Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e0de49fc-8362-3043-a558-ef0aaa46ded1.roa
File:                     e0de49fc-8362-3043-a558-ef0aaa46ded1.roa (raw, json)
Hash identifier:          MFsg1yXVuGQnCP7K1EN5tPHqC0ztEyFmc7MevrYGNM8=
Subject key identifier:   C1:5A:04:F7:0D:BC:C1:03:CC:88:EF:18:0A:C3:82:01:6E:38:11:36
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584ED89AA9955987AD1063650100
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e0de49fc-8362-3043-a558-ef0aaa46ded1.roa
Signing time:             Sat 15 Aug 2026 14:54:44 +0000
ROA not before:           Sat 15 Aug 2026 14:54:44 +0000
ROA not after:            Fri 13 Nov 2026 15:54:44 +0000
asID:                     13335
IP address blocks:        192.250.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:9a:a9:95:59:87:ad:10:63:65:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Aug 15 14:54:44 2026 GMT
            Not After : Nov 13 15:54:44 2026 GMT
        Subject: CN=8658a350-2160-4155-8e54-d97a5efd186e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:28:9b:fa:67:8c:cb:17:88:8e:b5:ea:dc:
                    e4:b1:6d:62:09:2a:a2:ca:f6:ee:e0:49:97:0f:dc:
                    af:82:cc:af:88:55:6d:e1:5c:18:38:69:b3:56:25:
                    71:d5:4a:02:fc:a7:8b:7b:45:3d:4b:95:b3:26:b4:
                    a0:40:93:52:b2:07:24:33:b5:76:8a:75:f2:d3:a1:
                    c2:69:52:18:fa:fa:2a:aa:12:f1:1f:32:46:f8:25:
                    57:25:6b:03:f7:10:e5:63:93:80:05:7b:f8:df:5f:
                    eb:25:28:d9:7a:32:96:d1:2f:0f:76:a4:0f:57:5c:
                    23:22:78:df:a3:6b:ef:e3:b9:84:54:bd:73:a3:4e:
                    dd:5c:5a:de:03:31:f1:8c:fe:8c:42:89:0f:e9:1c:
                    99:09:17:4a:17:58:74:47:2b:5b:a6:08:fc:07:50:
                    a1:75:52:05:63:80:9c:56:df:7d:71:d8:f2:04:76:
                    fc:b1:44:78:ac:0a:35:38:0a:46:18:9c:2e:1c:9a:
                    bb:41:1b:f6:42:1b:4c:da:36:d5:6d:4a:c0:73:8d:
                    3f:fc:33:69:f0:c1:96:7b:e8:b3:b8:3b:20:85:6d:
                    ba:17:56:37:56:64:69:83:b5:90:bf:8b:b5:8f:8e:
                    d5:df:7b:2d:b5:6c:71:10:e7:f8:bb:78:d1:e9:e9:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:04:F7:0D:BC:C1:03:CC:88:EF:18:0A:C3:82:01:6E:38:11:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e0de49fc-8362-3043-a558-ef0aaa46ded1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:be:35:c8:a7:93:ac:f4:f4:16:4d:8c:cc:3f:54:92:a1:e1:
         d8:8f:e1:a8:ab:be:bd:d7:6c:35:c3:8c:56:52:5e:38:91:22:
         50:13:9a:01:67:7c:e2:3c:59:9d:63:1a:c6:5b:fe:ae:a7:ed:
         a7:cd:d5:90:a0:d3:04:29:1f:c9:90:ba:e4:04:fa:b0:e8:42:
         f9:9d:21:11:a2:08:b5:20:c8:40:2c:87:5d:c3:1d:67:24:1f:
         ca:c3:33:5e:2d:60:3a:79:f9:75:43:76:32:6a:10:a0:ed:e5:
         fb:00:3c:a0:59:9a:12:5c:fd:ce:e1:7e:61:c4:b0:b8:04:6e:
         e2:9c:99:0b:ff:8b:10:29:10:0d:41:57:7b:21:12:35:f9:cb:
         0f:d6:0d:9e:b9:76:3f:bd:bc:7a:6e:ac:2f:2d:e2:93:79:02:
         d5:0a:ce:37:25:4b:3e:67:32:96:1b:f9:a7:69:a7:47:88:94:
         03:32:40:e9:03:e5:e5:4a:f9:42:73:ae:76:f8:86:5a:92:bc:
         eb:d7:5a:64:0f:8a:bb:1d:a0:e7:d9:78:65:06:a5:54:0c:5b:
         84:fd:d6:28:3d:fb:10:ad:6b:37:e9:37:6b:ab:3f:e5:c5:a7:
         ee:6f:01:ce:7e:65:1a:e3:0b:cb:52:ed:54:39:fc:ae:57:54:
         87:65:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 23:57:03 2026 by rpki-client