Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa
File:                     f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa (raw, json)
Hash identifier:          2X09K7jIQbM2ZaLyZZLG88biC4Qpb0IEn0JfW6JPY3M=
Subject key identifier:   0E:46:F9:56:6D:2A:4F:57:AB:EC:EB:03:FA:A5:76:67:CE:AC:DF:97
Certificate issuer:       /CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655
Certificate serial:       010D0C9F4328584DEB1602E4053985F06337BE80
Authority key identifier: 8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     7328
IP address blocks:        159.14.0.0/16 maxlen: 16
                          159.14.197.0/24 maxlen: 24
                          159.14.224.0/21 maxlen: 21
                          159.14.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:16:02:e4:05:39:85:f0:63:37:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=e6b9e0bc-7a8d-45fa-b8d9-bcd5e162e07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:1a:39:0f:ae:66:c7:1e:ac:d3:b0:ea:f9:
                    fd:b6:47:c5:2c:44:83:6c:38:ce:a2:03:be:21:7d:
                    0d:fc:35:be:40:23:c4:03:f1:b0:14:3e:92:1b:f1:
                    55:83:85:d3:ca:3e:5e:10:ab:d1:04:6b:aa:69:30:
                    89:ab:21:ee:be:83:af:37:5f:45:d7:88:13:53:d2:
                    8f:cf:73:99:c0:63:83:f7:b8:c5:f4:97:0e:87:9b:
                    6a:1e:51:19:81:b9:7f:99:70:e6:f9:fa:86:d6:f9:
                    0a:08:5f:92:95:5b:dd:50:41:a7:4a:34:e6:be:92:
                    d3:95:88:3e:61:37:bf:f5:e0:0c:32:79:31:30:07:
                    38:20:ce:17:23:9e:c3:f3:3c:f2:18:01:63:53:21:
                    7c:8a:1f:5d:31:ba:cf:a1:d3:a2:9d:55:a2:32:1a:
                    4d:24:e4:92:ad:68:53:f9:a5:4a:35:eb:bf:98:d6:
                    74:e0:a5:84:77:77:45:30:19:98:2e:77:64:67:e2:
                    21:b5:19:d0:4d:5e:7e:c5:b9:e9:a7:34:bc:81:53:
                    0a:a3:83:16:53:97:71:21:8d:9e:7a:14:14:db:94:
                    a3:b5:d9:1f:ed:f6:cb:5f:36:0a:23:f7:25:9b:d4:
                    1b:df:3e:51:19:22:ae:52:1b:d2:c5:ac:8f:8c:70:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:F9:56:6D:2A:4F:57:AB:EC:EB:03:FA:A5:76:67:CE:AC:DF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/f99a607f-bc9f-36d6-95d3-6f2d47d28356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.crl

            X509v3 Authority Key Identifier:
                keyid:8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:8b:85:5f:99:03:50:2d:66:92:6a:0e:b4:65:ad:c4:5d:
         8c:8f:e3:7a:50:fb:8c:72:eb:61:1d:99:a8:98:e1:8e:a5:4e:
         e8:57:d4:c9:f0:03:d0:79:68:31:e3:e6:9a:cd:c2:72:e7:d9:
         a5:57:74:67:11:6d:5b:f4:09:49:43:1c:8c:68:15:b7:60:ac:
         4e:b6:ce:bc:77:47:70:6c:6a:15:10:c3:ed:7c:b0:6a:cc:06:
         36:f6:b3:8c:a0:e7:08:3c:96:7e:e5:05:3c:6c:4d:8f:62:cb:
         f1:10:32:a9:79:8b:b4:cc:d8:63:7b:e0:3e:21:c6:7f:3a:89:
         01:1d:69:6d:1b:f9:e3:11:59:53:8a:a5:15:dd:8b:67:06:2f:
         80:dc:5b:77:f5:47:cf:4a:26:94:38:05:24:f6:55:1c:23:e0:
         54:5d:51:90:bf:8e:79:23:75:77:ca:b5:b1:96:36:80:b0:6a:
         b0:a5:f1:9c:91:78:f8:a5:b8:5e:72:19:16:aa:ab:87:2b:75:
         15:d4:8a:53:ea:03:a3:b0:91:5f:36:d2:ad:5e:2a:00:fc:3f:
         4c:04:ce:f0:49:38:e7:b8:9a:f6:5c:53:d1:f4:04:c4:7f:ac:
         b9:b3:fc:8d:7b:35:96:b9:c9:e1:ee:19:d7:b0:76:5f:95:2a:
         6d:25:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:08:12 2026 by rpki-client