Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa
File:                     be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa (raw, json)
Hash identifier:          ZKMRF2K8VIcgq04vL/fvqsPMc5HOgkp9dliDdwxmIS4=
Subject key identifier:   B4:9E:1A:DD:AE:31:68:E4:0C:04:F1:57:47:63:00:41:94:0F:4E:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A95A8498CCE7FA8E5AB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        208.215.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:95:a8:49:8c:ce:7f:a8:e5:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=3fa0daff-fc05-4571-bbc6-6b767eabfe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:e1:07:a1:7a:8f:91:fc:fc:ab:34:c7:c3:
                    c6:f0:71:52:3a:06:b2:41:ed:a5:d9:2a:d1:37:8f:
                    2d:24:c8:22:39:75:f3:e1:d5:59:75:c1:36:e2:72:
                    25:2b:a8:9a:54:14:1c:5f:8f:d2:bd:f8:29:eb:c3:
                    1c:c4:57:6a:a0:dc:38:bf:ee:ab:b3:20:cb:48:4e:
                    0a:0b:f2:c2:af:ef:33:85:05:84:35:89:fa:a7:62:
                    b8:73:29:91:ef:c1:82:b5:d8:c9:ab:a7:e4:c8:82:
                    b2:c8:bc:12:a6:ef:f0:28:34:5d:1f:a0:6a:38:53:
                    7f:15:d6:a5:d7:30:22:9b:4c:c6:86:91:5c:ae:03:
                    e1:0b:e1:f5:5b:58:89:ec:41:24:a5:dc:ed:f2:7d:
                    e6:28:71:67:9b:66:e8:2b:79:63:27:17:bf:ad:b1:
                    e9:9f:e4:c7:ea:b9:2e:82:cb:51:d1:0a:22:73:fe:
                    78:03:17:78:24:03:49:e8:4e:52:9c:c9:28:17:16:
                    5e:17:5a:0f:57:68:d5:11:ce:a4:ac:9a:08:3d:d8:
                    cc:38:ea:50:65:3f:51:12:10:89:4c:bf:7f:ac:0c:
                    d3:e1:06:f4:d7:8a:c3:ec:fa:6f:80:a9:24:7e:7a:
                    84:da:c6:58:48:e2:f7:65:e2:ff:28:5c:d6:64:05:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:1A:DD:AE:31:68:E4:0C:04:F1:57:47:63:00:41:94:0F:4E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be5c43fa-696f-3b8b-95eb-d7c60ff20db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.215.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:28:7e:8a:d0:7f:5a:29:bb:65:9c:11:5c:a5:81:ab:96:
         38:83:7d:f5:7c:99:8a:38:80:fe:de:05:ec:2f:d8:45:f4:0b:
         4b:be:de:a3:6d:0e:e5:b4:12:23:b7:e1:c9:95:8a:0c:58:bf:
         1b:00:ae:d5:d8:09:63:3a:9e:c0:c0:da:3b:4c:42:b0:5f:b8:
         cb:15:ff:24:41:67:f3:43:8c:af:4d:53:07:8b:38:2e:d2:96:
         98:fb:01:d8:6d:6d:bd:16:1e:41:f3:a6:c6:e7:2a:b1:38:bf:
         4a:f0:03:c9:47:5b:93:0b:0e:60:f7:3d:27:11:1c:e1:6e:d5:
         12:12:32:bc:da:31:75:33:bb:ef:ea:3c:08:aa:8d:b3:dd:27:
         5d:a8:db:b0:b4:65:63:f6:99:dd:2c:d3:89:d8:7d:f3:4b:f8:
         41:7b:f7:b8:5b:5e:b3:16:cf:73:50:97:97:3e:da:85:a2:27:
         09:f3:da:9d:88:7e:b5:28:21:44:b6:1d:d5:8a:6b:60:79:2b:
         84:b3:c9:d8:d3:12:cc:1a:1a:eb:22:23:d1:54:f3:b7:ae:e2:
         64:7c:10:40:3b:1b:83:18:33:f1:5d:bf:a6:b5:27:80:2f:7a:
         6a:30:53:6e:2a:06:27:2f:1c:7e:d1:0e:9b:03:e3:ac:eb:01:
         ab:c8:c6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:12 2026 by rpki-client