Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f85c1f13-de1c-3010-8668-f5b933a9800f.roa
File:                     f85c1f13-de1c-3010-8668-f5b933a9800f.roa (raw, json)
Hash identifier:          UEZzi2nNJ+aXoL/nYNvpr4GbLVTGTKQEq/4sMnoXoBs=
Subject key identifier:   37:BA:F0:77:F2:EF:41:8B:B8:D3:92:8E:98:73:81:B2:2D:21:1A:DF
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DBA3B1D8544E93D353DC8C500
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f85c1f13-de1c-3010-8668-f5b933a9800f.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     3738
IP address blocks:        192.250.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:1d:85:44:e9:3d:35:3d:c8:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=c8de90c1-f895-476a-bca1-4b2062226d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cc:32:2a:af:8e:7a:3f:40:21:91:e7:55:75:
                    98:4c:7b:54:43:e6:59:09:31:72:d7:0a:5d:c2:cd:
                    f2:16:de:68:62:4e:01:97:67:9d:20:2a:97:97:25:
                    3d:20:76:98:41:96:ee:2a:3d:25:3f:e3:da:1f:58:
                    a6:57:2d:43:00:b6:c7:7e:de:3b:b2:4e:23:0a:00:
                    eb:af:ca:7f:23:cf:f6:ca:00:a1:8d:ea:92:46:3f:
                    a8:3e:bd:29:4d:df:0a:03:3e:80:79:da:1d:a4:99:
                    d5:9f:aa:9b:e6:fd:e9:f2:45:c4:dd:cf:ee:b4:22:
                    3f:02:2c:02:10:7a:f5:40:33:44:90:59:7b:24:e6:
                    9c:b6:a5:5e:11:64:17:46:6a:85:41:a8:ef:b7:24:
                    fa:82:f6:c3:55:98:a0:87:05:bd:d2:16:be:3e:dc:
                    5f:c3:fc:7d:48:94:b2:97:bf:2f:be:d1:31:7b:8d:
                    be:4e:0e:4e:f5:fa:25:30:45:d9:3f:e2:36:42:31:
                    78:aa:22:e5:50:69:0d:20:7c:3b:b3:3d:44:fa:2d:
                    51:74:85:83:3c:6f:be:cf:a5:cd:ba:3f:21:3f:6f:
                    7b:da:e5:7c:72:0f:81:9e:dd:43:9d:fa:cc:d1:65:
                    22:e8:4d:4d:9b:90:82:9f:ad:bd:b8:17:c5:c8:6b:
                    df:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:F0:77:F2:EF:41:8B:B8:D3:92:8E:98:73:81:B2:2D:21:1A:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f85c1f13-de1c-3010-8668-f5b933a9800f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:76:0f:0d:9a:d4:40:4f:2b:b6:7b:51:d6:85:77:3c:cc:32:
         82:bf:3c:98:e6:c5:88:4e:19:b3:12:60:39:ed:db:b4:61:2a:
         03:75:84:b1:e7:50:55:05:a5:ec:9b:fe:97:99:a2:23:ce:d7:
         f7:ed:1d:42:28:80:28:d9:77:37:fc:e5:c6:0f:40:1c:40:e9:
         0f:ae:bb:1e:a9:12:90:fb:ab:d7:e8:77:d1:c9:a1:46:63:6b:
         50:08:34:9b:ff:bf:bc:67:98:9b:e2:20:03:98:f4:9e:e1:6a:
         f9:bc:45:bb:07:1b:dc:fc:8c:f3:5f:8e:5e:8e:38:78:58:cd:
         84:4a:65:dc:c3:53:70:5a:9b:eb:19:cf:ca:c4:c3:d1:52:37:
         ab:92:75:cc:ba:6d:75:bc:75:9c:f0:b3:52:dc:96:95:91:57:
         77:6d:1a:8d:c2:ed:a5:13:5a:06:96:2c:6a:ca:5d:24:74:f4:
         78:d1:b8:92:a4:53:95:83:a5:8c:52:7b:55:27:77:5b:79:8f:
         37:aa:b4:29:8a:a6:8f:de:66:88:f3:bd:28:05:f1:4b:de:69:
         f9:92:8c:1c:ab:34:5d:89:10:14:ef:27:ef:04:1c:19:df:07:
         12:e8:66:8a:7b:3e:18:77:f2:b8:e5:cf:70:b3:1e:29:e5:2f:
         ea:6f:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:14:04 2026 by rpki-client