Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/5343e360-9e7f-3bae-8786-00e93799533d.roa
File:                     5343e360-9e7f-3bae-8786-00e93799533d.roa (raw, json)
Hash identifier:          Dzev+D1WYoqSi0XdM9qREpw91zNZNYrX2UxCAfrfTu8=
Subject key identifier:   F4:E2:58:C2:34:80:FC:FB:03:1C:3A:62:6E:37:00:EC:50:C5:36:BE
Certificate issuer:       /CN=0ab7127f-56a7-4a7a-95af-3764330074eb
Certificate serial:       010D0C9F4328584EEBECA232D3E295FCBBB822C0
Authority key identifier: 3B:31:34:F0:FD:01:C5:23:DC:DE:12:B9:BB:1D:5C:B6:C5:CC:98:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/5343e360-9e7f-3bae-8786-00e93799533d.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     395188
IP address blocks:        67.199.250.0/24 maxlen: 24
                          67.199.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:a2:32:d3:e2:95:fc:bb:b8:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab7127f-56a7-4a7a-95af-3764330074eb
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=5810e993-565d-449b-a82d-8b204c6acc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:8e:d8:05:c7:2d:b7:3a:a1:26:17:ee:d8:
                    1e:7a:17:ac:3b:8d:51:0e:90:70:0d:4d:31:90:44:
                    3a:f4:e7:93:b1:ce:9b:d1:12:0b:62:82:8a:0e:2e:
                    b8:48:2f:ab:d1:b5:8c:64:07:6b:f3:4b:18:bd:aa:
                    9e:7e:93:23:a5:ba:b5:86:45:55:bd:20:23:ca:32:
                    e3:85:fa:ac:50:fa:ac:a0:95:2d:11:7e:89:a3:cf:
                    e8:be:4f:4c:88:41:6b:6a:0d:f5:f0:a1:bc:9e:ff:
                    f2:3c:4f:24:51:7a:29:18:58:c1:93:95:e7:f1:64:
                    b6:eb:b6:9b:60:46:33:96:6b:34:3f:15:36:0b:5d:
                    99:a8:6e:f6:56:1a:89:64:8b:2a:2a:20:30:26:6d:
                    5a:bb:f9:10:66:51:75:17:a8:7e:68:06:53:ed:12:
                    01:be:96:d3:23:87:02:00:4f:d8:f3:34:6a:25:b6:
                    42:fa:12:fc:e4:79:0f:4b:bf:0d:da:f1:3d:81:5e:
                    c4:ea:1d:ff:0e:a5:9c:b6:92:71:f3:1e:2a:a4:2b:
                    b1:a7:50:61:a0:8b:97:e5:d8:9e:5e:56:8c:03:e9:
                    c3:d7:b1:49:1d:24:6f:f2:72:81:de:e3:75:38:dc:
                    69:e1:18:34:ae:d7:03:0b:24:30:a7:be:e3:31:62:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:58:C2:34:80:FC:FB:03:1C:3A:62:6E:37:00:EC:50:C5:36:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/5343e360-9e7f-3bae-8786-00e93799533d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.crl

            X509v3 Authority Key Identifier:
                keyid:3B:31:34:F0:FD:01:C5:23:DC:DE:12:B9:BB:1D:5C:B6:C5:CC:98:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.250.0/24
                  67.199.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:ca:eb:99:c2:bb:75:5d:ae:01:a6:46:6e:56:5d:8a:bc:
         8a:b0:c5:d5:f2:73:83:ed:d6:18:ac:00:6e:3f:81:94:3c:48:
         1f:75:00:7b:07:65:b7:54:d9:75:68:ef:5b:cf:80:4e:3b:c5:
         63:7a:b6:d5:b3:0d:50:32:52:f4:f1:a6:39:78:a8:28:e3:ab:
         29:f1:a4:0f:1a:86:cb:3e:a1:33:f9:e0:68:55:26:3c:0d:29:
         77:4c:6b:1d:8e:4d:11:b7:ac:fe:c6:2d:c7:75:56:5c:a4:c2:
         9f:b4:0c:bd:55:7e:19:3b:ef:b0:64:f5:02:4e:22:83:02:16:
         86:f4:8d:ba:50:6f:af:30:85:65:11:74:06:51:0a:bf:99:dd:
         85:99:3b:d1:9c:60:ce:2b:9e:0f:65:80:96:85:93:fa:8f:d5:
         96:5f:61:78:61:47:a9:9f:3f:1a:ae:8c:b1:b4:4e:98:92:53:
         52:5c:1a:70:0d:ef:e2:6f:68:67:df:df:47:d7:ce:30:0a:6e:
         fb:86:1f:5c:e6:63:89:57:1e:40:25:a3:dc:b7:15:b4:80:3b:
         00:ce:c4:a0:94:53:f9:49:66:b5:ef:2d:5f:73:53:1e:15:7f:
         dc:a8:8f:c8:08:06:74:88:04:9b:1c:04:32:16:41:4a:c5:3d:
         89:d0:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:04:47 2026 by rpki-client