Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa
File:                     3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa (raw, json)
Hash identifier:          3KhSgzoGNvwm/nhVNStP/rOCA3gO5L+hgGFD2XwRQnQ=
Subject key identifier:   FA:82:DA:2A:54:3F:36:6A:EA:3E:6B:9C:7A:BB:9A:02:52:EB:7B:72
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F4328584E059C51A24C51BCD1FCBF0900
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     38195
IP address blocks:        162.213.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:51:a2:4c:51:bc:d1:fc:bf:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9c07c7c1-6232-4061-82ab-9f5870d3b49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:56:82:12:a2:44:3a:33:d3:07:d7:a3:e5:
                    2d:85:2a:95:2e:39:02:c8:e0:14:9d:39:eb:9c:3e:
                    01:8c:15:de:19:ce:95:aa:73:0f:90:8f:67:92:ea:
                    d7:1f:5e:48:48:97:af:47:a8:f9:ad:4b:72:dd:94:
                    12:20:09:e7:31:f6:94:07:8d:dd:da:a3:ff:ce:8a:
                    ba:03:ca:9e:b6:04:4a:5e:95:e3:06:41:cd:a9:ec:
                    08:20:64:93:db:c8:dc:61:20:98:33:3b:06:96:e3:
                    5f:cb:2a:a8:29:d9:ff:25:33:23:b5:f6:68:33:f7:
                    16:e2:d5:5d:48:7d:47:87:9c:54:70:f4:43:ac:0e:
                    ef:d3:8b:29:0b:a6:0a:74:1d:b8:03:de:e1:30:d9:
                    56:ec:be:42:33:ef:d2:8f:6f:d2:b0:65:9e:73:b7:
                    7a:3a:59:db:57:79:da:5b:8a:de:ce:eb:7c:7e:25:
                    be:29:6f:ef:ae:a7:3a:33:a2:79:14:76:95:7d:68:
                    35:47:7b:2f:d8:b8:58:38:fe:8e:3f:85:93:f7:fb:
                    3d:f0:69:51:b5:ce:4e:83:57:56:f7:74:39:3f:8c:
                    eb:fb:6e:bc:00:e7:9a:ca:e6:fa:49:57:b7:d7:95:
                    85:ea:df:60:ee:bc:9d:9d:70:79:8e:d1:aa:5d:b7:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:82:DA:2A:54:3F:36:6A:EA:3E:6B:9C:7A:BB:9A:02:52:EB:7B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:76:e9:fc:23:35:2c:69:9b:08:14:d6:df:46:11:7e:39:
         9e:98:85:4b:0b:60:df:5e:7d:d9:de:b6:52:9c:70:7e:6c:9f:
         f3:a3:b9:cd:a3:8d:91:9d:53:aa:b9:a7:a9:36:be:ee:27:dc:
         93:fd:e1:70:b2:e3:65:bd:f7:27:5a:18:9c:95:69:14:2e:c6:
         b0:fd:f9:b5:14:33:11:1b:e1:9d:07:a1:2c:45:56:81:23:78:
         a3:00:1d:f9:e7:33:18:bc:12:04:02:15:ed:3b:86:44:5e:c4:
         9c:4d:e4:d5:79:ef:6b:21:79:20:a6:d5:aa:ec:23:d9:07:d6:
         4e:42:17:ae:7a:bd:25:2a:4c:89:16:a7:91:fa:fd:c0:f4:73:
         f7:22:61:46:74:f7:17:ca:cc:3a:04:e3:be:80:46:91:79:73:
         10:d5:65:66:76:77:e2:87:a6:3f:2c:18:68:e6:a6:12:fa:e2:
         97:39:b7:d6:bc:cc:45:16:bd:c2:ac:2e:eb:e3:d2:eb:af:0c:
         6d:c0:0c:9f:7a:cc:c3:7d:7c:2a:ee:4c:18:8d:0c:b0:7f:5f:
         1c:98:b1:61:bf:d4:1b:fc:82:e9:c7:55:28:f0:14:df:63:e4:
         5d:ca:d3:38:9b:2f:66:2d:bf:7b:e1:d5:e0:43:21:bc:8f:d2:
         ef:28:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:49 2026 by rpki-client