Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
File:                     276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json)
Hash identifier:          UgRh9WskwalKbkDGT5iuCdlu7IbnjeqL/auwy6Wi1w8=
Subject key identifier:   3C:A4:5C:42:50:EA:40:E9:55:83:7C:0D:C2:2E:64:EA:13:C1:04:10
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F4328584ED9C757C04F664014DC141F00
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     8075
IP address blocks:        134.65.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:57:c0:4f:66:40:14:dc:14:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=f8397c80-6589-4225-9755-ec5599cb1224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:93:96:f1:ad:fd:3a:0f:4f:1b:95:f3:c3:
                    ff:dd:8f:58:f1:54:d2:37:6a:6d:0f:f7:21:dd:1c:
                    ae:c7:de:67:1b:31:c6:85:8e:cb:04:58:d5:42:f1:
                    fd:f7:2b:b9:85:b8:05:76:46:e5:6e:15:fa:b3:cb:
                    c7:5f:fe:67:ac:f1:c3:6c:0f:75:d8:c1:5d:7c:64:
                    bf:fd:50:21:5b:cb:3c:37:e4:c9:bd:ba:f1:b7:66:
                    de:3a:8e:00:1e:45:ad:a3:c9:27:9d:64:7a:b2:d8:
                    68:8c:37:fd:ff:6b:00:f6:e8:68:94:10:33:17:2c:
                    a0:31:2f:d3:d6:1d:e7:5b:dc:b6:be:54:68:f7:93:
                    bc:99:75:6f:c8:63:6e:b6:d8:02:67:17:37:95:f0:
                    4b:fe:5d:3b:20:9f:03:be:3c:30:a1:8c:68:2d:05:
                    ae:60:89:c7:a6:1e:5e:43:ea:63:cb:9a:06:92:ca:
                    a8:53:12:54:39:c6:4c:98:bb:86:33:cd:a3:d8:9d:
                    d2:36:52:2e:1c:e3:0c:9c:51:b2:76:cd:60:6c:71:
                    ba:fa:43:4e:34:3d:64:f9:d8:5c:79:02:c8:dd:bb:
                    cb:c5:a1:06:fb:22:8d:a2:eb:75:5a:5f:d0:2f:1f:
                    55:aa:65:fa:0e:f9:db:78:89:b0:1f:22:d7:0a:3c:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:5C:42:50:EA:40:E9:55:83:7C:0D:C2:2E:64:EA:13:C1:04:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:ec:af:e2:9b:fc:39:1a:cc:c0:13:e7:81:92:99:2c:f4:
         e5:fd:e5:95:0d:48:56:84:6b:87:88:f4:e6:a5:2c:48:a6:44:
         75:d8:34:f7:e0:86:39:60:37:2b:d2:cf:f2:33:0e:a9:37:8f:
         72:b7:3d:bd:82:f7:dc:46:c7:b4:8c:a3:d7:29:70:aa:2f:85:
         bf:15:24:87:b0:31:3c:66:50:a6:47:b2:5c:bb:52:91:d3:b9:
         73:69:3d:41:ef:b1:57:6e:93:46:db:12:6b:92:88:d5:65:4b:
         a7:af:53:58:66:1e:b2:43:e1:9f:83:d3:88:98:0e:38:07:12:
         6c:75:be:c6:b1:a8:69:30:ca:3e:97:6f:8d:bd:2c:4f:17:54:
         ff:f6:1f:bb:d4:78:85:d8:c8:df:ee:b3:dd:93:d2:d8:23:f2:
         15:b2:3d:22:6a:ca:e4:60:05:70:ca:23:a6:b8:17:0e:20:eb:
         bc:8b:97:79:9e:b6:20:39:50:d5:9d:66:08:2f:6a:98:df:9f:
         1b:7b:22:7a:b2:1b:cf:f4:45:dc:f2:bc:0b:cd:77:db:73:d8:
         f8:b2:63:ac:b7:42:e9:48:92:df:10:c7:68:3b:aa:8a:14:1a:
         44:7d:2e:20:71:69:e5:ee:f9:ce:96:df:23:5c:21:d5:64:79:
         e9:51:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:28:40 2026 by rpki-client