Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/bcab3abb-52f4-3f5c-8c3a-8c7b96ae7f81.roa
File:                     bcab3abb-52f4-3f5c-8c3a-8c7b96ae7f81.roa (raw, json)
Hash identifier:          Fd6IjSpNSRdUKuO0qkFun0Zjij64/57nS+xOrbTzKoQ=
Subject key identifier:   B0:2B:34:86:CA:2D:48:67:9D:AD:B1:13:1C:37:AD:0E:99:DD:F5:A3
Certificate issuer:       /CN=65b75871-7632-4a71-a4a9-41f38235fc29
Certificate serial:       010D0C9F4328584ED2CC78DA699031ABA593BD00
Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/bcab3abb-52f4-3f5c-8c3a-8c7b96ae7f81.roa
Signing time:             Thu 13 Aug 2026 13:00:12 +0000
ROA not before:           Thu 13 Aug 2026 13:00:12 +0000
ROA not after:            Wed 11 Nov 2026 14:00:12 +0000
asID:                     13431
IP address blocks:        174.138.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:cc:78:da:69:90:31:ab:a5:93:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29
        Validity
            Not Before: Aug 13 13:00:12 2026 GMT
            Not After : Nov 11 14:00:12 2026 GMT
        Subject: CN=f10b4c82-588f-4a03-8398-e801f23995a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:6f:7a:43:88:b1:8b:d3:ff:1a:9f:7b:22:
                    a5:0e:00:d1:32:8b:ef:f5:b8:f5:2a:fa:0f:10:7b:
                    9d:4c:33:24:65:fc:af:92:e0:40:b2:99:77:b2:6d:
                    06:5d:3a:a8:ec:54:9d:87:87:35:0a:6a:e4:51:47:
                    8d:02:f2:52:ff:2d:d5:2b:9a:12:8b:3c:f1:80:df:
                    fc:47:f6:4e:a1:2c:47:87:85:b3:0d:6d:5d:06:6b:
                    0d:38:93:a3:27:9d:51:44:9a:87:06:6f:fb:6d:73:
                    12:c4:42:f3:33:d5:87:d6:89:e3:c1:0b:f9:6d:a3:
                    2e:c1:98:04:c6:63:51:63:6c:51:9c:07:2d:bd:4f:
                    87:c8:39:7c:1e:8b:89:b2:52:53:08:75:e0:65:a0:
                    2a:46:d1:42:9d:c8:d0:8e:0b:c4:fe:26:aa:30:47:
                    af:c0:9a:c2:96:51:c3:5d:af:0f:a2:c2:22:2a:c0:
                    0f:78:62:58:d6:7c:de:e3:b4:27:1a:8e:8a:b3:fd:
                    35:b5:74:ba:e3:2a:6b:24:2e:92:d0:c3:1d:59:7a:
                    e8:8b:a0:cc:16:69:96:c9:c0:1a:ee:63:90:25:4a:
                    1d:67:fc:95:d8:1e:fe:63:b4:c7:c1:c0:40:5a:af:
                    95:9d:4b:fe:cf:54:43:6c:9c:17:4b:0f:20:4a:87:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:34:86:CA:2D:48:67:9D:AD:B1:13:1C:37:AD:0E:99:DD:F5:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/bcab3abb-52f4-3f5c-8c3a-8c7b96ae7f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:c0:74:89:ac:99:91:41:94:f2:7c:38:70:09:28:64:3d:
         9b:96:25:fd:96:ed:b9:64:90:eb:27:83:c0:21:e0:0b:61:11:
         17:88:0a:86:54:e3:23:0c:9c:60:f7:c2:0f:bc:22:cb:19:ff:
         96:3a:64:14:a3:a3:71:be:ac:73:f0:17:69:dc:38:3c:05:49:
         98:7c:35:81:03:b2:cc:0b:77:b0:51:6f:6c:48:f5:50:9e:5a:
         ce:b1:56:f7:91:14:7a:08:e2:8f:b8:7d:6f:38:06:f1:0b:8c:
         05:e0:3d:b0:35:b7:2f:93:81:3a:88:20:3a:d6:b7:4e:a4:a7:
         b1:1e:c6:8e:24:d8:91:6e:20:d3:75:31:5f:e8:28:d0:ff:86:
         9b:eb:83:60:61:19:97:24:fa:a4:66:01:fd:94:a7:38:7e:b4:
         6d:a8:e8:90:12:44:0c:6f:bd:e1:2e:d6:84:4b:a6:99:4d:15:
         43:5b:b3:61:a8:2f:53:af:2e:ca:5d:a6:5a:d1:0e:02:d7:6c:
         90:71:a1:10:c2:64:f7:7a:3f:2e:2d:fe:f6:c7:2a:59:f4:93:
         c3:f9:65:a6:ea:17:97:18:0b:1b:84:6d:ac:88:a7:fc:b0:91:
         82:ee:03:7a:a6:0f:9c:ea:f1:6c:d7:b7:fc:51:00:cb:f6:8f:
         95:77:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:39:34 2026 by rpki-client