Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/11a3b46f-38d8-36a2-863a-5a5181c9ca6c.roa
File:                     11a3b46f-38d8-36a2-863a-5a5181c9ca6c.roa (raw, json)
Hash identifier:          opEoyx3fr3k2zLVjWWkuz6f9GT0So0HySWToyVXhK+4=
Subject key identifier:   E7:9F:4D:D4:88:4D:2B:D0:DD:BE:B7:32:6C:3A:3E:63:C6:9E:FF:82
Certificate issuer:       /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial:       010D0C9F4328584E456BF75580D120314C3A7000
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/11a3b46f-38d8-36a2-863a-5a5181c9ca6c.roa
Signing time:             Tue 23 Jun 2026 21:36:50 +0000
ROA not before:           Tue 23 Jun 2026 21:36:50 +0000
ROA not after:            Mon 21 Sep 2026 21:36:50 +0000
asID:                     30387
IP address blocks:        165.112.32.0/22 maxlen: 27
                          165.112.124.0/23 maxlen: 27
                          165.112.127.0/24 maxlen: 27
                          165.112.136.0/21 maxlen: 27
                          165.112.200.0/22 maxlen: 27
                          165.112.252.0/23 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:6b:f7:55:80:d1:20:31:4c:3a:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
        Validity
            Not Before: Jun 23 21:36:50 2026 GMT
            Not After : Sep 21 21:36:50 2026 GMT
        Subject: CN=6e359ef4-757e-43d9-b941-75e9bc0fd7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:03:b7:b0:3b:cb:f1:2b:f6:41:fb:d7:a9:
                    73:16:59:76:99:b8:c9:14:50:4e:c3:8e:3a:fe:ef:
                    cd:5f:19:37:5d:14:5b:ec:88:56:db:ff:91:c4:e2:
                    4f:d7:aa:a2:5e:9f:93:62:1c:4c:10:71:80:1d:49:
                    5c:25:c7:c8:1c:b1:ea:d2:df:cd:d1:df:2e:77:50:
                    d2:b6:08:4a:ee:08:5a:3e:6f:fe:fb:fe:97:a9:aa:
                    54:78:91:90:8e:34:7a:db:30:1f:ec:b8:54:63:d5:
                    af:2c:e7:a6:a2:88:0d:ad:ef:f4:16:91:d5:20:67:
                    47:5f:8c:d7:eb:a7:b6:0a:da:ef:b1:6e:92:6a:e8:
                    d4:10:81:de:23:27:17:da:b0:f5:a4:61:63:00:98:
                    16:a5:fa:1c:fa:aa:9e:af:6e:2e:a7:1f:fe:fe:cd:
                    ac:35:3a:1a:c5:c4:f8:99:af:e9:40:ac:83:f4:8b:
                    2d:f7:28:cd:6b:58:06:91:17:8a:ef:ef:79:8b:e3:
                    35:3f:c4:e2:a8:c3:6f:ed:8f:cf:c5:f4:1a:33:78:
                    f4:72:16:34:8c:c3:16:28:78:79:a4:c3:49:cb:e0:
                    2c:77:da:a3:7e:20:a5:01:9d:18:87:35:5e:37:31:
                    98:7c:e3:ac:ef:ba:31:48:07:53:f4:3e:01:6d:c4:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:4D:D4:88:4D:2B:D0:DD:BE:B7:32:6C:3A:3E:63:C6:9E:FF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/11a3b46f-38d8-36a2-863a-5a5181c9ca6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl

            X509v3 Authority Key Identifier:
                keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.112.32.0/22
                  165.112.124.0/23
                  165.112.127.0/24
                  165.112.136.0/21
                  165.112.200.0/22
                  165.112.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:28:e6:3d:c5:2c:b6:97:95:e3:02:04:c6:e1:58:7b:09:
         e7:fd:5c:4d:d9:40:24:b4:17:2c:2f:52:50:eb:4e:5c:39:01:
         4b:38:c5:02:5a:bf:ae:53:79:34:93:c1:49:c6:87:40:79:e9:
         da:30:52:99:0e:c5:39:c0:53:30:68:ae:5f:01:1f:67:0a:c2:
         20:85:ef:3d:93:7c:b6:16:ff:8c:71:d1:2c:84:6e:72:5a:b9:
         7e:fe:ce:e9:3f:c9:52:33:1c:0f:21:7b:26:99:81:6b:a4:0c:
         07:b4:21:4c:b3:1f:4e:55:4b:0f:8d:e0:d7:89:75:b5:3c:c7:
         f2:95:43:22:e1:be:dc:4a:b2:f1:d1:8c:a9:78:98:77:f5:be:
         24:fa:9b:f1:c6:1c:d9:df:52:ff:91:2b:9e:8e:3d:6e:33:8e:
         19:b3:35:b2:9f:42:02:18:a3:d9:bb:23:c8:a2:90:03:57:b0:
         15:ca:bf:29:64:e4:fb:af:df:06:ed:2c:fb:f3:8e:9a:7f:8a:
         78:e6:dd:85:19:a8:32:d0:a6:b1:cf:2d:c3:4a:d2:b1:10:d8:
         f6:4c:08:af:ab:8b:81:1f:89:83:f7:4a:c7:23:25:e0:1a:f6:
         a0:8a:ca:c9:0e:59:8e:85:e6:8f:8d:09:31:5f:25:a8:a9:19:
         9b:99:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 08:22:12 2026 by rpki-client