:61:90:b9:20:d2:68:44:bc:a0:1e:3b:2c:fc:
                    32:39:63:c6:30:cc:b5:fe:a8:14:be:bf:ca:06:c2:
                    8b:bd:d9:d7:5c:a2:7c:cd:87:5f:46:ad:ae:2f:9b:
                    35:ab:89:10:de:80:76:fe:83:d8:28:cf:76:3c:58:
                    6e:26:2e:05:eb:50:cd:7b:51:21:94:54:0b:84:f6:
                    e0:d0:71:c7:9f:08:e2:3b:f1:51:b1:ee:d6:42:16:
                    2b:00:2c:42:38:79:4d:99:fa:a0:bc:42:02:40:7a:
                    09:25:4b:22:e3:83:df:72:f6:66:45:6e:4a:d7:55:
                    a1:6c:7c:c5:b0:b6:9d:da:85:cf:b9:30:48:32:be:
                    c2:19:66:ad:79:eb:ea:52:33:b3:c4:91:52:d7:14:
                    9f:48:f8:a4:71:a3:b1:2d:2c:2c:65:df:ca:bd:d0:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:0D:55:0A:B6:A8:DD:9A:1F:5A:C3:2B:49:4D:97:17:F7:E0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cd8f6919-ba8f-322c-8505-c9f2add8eab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:cc:c9:7d:3b:11:f9:7a:d7:90:38:fe:16:08:19:a8:83:
         5a:7a:43:60:5a:bb:92:d8:5f:fe:47:78:b6:1f:66:6d:9f:31:
         7b:20:cf:82:c7:ae:7d:44:c7:d6:1c:0b:7a:e4:a6:49:6d:d5:
         d5:62:84:39:f0:44:34:bf:a8:f4:85:57:25:13:f0:5a:56:2f:
         d7:dc:35:7c:94:e1:50:d2:ba:62:46:f1:39:0a:ca:7e:30:db:
         81:85:92:af:ff:cb:2d:7f:46:f0:2e:4d:a5:e9:c7:50:92:74:
         0b:6e:72:af:4f:3b:c0:aa:af:d8:90:62:09:40:78:76:22:87:
         7e:37:f3:33:1c:25:84:96:82:20:59:ee:34:65:70:33:11:32:
         62:27:05:ca:4e:d5:b0:b1:34:33:94:4e:44:5c:25:3e:82:5a:
         f5:07:da:ea:1e:67:f1:3f:b0:81:30:e4:c9:ab:ac:73:83:ae:
         02:99:d7:cf:81:86:ed:a2:99:54:20:e4:1d:92:28:82:25:b9:
         2a:6d:9d:eb:c1:b1:d5:81:18:a8:fd:df:d4:77:31:3e:82:d2:
         f6:2f:ec:9c:23:e5:47:22:ba:5a:02:fa:31:7e:ae:41:0e:c0:
         c6:bb:2d:28:d8:91:cd:1d:45:8b:b1:51:62:8b:03:2a:31:f3:
         8c:07:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:50:47 2026 by rpki-client