Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/8e1fae45-38c9-3e36-bba1-3dc005958946.roa
File:                     8e1fae45-38c9-3e36-bba1-3dc005958946.roa (raw, json)
Hash identifier:          25dkxVjzLxFm2hM6+N3DxCuydx1hlsl4zfS+oBs6r6Y=
Subject key identifier:   FB:9A:F0:30:92:EB:30:49:F8:29:06:CB:C0:96:CB:5A:02:B8:4A:11
Certificate issuer:       /CN=2fdc8275-d744-466c-9984-83e7ed5d5ed5
Certificate serial:       010D0C9F4328584E043616A754470054ED687BC0
Authority key identifier: 4A:50:3B:DE:3B:94:38:B1:17:BE:F7:0C:C3:25:62:93:D3:32:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/8e1fae45-38c9-3e36-bba1-3dc005958946.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     20001
IP address blocks:        205.201.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:16:a7:54:47:00:54:ed:68:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdc8275-d744-466c-9984-83e7ed5d5ed5
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=efdfe5c9-25e3-4d09-83a7-76238541a959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:76:a9:40:6c:9d:0c:0b:c1:6a:23:ff:71:
                    34:e9:dc:e0:11:cf:9c:35:a7:a3:b1:61:43:7a:81:
                    28:4c:20:a8:b0:c0:6b:59:81:d1:30:e8:16:e4:0d:
                    ea:f9:ee:e6:8b:4e:9d:61:1d:e1:e5:dc:de:ed:08:
                    6a:9b:0f:8f:66:0b:f8:c8:64:49:23:d3:97:4f:0a:
                    4c:d6:e1:36:b6:e3:b2:ff:36:44:cb:f1:2a:56:fc:
                    4e:21:9f:03:56:5b:d0:d1:6a:43:d9:2c:35:4a:60:
                    34:70:ec:dd:3c:32:8c:42:59:53:7d:28:5c:6e:30:
                    b6:bd:04:a3:ac:eb:87:4b:a3:93:ae:8a:5e:5d:99:
                    79:3b:c4:6a:0f:6b:3f:9b:bf:19:5d:6a:a2:07:44:
                    43:32:b2:ad:0e:c7:33:60:12:32:bb:9c:d3:07:9a:
                    83:b9:36:81:29:5c:01:e2:2d:55:41:60:a1:d4:7d:
                    a2:ec:ac:e9:c5:bf:ca:6f:86:1e:a2:53:be:62:e6:
                    52:39:02:b3:d8:9a:e9:7d:07:bb:e0:9e:66:cf:2f:
                    25:3d:94:8d:bb:ba:4c:cd:d3:71:c2:90:c0:12:db:
                    dd:03:23:f0:f9:19:02:8b:68:03:fb:43:cf:9a:ae:
                    f2:4b:ea:9b:19:32:f5:c7:33:58:d7:91:42:2e:d7:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:F0:30:92:EB:30:49:F8:29:06:CB:C0:96:CB:5A:02:B8:4A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/8e1fae45-38c9-3e36-bba1-3dc005958946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5/2fdc8275-d744-466c-9984-83e7ed5d5ed5.crl

            X509v3 Authority Key Identifier:
                keyid:4A:50:3B:DE:3B:94:38:B1:17:BE:F7:0C:C3:25:62:93:D3:32:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2fdc8275-d744-466c-9984-83e7ed5d5ed5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:86:50:76:61:14:23:07:68:40:3d:78:e2:94:7e:ad:8a:0f:
         6f:c2:de:e9:60:ab:7a:b3:38:ba:12:03:37:10:06:f5:b2:03:
         b9:29:b6:ec:77:cf:ca:f7:4a:fb:9e:70:58:a3:15:54:69:c8:
         19:71:fd:0f:fa:30:42:a3:ad:0b:f1:80:85:f5:6f:75:d0:99:
         0b:64:05:41:e6:a7:d0:9c:5c:0e:a2:64:36:9b:b5:01:a2:39:
         24:f3:89:92:e1:25:e7:b2:b5:96:ee:95:4f:cf:1d:da:c4:5c:
         f3:9f:4f:85:5c:3d:53:68:ad:67:b3:ad:36:4b:d1:1b:5b:90:
         6d:eb:55:8b:f2:b8:60:89:03:e8:6a:e5:1d:01:09:95:e7:42:
         2a:03:73:f9:4f:06:1c:10:93:62:e9:c1:57:52:49:19:70:2f:
         42:dd:1c:f7:c2:7f:f5:c9:eb:e2:48:ee:2b:bd:98:fd:1b:3d:
         a0:da:78:20:f5:9e:ce:63:d9:86:4e:1f:af:a2:c0:29:c9:b3:
         9a:44:df:25:8d:01:34:8a:55:60:c2:1c:e1:b9:5b:f2:d0:6d:
         cb:bc:6a:a6:d0:87:bd:06:97:ff:02:3b:ba:04:30:0e:e0:a7:
         8f:08:e6:c7:5e:e5:a2:07:41:ad:a7:c4:61:61:8b:91:47:27:
         1f:74:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:09:30 2026 by rpki-client