Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2bc92cdf-d184-35a1-bfe3-139dda418d51.roa
File:                     2bc92cdf-d184-35a1-bfe3-139dda418d51.roa (raw, json)
Hash identifier:          lqIHfGwxyEuOWrdK3dm+7PFC8GH4O+9PjEdQsIaisaA=
Subject key identifier:   B7:74:94:2B:05:0F:A9:AB:12:FA:52:B8:45:7B:2D:5C:A7:3A:F2:F3
Certificate issuer:       /CN=2b687897-0772-49b6-9e4b-0f6ffee30894
Certificate serial:       010D0C9F4328584ED16726FDB87A0FB5503E33C0
Authority key identifier: 82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2bc92cdf-d184-35a1-bfe3-139dda418d51.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     29938
IP address blocks:        64.25.240.0/20 maxlen: 20
                          64.25.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:26:fd:b8:7a:0f:b5:50:3e:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b687897-0772-49b6-9e4b-0f6ffee30894
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=f6b73a16-6fdc-4fe5-96f3-8ad26088a5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:79:22:9c:56:c7:8c:56:86:24:54:3d:5d:
                    5d:d7:1d:2b:66:eb:eb:c3:44:81:72:ab:2f:75:44:
                    36:e3:fd:66:e2:15:6c:64:90:e9:b8:58:6d:a4:75:
                    85:f3:dc:22:fa:e8:d3:10:ba:e9:96:4e:91:ef:6d:
                    d1:b9:d8:b7:ed:0b:73:38:fa:2c:8a:d5:1a:ca:41:
                    77:6d:02:3c:b0:38:07:ea:44:ec:55:ba:6e:ae:32:
                    36:cf:17:2d:4d:84:73:a0:e7:5c:16:59:3e:2f:56:
                    ca:c7:65:c1:af:b9:b0:b6:03:69:e8:66:04:f3:54:
                    8c:37:48:a9:ca:d8:7e:57:b5:60:00:6b:76:e5:50:
                    bf:86:33:d4:1a:3d:ad:6a:28:f4:c8:a9:e1:a5:e3:
                    bd:40:6b:f7:9e:0a:46:ca:88:5f:eb:db:8f:1d:4d:
                    02:82:2c:75:79:59:9d:27:1c:59:00:c1:22:f4:61:
                    4d:4e:e2:45:7a:83:fd:49:34:b1:3c:e8:1d:50:39:
                    a9:1c:11:1b:7d:60:3c:5b:ea:13:13:3a:d2:96:5c:
                    31:6a:18:92:cc:5f:b8:77:8e:c3:97:98:55:37:5c:
                    f8:d7:64:2c:15:13:98:0d:b7:1f:13:17:0f:93:1f:
                    c2:ad:7a:0c:2c:5f:cc:36:b0:5f:8c:2f:b8:c8:9f:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:94:2B:05:0F:A9:AB:12:FA:52:B8:45:7B:2D:5C:A7:3A:F2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2bc92cdf-d184-35a1-bfe3-139dda418d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894/2b687897-0772-49b6-9e4b-0f6ffee30894.crl

            X509v3 Authority Key Identifier:
                keyid:82:30:1A:70:60:99:11:47:F7:EF:AA:08:20:03:78:79:AB:FA:E7:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b687897-0772-49b6-9e4b-0f6ffee30894.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:ef:40:ac:20:ab:c6:95:f2:b0:bd:ad:81:4a:62:38:e5:
         fc:3b:49:45:75:b6:3c:70:25:95:7c:2a:c1:38:19:88:b0:e4:
         e1:81:4c:92:3f:12:cd:72:ac:b4:4c:27:73:4d:8e:a8:9b:05:
         11:43:89:22:0a:df:e4:9a:58:9e:ec:3f:35:dd:96:9f:af:06:
         6b:21:67:9f:dd:52:33:de:e0:70:c9:18:79:7a:dd:b5:46:bd:
         d2:7a:7e:6b:4b:03:b7:84:8c:9a:60:0e:95:42:df:2c:ad:3e:
         92:8d:08:05:ed:fe:04:6b:21:60:78:aa:86:fe:9a:73:1d:31:
         26:94:ae:51:fe:41:a0:8e:01:93:7b:f0:cf:4a:c1:77:13:64:
         4b:28:5e:5d:4f:cf:d9:14:d0:7f:43:30:5f:77:ae:7e:d9:eb:
         2f:f9:36:d7:13:00:0c:af:cd:6e:1a:48:bc:1e:87:60:f5:5a:
         ed:da:18:b6:74:5d:22:97:df:d2:f3:94:b5:02:5a:ba:9e:fe:
         cc:e6:f7:7a:73:86:fb:bc:85:12:d5:91:1c:d2:fa:e7:2b:c1:
         80:d3:56:6b:49:1c:4a:1a:01:3b:66:a6:09:f4:cc:1e:6a:9e:
         ac:6b:ba:a7:46:6e:5f:b7:64:01:dd:d3:aa:6b:c7:97:3d:f7:
         72:1a:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:50 2026 by rpki-client