Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
File:                     5814bd8f-1745-39bc-bd83-5ecb8484effe.roa (raw, json)
Hash identifier:          DI4hjnBBIoppwNqleUK68e5YwN0ZCcxj9J+//cxGLLM=
Subject key identifier:   DB:11:27:B6:4D:A3:35:D8:CE:05:9A:FD:3F:84:90:5C:7C:6B:E7:38
Certificate issuer:       /CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Certificate serial:       010D0C9F4328584ECD37307BE89B8BDD7E558A00
Authority key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     13376
IP address blocks:        37.26.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:30:7b:e8:9b:8b:dd:7e:55:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=09c5088f-3469-4c06-9f1d-fd7b9b90799d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:6f:c3:c4:80:57:03:d2:7a:33:b6:d8:7a:
                    fc:47:0c:fe:db:4b:34:b1:c0:c0:f4:53:54:5e:6a:
                    f1:3b:f7:0c:6b:b7:22:c0:60:a6:92:2b:58:23:d5:
                    a8:00:34:6e:af:8e:2f:6d:0b:4d:03:f5:11:db:96:
                    fe:8c:af:9c:a0:4f:89:fc:46:f2:02:fc:b5:4d:71:
                    1c:46:a1:4c:15:32:c2:17:a1:e3:f6:f4:4f:b4:3a:
                    97:54:19:fa:e4:5d:68:b7:b1:f8:6f:c1:7c:5b:24:
                    a8:1f:5a:b5:62:74:db:5f:35:c7:6e:43:12:ea:51:
                    53:ec:85:65:a5:bf:71:8f:73:3e:85:cb:6c:2a:8b:
                    a7:8e:cf:db:d4:2f:42:17:11:35:67:c9:65:83:48:
                    d2:39:84:44:94:fe:a1:ae:ae:58:a6:ce:be:cd:d2:
                    81:40:4e:13:e1:dd:87:62:b2:ea:ef:69:24:ad:24:
                    15:f7:69:29:ab:00:aa:a3:f8:02:48:4b:77:59:70:
                    f1:64:6d:0f:a5:63:24:d5:d6:9c:64:4c:fa:9b:5d:
                    c0:97:fe:11:b9:1a:ca:40:8c:b7:8e:51:09:d5:05:
                    9b:07:fb:bb:14:70:c8:e6:aa:e6:ba:7b:44:99:b2:
                    23:69:a5:f3:f5:55:70:55:5d:a2:8b:a9:29:e0:bf:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:27:B6:4D:A3:35:D8:CE:05:9A:FD:3F:84:90:5C:7C:6B:E7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl

            X509v3 Authority Key Identifier:
                keyid:2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.26.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f5:e7:bb:fc:82:07:c7:a3:bb:36:e5:d6:3c:6a:4f:5a:f3:c9:
         65:b0:ba:4b:ca:58:20:99:1b:c2:7b:74:2c:ad:5f:ce:35:f0:
         1a:c6:7b:26:8b:62:52:6a:b1:6a:03:2d:c4:48:c8:3a:dd:af:
         1d:42:8d:11:df:80:16:bc:be:bf:9f:b4:b2:97:4b:96:42:3d:
         b2:52:6a:8f:a2:5e:e1:dd:bc:24:eb:48:f7:b3:48:19:6e:c8:
         93:b8:7b:9d:7e:b4:76:b7:81:02:39:56:97:0a:db:b8:19:20:
         06:91:99:b3:08:59:59:b3:1d:25:09:3a:55:5f:42:27:d5:d7:
         22:79:d4:30:85:1e:20:5f:76:0e:43:6f:3b:1d:ce:11:05:4c:
         0a:ec:0d:1d:3c:51:a7:fd:89:bf:09:4a:bf:e2:45:1d:e3:83:
         aa:53:c1:a3:4d:b7:0e:a8:1b:48:d3:17:cb:95:c3:72:c9:d4:
         a0:50:cc:20:16:37:61:04:06:12:bd:ef:7f:16:72:7d:4c:f6:
         fd:b1:6c:1d:82:12:90:5c:1d:51:9d:f1:1b:ed:14:4d:75:b9:
         27:f5:97:2b:01:37:60:de:29:79:b4:86:c4:c5:b0:12:19:f2:
         66:e4:1d:41:43:b1:38:db:16:a0:30:b0:ea:e7:22:f8:2d:46:
         1b:bc:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:09:27 2026 by rpki-client