Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b0e42e3f-5386-3892-bcf8-da7f0b3a0f9a.roa
File:                     b0e42e3f-5386-3892-bcf8-da7f0b3a0f9a.roa (raw, json)
Hash identifier:          CVZdJ065PtANgcDHjpgtxgxhYhvYQBbHobtGzl6RUE0=
Subject key identifier:   98:5F:C3:90:D2:CE:4D:A1:93:18:E0:C4:33:2B:66:CF:31:46:8B:65
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584F6C5821A7E71731F926C2C580
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b0e42e3f-5386-3892-bcf8-da7f0b3a0f9a.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     12025
IP address blocks:        205.235.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:21:a7:e7:17:31:f9:26:c2:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=f38988bc-ee40-443f-ae33-5bdbd46546ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8a:43:ee:fd:1a:c9:c0:73:44:3d:91:ff:07:
                    e2:c8:c0:44:42:36:64:2a:b0:9e:e1:8c:af:d2:31:
                    d6:c2:9a:d3:e1:8e:4e:37:12:1e:4c:f4:eb:8a:25:
                    e3:a7:82:7a:cb:ca:bc:d0:8d:f1:a9:6d:16:6a:0c:
                    30:c8:67:5d:a0:4a:78:a2:e4:8a:73:c3:5e:24:5b:
                    f2:3a:33:d3:6b:e6:32:39:3c:2b:4e:8e:a3:a7:5c:
                    21:58:7e:3e:f2:a7:5e:3f:c2:b6:4e:9d:ca:53:94:
                    13:12:02:fd:4b:7a:13:de:8e:ab:31:5e:52:36:dc:
                    c3:c9:e2:54:ac:96:dc:5a:7b:5b:2a:f0:61:7b:9c:
                    5a:46:7d:dd:31:ea:b7:f7:0d:cf:25:ae:c4:88:da:
                    18:be:d5:e0:d5:45:e3:d6:6a:4a:20:fb:09:c2:ae:
                    2f:a0:e2:e3:f4:a9:ff:4c:72:f1:24:0d:29:d3:65:
                    03:ac:31:a1:c0:fc:5c:a3:e4:ac:18:fb:cf:91:76:
                    0c:79:6e:68:05:2b:39:03:d1:36:ac:4a:ff:03:71:
                    49:29:5f:39:13:9a:e8:00:60:d3:dd:60:e6:4a:8d:
                    4e:df:fb:10:aa:e3:93:b3:48:30:29:b3:7a:7e:ea:
                    d0:cc:ab:61:68:be:d1:9a:e6:e7:86:5f:6e:48:49:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:C3:90:D2:CE:4D:A1:93:18:E0:C4:33:2B:66:CF:31:46:8B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/b0e42e3f-5386-3892-bcf8-da7f0b3a0f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:ef:d4:e0:4b:61:c6:3c:e5:20:99:dd:6c:63:e2:22:96:
         5f:10:d2:b5:1c:9f:2e:35:7f:1f:12:84:da:53:42:0b:82:d8:
         25:24:ad:d6:34:e9:3a:2d:82:be:ac:95:24:77:ec:5f:b4:64:
         43:56:12:ab:17:16:62:c7:85:2d:35:b1:26:1c:ea:c3:a3:ef:
         ca:01:87:a6:bb:34:17:95:b6:10:d7:21:0c:54:ce:c2:ac:24:
         51:ee:aa:1e:3f:cc:14:7a:9b:dc:2e:56:1a:06:65:cf:31:10:
         61:f7:71:aa:78:5b:58:be:6e:41:03:ec:ed:97:7f:d0:77:6a:
         e7:33:a1:50:c0:82:ba:9a:3c:8b:26:f9:d9:f7:5c:b2:b4:b9:
         94:f7:51:8b:43:12:5f:a6:b2:6c:92:e0:03:b9:5b:33:94:e0:
         b4:17:8d:ae:64:c2:1b:cf:b8:5d:36:94:46:76:c0:f8:dc:82:
         b1:4b:6b:6c:e6:89:f4:cd:cc:bf:46:95:f9:91:18:e9:57:7c:
         9b:14:df:40:d5:60:d0:dd:4e:fc:6a:5a:24:6b:6c:86:25:f4:
         cd:ed:29:31:7c:1d:d2:49:d3:84:1a:56:6a:b2:38:65:74:0d:
         60:6c:d0:8b:72:fa:0b:75:ab:db:79:ce:37:17:2c:31:66:50:
         3b:65:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:42:49 2026 by rpki-client