Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
File:                     be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa (raw, json)
Hash identifier:          hoz6pfQfqVhR/mqU8DcvQyhmAjlw1paZIY/CR1Fwf14=
Subject key identifier:   9D:CA:CD:62:58:33:A9:EF:0B:91:D1:C4:EE:58:A9:AA:EA:1C:41:FA
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584E3E5F3CB1BF757C73D1BA2C00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     0
IP address blocks:        138.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3c:b1:bf:75:7c:73:d1:ba:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=bded3619-d5ae-4f94-b00e-f664163928e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:82:c3:c1:6d:ab:d0:cb:ea:c2:20:32:56:
                    1f:3b:04:a6:ee:f4:81:17:44:91:1a:f9:7e:e2:c8:
                    24:84:bc:ee:e6:e0:e6:a1:71:5c:6c:f7:51:8a:7c:
                    3b:64:1b:6b:23:94:5f:59:8f:52:f3:5b:a0:02:e7:
                    47:f6:a6:04:2f:d9:23:71:68:21:5d:d0:7d:c1:c4:
                    59:22:ab:ad:b0:ba:5c:51:6a:e9:a2:7e:3f:68:18:
                    d4:1b:d0:8e:f9:d6:33:92:96:fc:85:f2:55:e2:be:
                    1d:5b:75:0f:fa:83:4e:d2:21:8e:d3:04:6a:c0:91:
                    36:6f:2b:1a:b1:39:23:99:1c:cc:45:95:f7:94:5a:
                    b3:08:03:c5:97:6d:78:2d:7c:f4:8a:72:80:38:bc:
                    72:63:d0:09:90:9a:95:9b:10:06:cf:f5:c8:1f:d7:
                    0e:b5:d5:85:55:cb:5a:1e:bc:8c:28:7f:a9:a0:2e:
                    34:73:ba:16:b1:e6:a4:db:95:00:5a:b2:53:ff:18:
                    47:73:6c:10:e7:14:9b:32:12:de:da:c1:3f:49:cc:
                    a0:14:91:87:a5:7f:7c:7a:45:ec:00:b0:85:78:0f:
                    80:81:40:fe:a3:db:83:4b:27:f9:76:94:0a:bc:cb:
                    0e:78:40:14:1c:8c:7b:94:83:ff:7f:47:ed:6f:88:
                    83:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:CD:62:58:33:A9:EF:0B:91:D1:C4:EE:58:A9:AA:EA:1C:41:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:ef:4d:0c:3d:3c:00:8f:a8:83:d1:51:71:0e:b9:66:99:
         5c:6a:cb:04:26:97:5f:56:92:29:34:41:de:3b:6c:f5:e2:1f:
         4e:dc:b7:eb:18:d4:d9:02:e1:d8:07:78:e8:20:3c:7e:0e:c3:
         05:ba:cc:53:87:9f:6a:7a:be:dc:44:e0:24:78:a7:7f:f9:e1:
         e5:24:21:84:51:61:4f:6b:d4:4b:a1:3e:29:d6:0f:65:6e:93:
         79:61:1b:f5:0c:cb:09:04:87:96:9d:89:87:71:33:59:32:fd:
         17:74:cd:a4:c3:41:6c:c1:2c:70:3b:56:82:bc:ca:fd:ea:88:
         3b:b9:a1:23:89:4d:e8:1d:b8:53:d2:5e:6b:80:6d:ac:35:42:
         f4:85:da:10:57:28:e1:f5:03:a3:fa:e7:72:1b:51:c6:7e:bf:
         51:7e:a5:43:ea:2d:f1:6e:ad:28:3b:29:5b:4c:a5:8e:3b:97:
         d5:02:fc:4b:cf:15:81:43:b0:a3:ce:ec:01:3e:5d:84:42:94:
         49:2b:54:0d:9d:3d:ae:6f:6f:d1:1f:80:99:6e:30:e2:d3:f2:
         a0:58:85:ac:f1:7b:db:52:e3:42:e1:97:98:03:f4:e0:41:df:
         f0:9c:2e:18:a7:e3:26:e9:54:e0:31:52:13:9a:cd:7d:af:7a:
         d4:13:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 16:04:02 2026 by rpki-client